Oct 2 19:13:45.018198 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:13:45.018229 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:13:45.018244 kernel: BIOS-provided physical RAM map: Oct 2 19:13:45.018254 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:13:45.018263 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:13:45.018273 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:13:45.018288 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:13:45.018299 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:13:45.018311 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:13:45.018321 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:13:45.018332 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:13:45.018342 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:13:45.018353 kernel: NX (Execute Disable) protection: active Oct 2 19:13:45.018364 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:13:45.018380 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 19:13:45.018392 kernel: random: crng init done Oct 2 19:13:45.018404 kernel: SMBIOS 3.1.0 present. Oct 2 19:13:45.018416 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:13:45.018427 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:13:45.018439 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:13:45.018450 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:13:45.018462 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:13:45.018475 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:13:45.018487 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:13:45.018498 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:13:45.018510 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:13:45.018523 kernel: tsc: Detected 2593.905 MHz processor Oct 2 19:13:45.018535 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:13:45.018547 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:13:45.023162 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:13:45.023187 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:13:45.023199 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:13:45.023216 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:13:45.023228 kernel: Using GB pages for direct mapping Oct 2 19:13:45.023239 kernel: Secure boot disabled Oct 2 19:13:45.023251 kernel: ACPI: Early table checksum verification disabled Oct 2 19:13:45.023263 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:13:45.023275 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023286 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023299 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:13:45.023317 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:13:45.023330 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023341 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023352 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023365 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023377 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023393 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023405 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:13:45.023418 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:13:45.023431 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:13:45.023444 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:13:45.023456 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:13:45.023469 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:13:45.023482 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:13:45.023497 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:13:45.023510 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:13:45.023523 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:13:45.023535 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:13:45.023548 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:13:45.023573 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:13:45.023587 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:13:45.023599 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:13:45.023612 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:13:45.023628 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:13:45.023641 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:13:45.023653 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:13:45.023666 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:13:45.023679 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:13:45.023692 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:13:45.023704 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:13:45.023717 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:13:45.023730 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:13:45.023745 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:13:45.023759 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:13:45.023772 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:13:45.023785 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:13:45.023797 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:13:45.023810 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:13:45.023823 kernel: Zone ranges: Oct 2 19:13:45.023835 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:13:45.023848 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:13:45.023863 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:13:45.023876 kernel: Movable zone start for each node Oct 2 19:13:45.023888 kernel: Early memory node ranges Oct 2 19:13:45.023901 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:13:45.023914 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:13:45.023927 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:13:45.023939 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:13:45.023953 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:13:45.023965 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:13:45.023981 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:13:45.023994 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:13:45.024006 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:13:45.024019 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:13:45.024032 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:13:45.024045 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:13:45.024058 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:13:45.024070 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:13:45.024083 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:13:45.024098 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:13:45.024111 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:13:45.024124 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:13:45.024137 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:13:45.024150 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:13:45.024163 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:13:45.024175 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:13:45.024188 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:13:45.024200 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:13:45.024216 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:13:45.024228 kernel: Policy zone: Normal Oct 2 19:13:45.024242 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:13:45.024255 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:13:45.024268 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:13:45.024281 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:13:45.024294 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:13:45.024307 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:13:45.024323 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:13:45.024336 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:13:45.024358 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:13:45.024374 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:13:45.024388 kernel: rcu: RCU event tracing is enabled. Oct 2 19:13:45.024402 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:13:45.024415 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:13:45.024429 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:13:45.024443 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:13:45.024456 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:13:45.024469 kernel: Using NULL legacy PIC Oct 2 19:13:45.024486 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:13:45.024499 kernel: Console: colour dummy device 80x25 Oct 2 19:13:45.024513 kernel: printk: console [tty1] enabled Oct 2 19:13:45.024526 kernel: printk: console [ttyS0] enabled Oct 2 19:13:45.024539 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:13:45.024555 kernel: ACPI: Core revision 20210730 Oct 2 19:13:45.024575 kernel: Failed to register legacy timer interrupt Oct 2 19:13:45.024587 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:13:45.024600 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:13:45.024614 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Oct 2 19:13:45.024628 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:13:45.024641 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:13:45.024655 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:13:45.024668 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:13:45.024681 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:13:45.024697 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:13:45.024710 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:13:45.024723 kernel: RETBleed: Vulnerable Oct 2 19:13:45.024737 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:13:45.024750 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:13:45.024764 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:13:45.024777 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:13:45.024790 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:13:45.024804 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:13:45.024817 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:13:45.024834 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:13:45.024847 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:13:45.024861 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:13:45.024874 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:13:45.024888 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:13:45.024901 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:13:45.024914 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:13:45.024928 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:13:45.024942 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:13:45.024956 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:13:45.024969 kernel: LSM: Security Framework initializing Oct 2 19:13:45.024982 kernel: SELinux: Initializing. Oct 2 19:13:45.024998 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:13:45.025012 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:13:45.025026 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:13:45.025039 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:13:45.025053 kernel: signal: max sigframe size: 3632 Oct 2 19:13:45.025066 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:13:45.025080 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:13:45.025093 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:13:45.025107 kernel: x86: Booting SMP configuration: Oct 2 19:13:45.025120 kernel: .... node #0, CPUs: #1 Oct 2 19:13:45.025137 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:13:45.025151 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:13:45.025165 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:13:45.025179 kernel: smpboot: Max logical packages: 1 Oct 2 19:13:45.025192 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:13:45.025206 kernel: devtmpfs: initialized Oct 2 19:13:45.025219 kernel: x86/mm: Memory block size: 128MB Oct 2 19:13:45.025233 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:13:45.025249 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:13:45.025263 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:13:45.025277 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:13:45.025290 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:13:45.025304 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:13:45.025318 kernel: audit: type=2000 audit(1696274023.023:1): state=initialized audit_enabled=0 res=1 Oct 2 19:13:45.025331 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:13:45.025344 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:13:45.025358 kernel: cpuidle: using governor menu Oct 2 19:13:45.025375 kernel: ACPI: bus type PCI registered Oct 2 19:13:45.025388 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:13:45.025402 kernel: dca service started, version 1.12.1 Oct 2 19:13:45.025415 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:13:45.025429 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:13:45.025443 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:13:45.025456 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:13:45.025470 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:13:45.025483 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:13:45.025500 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:13:45.025513 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:13:45.025527 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:13:45.025540 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:13:45.025554 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:13:45.027504 kernel: ACPI: Interpreter enabled Oct 2 19:13:45.027519 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:13:45.027531 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:13:45.027544 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:13:45.027558 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:13:45.027585 kernel: iommu: Default domain type: Translated Oct 2 19:13:45.027593 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:13:45.027601 kernel: vgaarb: loaded Oct 2 19:13:45.027611 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:13:45.027618 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:13:45.027626 kernel: PTP clock support registered Oct 2 19:13:45.027636 kernel: Registered efivars operations Oct 2 19:13:45.027643 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:13:45.027651 kernel: PCI: System does not support PCI Oct 2 19:13:45.027663 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:13:45.027670 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:13:45.027681 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:13:45.027689 kernel: pnp: PnP ACPI init Oct 2 19:13:45.027697 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:13:45.027706 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:13:45.027714 kernel: NET: Registered PF_INET protocol family Oct 2 19:13:45.027725 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:13:45.027735 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:13:45.027744 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:13:45.027753 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:13:45.027760 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:13:45.027771 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:13:45.027778 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:13:45.027785 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:13:45.027792 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:13:45.027800 kernel: NET: Registered PF_XDP protocol family Oct 2 19:13:45.027812 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:13:45.027820 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:13:45.027830 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:13:45.027838 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:13:45.027846 kernel: Initialise system trusted keyrings Oct 2 19:13:45.027855 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:13:45.027862 kernel: Key type asymmetric registered Oct 2 19:13:45.027872 kernel: Asymmetric key parser 'x509' registered Oct 2 19:13:45.027880 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:13:45.027889 kernel: io scheduler mq-deadline registered Oct 2 19:13:45.027896 kernel: io scheduler kyber registered Oct 2 19:13:45.027904 kernel: io scheduler bfq registered Oct 2 19:13:45.027911 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:13:45.027918 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:13:45.027925 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:13:45.027933 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:13:45.027940 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:13:45.028061 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:13:45.028152 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:13:44 UTC (1696274024) Oct 2 19:13:45.028233 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:13:45.028246 kernel: fail to initialize ptp_kvm Oct 2 19:13:45.028254 kernel: intel_pstate: CPU model not supported Oct 2 19:13:45.028263 kernel: efifb: probing for efifb Oct 2 19:13:45.028272 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:13:45.028279 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:13:45.028289 kernel: efifb: scrolling: redraw Oct 2 19:13:45.028299 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:13:45.028310 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:13:45.028317 kernel: fb0: EFI VGA frame buffer device Oct 2 19:13:45.028325 kernel: pstore: Registered efi as persistent store backend Oct 2 19:13:45.028335 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:13:45.028342 kernel: Segment Routing with IPv6 Oct 2 19:13:45.028351 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:13:45.028360 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:13:45.028367 kernel: Key type dns_resolver registered Oct 2 19:13:45.028376 kernel: IPI shorthand broadcast: enabled Oct 2 19:13:45.028383 kernel: sched_clock: Marking stable (742965800, 20955700)->(943310500, -179389000) Oct 2 19:13:45.028391 kernel: registered taskstats version 1 Oct 2 19:13:45.028400 kernel: Loading compiled-in X.509 certificates Oct 2 19:13:45.028409 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:13:45.028416 kernel: Key type .fscrypt registered Oct 2 19:13:45.028426 kernel: Key type fscrypt-provisioning registered Oct 2 19:13:45.028434 kernel: pstore: Using crash dump compression: deflate Oct 2 19:13:45.028445 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:13:45.028453 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:13:45.028461 kernel: ima: No architecture policies found Oct 2 19:13:45.028471 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:13:45.028478 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:13:45.028487 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:13:45.028496 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:13:45.028503 kernel: Run /init as init process Oct 2 19:13:45.028513 kernel: with arguments: Oct 2 19:13:45.028521 kernel: /init Oct 2 19:13:45.028530 kernel: with environment: Oct 2 19:13:45.028541 kernel: HOME=/ Oct 2 19:13:45.028549 kernel: TERM=linux Oct 2 19:13:45.028567 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:13:45.028579 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:13:45.028590 systemd[1]: Detected virtualization microsoft. Oct 2 19:13:45.028601 systemd[1]: Detected architecture x86-64. Oct 2 19:13:45.028612 systemd[1]: Running in initrd. Oct 2 19:13:45.028623 systemd[1]: No hostname configured, using default hostname. Oct 2 19:13:45.028631 systemd[1]: Hostname set to . Oct 2 19:13:45.028640 systemd[1]: Initializing machine ID from random generator. Oct 2 19:13:45.028650 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:13:45.028658 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:13:45.028668 systemd[1]: Reached target cryptsetup.target. Oct 2 19:13:45.028676 systemd[1]: Reached target paths.target. Oct 2 19:13:45.028685 systemd[1]: Reached target slices.target. Oct 2 19:13:45.028696 systemd[1]: Reached target swap.target. Oct 2 19:13:45.028704 systemd[1]: Reached target timers.target. Oct 2 19:13:45.028715 systemd[1]: Listening on iscsid.socket. Oct 2 19:13:45.028723 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:13:45.028733 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:13:45.028742 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:13:45.028750 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:13:45.028762 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:13:45.028770 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:13:45.028781 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:13:45.028788 systemd[1]: Reached target sockets.target. Oct 2 19:13:45.028798 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:13:45.028807 systemd[1]: Finished network-cleanup.service. Oct 2 19:13:45.028815 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:13:45.028826 systemd[1]: Starting systemd-journald.service... Oct 2 19:13:45.028833 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:13:45.028846 systemd[1]: Starting systemd-resolved.service... Oct 2 19:13:45.028854 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:13:45.028863 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:13:45.028875 systemd-journald[183]: Journal started Oct 2 19:13:45.028923 systemd-journald[183]: Runtime Journal (/run/log/journal/3af7959caa32455b9a309a5db5e3c423) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:13:45.025849 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:13:45.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.048653 kernel: audit: type=1130 audit(1696274025.033:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.048687 systemd[1]: Started systemd-journald.service. Oct 2 19:13:45.057267 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:13:45.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.078239 kernel: audit: type=1130 audit(1696274025.056:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.078274 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:13:45.080899 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:13:45.085229 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:13:45.085243 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:13:45.085276 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:13:45.129487 kernel: Bridge firewalling registered Oct 2 19:13:45.129524 kernel: audit: type=1130 audit(1696274025.080:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.129542 kernel: SCSI subsystem initialized Oct 2 19:13:45.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.089459 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:13:45.106856 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:13:45.125309 systemd[1]: Started systemd-resolved.service. Oct 2 19:13:45.136468 systemd[1]: Reached target nss-lookup.target. Oct 2 19:13:45.153866 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:13:45.141437 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:13:45.150236 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:13:45.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.169955 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:13:45.195935 kernel: audit: type=1130 audit(1696274025.124:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.195967 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:13:45.195981 kernel: audit: type=1130 audit(1696274025.129:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.195993 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:13:45.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.194446 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:13:45.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.201774 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:13:45.225647 kernel: audit: type=1130 audit(1696274025.200:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.225676 kernel: audit: type=1130 audit(1696274025.214:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.214798 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:13:45.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.241591 kernel: audit: type=1130 audit(1696274025.229:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.230446 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:13:45.244973 dracut-cmdline[202]: dracut-dracut-053 Oct 2 19:13:45.246895 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:13:45.261392 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:13:45.274822 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:13:45.292395 kernel: audit: type=1130 audit(1696274025.276:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.312579 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:13:45.325582 kernel: iscsi: registered transport (tcp) Oct 2 19:13:45.349885 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:13:45.349945 kernel: QLogic iSCSI HBA Driver Oct 2 19:13:45.378580 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:13:45.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.384172 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:13:45.433583 kernel: raid6: avx512x4 gen() 18687 MB/s Oct 2 19:13:45.453577 kernel: raid6: avx512x4 xor() 8718 MB/s Oct 2 19:13:45.473575 kernel: raid6: avx512x2 gen() 18687 MB/s Oct 2 19:13:45.494578 kernel: raid6: avx512x2 xor() 29065 MB/s Oct 2 19:13:45.514578 kernel: raid6: avx512x1 gen() 18697 MB/s Oct 2 19:13:45.534576 kernel: raid6: avx512x1 xor() 26919 MB/s Oct 2 19:13:45.554576 kernel: raid6: avx2x4 gen() 18619 MB/s Oct 2 19:13:45.574573 kernel: raid6: avx2x4 xor() 8114 MB/s Oct 2 19:13:45.594572 kernel: raid6: avx2x2 gen() 18653 MB/s Oct 2 19:13:45.614578 kernel: raid6: avx2x2 xor() 22243 MB/s Oct 2 19:13:45.634572 kernel: raid6: avx2x1 gen() 14198 MB/s Oct 2 19:13:45.654573 kernel: raid6: avx2x1 xor() 19376 MB/s Oct 2 19:13:45.674578 kernel: raid6: sse2x4 gen() 11680 MB/s Oct 2 19:13:45.694572 kernel: raid6: sse2x4 xor() 7244 MB/s Oct 2 19:13:45.714574 kernel: raid6: sse2x2 gen() 12982 MB/s Oct 2 19:13:45.735578 kernel: raid6: sse2x2 xor() 7709 MB/s Oct 2 19:13:45.754570 kernel: raid6: sse2x1 gen() 11630 MB/s Oct 2 19:13:45.777021 kernel: raid6: sse2x1 xor() 5926 MB/s Oct 2 19:13:45.777042 kernel: raid6: using algorithm avx512x1 gen() 18697 MB/s Oct 2 19:13:45.777056 kernel: raid6: .... xor() 26919 MB/s, rmw enabled Oct 2 19:13:45.784195 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:13:45.799583 kernel: xor: automatically using best checksumming function avx Oct 2 19:13:45.894587 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:13:45.902175 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:13:45.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.906000 audit: BPF prog-id=7 op=LOAD Oct 2 19:13:45.906000 audit: BPF prog-id=8 op=LOAD Oct 2 19:13:45.907342 systemd[1]: Starting systemd-udevd.service... Oct 2 19:13:45.920890 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:13:45.925448 systemd[1]: Started systemd-udevd.service. Oct 2 19:13:45.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.932740 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:13:45.949117 dracut-pre-trigger[404]: rd.md=0: removing MD RAID activation Oct 2 19:13:45.980473 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:13:45.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:45.985841 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:13:46.020472 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:13:46.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:46.081577 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:13:46.099590 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:13:46.106044 kernel: AES CTR mode by8 optimization enabled Oct 2 19:13:46.106084 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:13:46.116581 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:13:46.142592 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:13:46.148373 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:13:46.152579 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:13:46.158700 kernel: scsi host1: storvsc_host_t Oct 2 19:13:46.158819 kernel: scsi host0: storvsc_host_t Oct 2 19:13:46.164327 kernel: scsi 1:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:13:46.170582 kernel: scsi 1:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:13:46.170627 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:13:46.181685 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:13:46.193332 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:13:46.193379 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:13:46.206237 kernel: sr 1:0:0:2: [sr0] scsi-1 drive Oct 2 19:13:46.206455 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:13:46.215658 kernel: sr 1:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:13:46.224651 kernel: sd 1:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:13:46.224843 kernel: sd 1:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:13:46.228431 kernel: sd 1:0:0:0: [sda] Write Protect is off Oct 2 19:13:46.228641 kernel: sd 1:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:13:46.234579 kernel: sd 1:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:13:46.240576 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:13:46.245249 kernel: sd 1:0:0:0: [sda] Attached SCSI disk Oct 2 19:13:46.367603 kernel: hv_netvsc 000d3ad7-dc53-000d-3ad7-dc53000d3ad7 eth0: VF slot 1 added Oct 2 19:13:46.376693 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:13:46.382579 kernel: hv_pci 73ac9491-7301-4bf7-a842-d1f3544c0329: PCI VMBus probing: Using version 0x10004 Oct 2 19:13:46.393051 kernel: hv_pci 73ac9491-7301-4bf7-a842-d1f3544c0329: PCI host bridge to bus 7301:00 Oct 2 19:13:46.393210 kernel: pci_bus 7301:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:13:46.393345 kernel: pci_bus 7301:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:13:46.405009 kernel: pci 7301:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:13:46.414485 kernel: pci 7301:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:13:46.429745 kernel: pci 7301:00:02.0: enabling Extended Tags Oct 2 19:13:46.446542 kernel: pci 7301:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7301:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:13:46.446758 kernel: pci_bus 7301:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:13:46.446885 kernel: pci 7301:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:13:46.549584 kernel: mlx5_core 7301:00:02.0: firmware version: 14.30.1224 Oct 2 19:13:46.684446 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:13:46.692725 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (444) Oct 2 19:13:46.709706 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:13:46.718919 kernel: mlx5_core 7301:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:13:46.855540 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:13:46.866928 kernel: mlx5_core 7301:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:13:46.867149 kernel: mlx5_core 7301:00:02.0: mlx5e_tc_post_act_init:40:(pid 188): firmware level support is missing Oct 2 19:13:46.870279 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:13:46.884250 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:13:46.890684 kernel: hv_netvsc 000d3ad7-dc53-000d-3ad7-dc53000d3ad7 eth0: VF registering: eth1 Oct 2 19:13:46.890844 kernel: mlx5_core 7301:00:02.0 eth1: joined to eth0 Oct 2 19:13:46.897240 systemd[1]: Starting disk-uuid.service... Oct 2 19:13:46.914024 kernel: mlx5_core 7301:00:02.0 enP29441s1: renamed from eth1 Oct 2 19:13:46.914259 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:13:46.922588 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:13:47.930585 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:13:47.930747 disk-uuid[551]: The operation has completed successfully. Oct 2 19:13:48.004322 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:13:48.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.004421 systemd[1]: Finished disk-uuid.service. Oct 2 19:13:48.017124 systemd[1]: Starting verity-setup.service... Oct 2 19:13:48.053721 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:13:48.340046 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:13:48.345201 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:13:48.348793 systemd[1]: Finished verity-setup.service. Oct 2 19:13:48.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.430149 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:13:48.428939 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:13:48.433041 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:13:48.437069 systemd[1]: Starting ignition-setup.service... Oct 2 19:13:48.441427 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:13:48.465543 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:13:48.465586 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:13:48.465603 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:13:48.510888 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:13:48.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.515000 audit: BPF prog-id=9 op=LOAD Oct 2 19:13:48.519982 systemd[1]: Starting systemd-networkd.service... Oct 2 19:13:48.528452 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:13:48.544223 systemd-networkd[796]: lo: Link UP Oct 2 19:13:48.544232 systemd-networkd[796]: lo: Gained carrier Oct 2 19:13:48.548462 systemd-networkd[796]: Enumeration completed Oct 2 19:13:48.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.548539 systemd[1]: Started systemd-networkd.service. Oct 2 19:13:48.552963 systemd[1]: Reached target network.target. Oct 2 19:13:48.558288 systemd-networkd[796]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:13:48.559174 systemd[1]: Starting iscsiuio.service... Oct 2 19:13:48.569861 systemd[1]: Started iscsiuio.service. Oct 2 19:13:48.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.574325 systemd[1]: Starting iscsid.service... Oct 2 19:13:48.578526 iscsid[805]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:48.578526 iscsid[805]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:13:48.578526 iscsid[805]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:13:48.578526 iscsid[805]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:13:48.596000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.602940 iscsid[805]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:13:48.602940 iscsid[805]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:13:48.582634 systemd[1]: Started iscsid.service. Oct 2 19:13:48.598296 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:13:48.621838 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:13:48.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.625765 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:13:48.627068 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:13:48.627484 systemd[1]: Reached target remote-fs.target. Oct 2 19:13:48.632374 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:13:48.643017 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:13:48.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.652579 kernel: mlx5_core 7301:00:02.0 enP29441s1: Link up Oct 2 19:13:48.682395 systemd[1]: Finished ignition-setup.service. Oct 2 19:13:48.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:48.685433 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:13:48.730919 kernel: hv_netvsc 000d3ad7-dc53-000d-3ad7-dc53000d3ad7 eth0: Data path switched to VF: enP29441s1 Oct 2 19:13:48.731123 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:13:48.731299 systemd-networkd[796]: enP29441s1: Link UP Oct 2 19:13:48.731429 systemd-networkd[796]: eth0: Link UP Oct 2 19:13:48.733382 systemd-networkd[796]: eth0: Gained carrier Oct 2 19:13:48.742730 systemd-networkd[796]: enP29441s1: Gained carrier Oct 2 19:13:48.761637 systemd-networkd[796]: eth0: DHCPv4 address 10.200.8.4/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:13:50.368820 systemd-networkd[796]: eth0: Gained IPv6LL Oct 2 19:13:51.599037 ignition[820]: Ignition 2.14.0 Oct 2 19:13:51.599052 ignition[820]: Stage: fetch-offline Oct 2 19:13:51.599140 ignition[820]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:51.599189 ignition[820]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:51.715599 ignition[820]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:51.715801 ignition[820]: parsed url from cmdline: "" Oct 2 19:13:51.715808 ignition[820]: no config URL provided Oct 2 19:13:51.715814 ignition[820]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:13:51.715822 ignition[820]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:13:51.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.722760 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:13:51.749866 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:13:51.749898 kernel: audit: type=1130 audit(1696274031.726:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.715828 ignition[820]: failed to fetch config: resource requires networking Oct 2 19:13:51.727966 systemd[1]: Starting ignition-fetch.service... Oct 2 19:13:51.716126 ignition[820]: Ignition finished successfully Oct 2 19:13:51.753337 ignition[826]: Ignition 2.14.0 Oct 2 19:13:51.753343 ignition[826]: Stage: fetch Oct 2 19:13:51.753436 ignition[826]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:51.753454 ignition[826]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:51.756192 ignition[826]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:51.757215 ignition[826]: parsed url from cmdline: "" Oct 2 19:13:51.757221 ignition[826]: no config URL provided Oct 2 19:13:51.757237 ignition[826]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:13:51.757254 ignition[826]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:13:51.757284 ignition[826]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:13:51.780028 ignition[826]: GET result: OK Oct 2 19:13:51.780105 ignition[826]: config has been read from IMDS userdata Oct 2 19:13:51.781452 ignition[826]: parsing config with SHA512: f0737200e1c58f8bcffa63592fd1fbcc53bd03eacc9d1b91b252947b4d1218f366cecb4ae3981f8be499f064d53062a5b9034741e7a4bd7ac53e214d3506e847 Oct 2 19:13:51.801331 unknown[826]: fetched base config from "system" Oct 2 19:13:51.801343 unknown[826]: fetched base config from "system" Oct 2 19:13:51.801350 unknown[826]: fetched user config from "azure" Oct 2 19:13:51.808258 ignition[826]: fetch: fetch complete Oct 2 19:13:51.808267 ignition[826]: fetch: fetch passed Oct 2 19:13:51.808324 ignition[826]: Ignition finished successfully Oct 2 19:13:51.814532 systemd[1]: Finished ignition-fetch.service. Oct 2 19:13:51.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.832923 systemd[1]: Starting ignition-kargs.service... Oct 2 19:13:51.837670 kernel: audit: type=1130 audit(1696274031.816:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.844597 ignition[832]: Ignition 2.14.0 Oct 2 19:13:51.844608 ignition[832]: Stage: kargs Oct 2 19:13:51.844730 ignition[832]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:51.844756 ignition[832]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:51.852809 ignition[832]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:51.857423 ignition[832]: kargs: kargs passed Oct 2 19:13:51.857479 ignition[832]: Ignition finished successfully Oct 2 19:13:51.861869 systemd[1]: Finished ignition-kargs.service. Oct 2 19:13:51.864657 systemd[1]: Starting ignition-disks.service... Oct 2 19:13:51.882223 kernel: audit: type=1130 audit(1696274031.863:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.878671 ignition[838]: Ignition 2.14.0 Oct 2 19:13:51.878678 ignition[838]: Stage: disks Oct 2 19:13:51.878813 ignition[838]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:51.878839 ignition[838]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:51.889507 ignition[838]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:51.894722 ignition[838]: disks: disks passed Oct 2 19:13:51.894772 ignition[838]: Ignition finished successfully Oct 2 19:13:51.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.896142 systemd[1]: Finished ignition-disks.service. Oct 2 19:13:51.916385 kernel: audit: type=1130 audit(1696274031.897:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.898370 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:13:51.912512 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:13:51.916377 systemd[1]: Reached target local-fs.target. Oct 2 19:13:51.920277 systemd[1]: Reached target sysinit.target. Oct 2 19:13:51.924072 systemd[1]: Reached target basic.target. Oct 2 19:13:51.933588 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:13:51.986018 systemd-fsck[846]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:13:51.991116 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:13:52.011684 kernel: audit: type=1130 audit(1696274031.996:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:51.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.011176 systemd[1]: Mounting sysroot.mount... Oct 2 19:13:52.032579 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:13:52.033088 systemd[1]: Mounted sysroot.mount. Oct 2 19:13:52.036708 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:13:52.099898 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:13:52.105661 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:13:52.109969 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:13:52.110004 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:13:52.119038 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:13:52.149285 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:52.152931 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:13:52.166579 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (857) Oct 2 19:13:52.176368 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:13:52.176401 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:13:52.176420 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:13:52.183652 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:52.197935 initrd-setup-root[862]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:13:52.216628 initrd-setup-root[888]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:13:52.234003 initrd-setup-root[896]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:13:52.238625 initrd-setup-root[904]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:13:52.643907 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:13:52.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.649635 systemd[1]: Starting ignition-mount.service... Oct 2 19:13:52.662450 kernel: audit: type=1130 audit(1696274032.648:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.665881 systemd[1]: Starting sysroot-boot.service... Oct 2 19:13:52.670283 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:52.670419 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:13:52.692302 ignition[924]: INFO : Ignition 2.14.0 Oct 2 19:13:52.692302 ignition[924]: INFO : Stage: mount Oct 2 19:13:52.696240 ignition[924]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:52.696240 ignition[924]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:52.707372 ignition[924]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:52.707372 ignition[924]: INFO : mount: mount passed Oct 2 19:13:52.707372 ignition[924]: INFO : Ignition finished successfully Oct 2 19:13:52.728953 kernel: audit: type=1130 audit(1696274032.706:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.704161 systemd[1]: Finished sysroot-boot.service. Oct 2 19:13:52.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:52.707759 systemd[1]: Finished ignition-mount.service. Oct 2 19:13:52.744053 kernel: audit: type=1130 audit(1696274032.728:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:53.582697 coreos-metadata[856]: Oct 02 19:13:53.582 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:13:53.598993 coreos-metadata[856]: Oct 02 19:13:53.598 INFO Fetch successful Oct 2 19:13:53.634320 coreos-metadata[856]: Oct 02 19:13:53.634 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:13:53.652463 coreos-metadata[856]: Oct 02 19:13:53.652 INFO Fetch successful Oct 2 19:13:53.669544 coreos-metadata[856]: Oct 02 19:13:53.669 INFO wrote hostname ci-3510.3.0-a-f1fdbe70e6 to /sysroot/etc/hostname Oct 2 19:13:53.675181 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:13:53.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:53.680589 systemd[1]: Starting ignition-files.service... Oct 2 19:13:53.692609 kernel: audit: type=1130 audit(1696274033.679:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:53.698163 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:13:53.709580 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (935) Oct 2 19:13:53.709615 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:13:53.718075 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:13:53.718100 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:13:53.727270 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:13:53.740664 ignition[954]: INFO : Ignition 2.14.0 Oct 2 19:13:53.740664 ignition[954]: INFO : Stage: files Oct 2 19:13:53.746342 ignition[954]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:13:53.746342 ignition[954]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:13:53.759433 ignition[954]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:13:53.778047 ignition[954]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:13:53.781079 ignition[954]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:13:53.781079 ignition[954]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:13:53.807670 ignition[954]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:13:53.811746 ignition[954]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:13:53.811746 ignition[954]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:13:53.811746 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:13:53.811746 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:13:53.808256 unknown[954]: wrote ssh authorized keys file for user: core Oct 2 19:13:54.061002 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:13:54.239253 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:13:54.247459 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:13:54.247459 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:13:54.247459 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-amd64.tar.gz: attempt #1 Oct 2 19:13:54.520875 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:13:54.578168 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: 961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df Oct 2 19:13:54.585780 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:13:54.585780 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:54.594406 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:13:54.777443 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:13:56.513938 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 43b8f213f1732c092e34008d5334e6622a6603f7ec5890c395ac911d50069d0dc11a81fa38436df40fc875a10fee6ee13aa285c017f1de210171065e847c99c5 Oct 2 19:13:56.522001 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:13:56.522001 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:13:56.522001 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:13:56.710185 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:14:00.614432 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 82b36a0b83a1d48ef1f70e3ed2a263b3ce935304cdc0606d194b290217fb04f98628b0d82e200b51ccf5c05c718b2476274ae710bb143fffe28dc6bbf8407d54 Oct 2 19:14:00.623483 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:14:00.623483 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:14:00.623483 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:14:00.741761 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:14:02.643125 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 9006cd791c99f5421c09ae8f6029fdd0ea4608909f590dea41ba4dd5c500440272e9ece21489d1f192966717987251ded5394ea1dd4c5d091b700ac1c8cfa392 Oct 2 19:14:02.651144 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:14:02.651144 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:14:02.651144 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:14:02.651144 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:14:02.651144 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.2/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:14:03.032758 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:14:03.415545 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:14:03.415545 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2450543961" Oct 2 19:14:03.432742 ignition[954]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2450543961": device or resource busy Oct 2 19:14:03.432742 ignition[954]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2450543961", trying btrfs: device or resource busy Oct 2 19:14:03.432742 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2450543961" Oct 2 19:14:03.478981 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (959) Oct 2 19:14:03.445700 systemd[1]: mnt-oem2450543961.mount: Deactivated successfully. Oct 2 19:14:03.493295 kernel: audit: type=1130 audit(1696274043.478:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2450543961" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem2450543961" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem2450543961" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3769117032" Oct 2 19:14:03.493383 ignition[954]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3769117032": device or resource busy Oct 2 19:14:03.493383 ignition[954]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3769117032", trying btrfs: device or resource busy Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3769117032" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3769117032" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem3769117032" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem3769117032" Oct 2 19:14:03.493383 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:14:03.493383 ignition[954]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:14:03.493383 ignition[954]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:14:03.636737 kernel: audit: type=1130 audit(1696274043.538:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.636771 kernel: audit: type=1131 audit(1696274043.547:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.636789 kernel: audit: type=1130 audit(1696274043.564:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.636813 kernel: audit: type=1130 audit(1696274043.601:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.636830 kernel: audit: type=1131 audit(1696274043.604:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.470123 systemd[1]: mnt-oem3769117032.mount: Deactivated successfully. Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:14:03.639326 ignition[954]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:14:03.639326 ignition[954]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:14:03.639326 ignition[954]: INFO : files: files passed Oct 2 19:14:03.806650 kernel: audit: type=1130 audit(1696274043.652:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.806695 kernel: audit: type=1130 audit(1696274043.690:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.806712 kernel: audit: type=1131 audit(1696274043.690:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.806728 kernel: audit: type=1131 audit(1696274043.729:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.473904 systemd[1]: Finished ignition-files.service. Oct 2 19:14:03.810789 ignition[954]: INFO : Ignition finished successfully Oct 2 19:14:03.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.494669 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:14:03.827008 initrd-setup-root-after-ignition[979]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:14:03.831084 iscsid[805]: iscsid shutting down. Oct 2 19:14:03.500134 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:14:03.504211 systemd[1]: Starting ignition-quench.service... Oct 2 19:14:03.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.524667 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:14:03.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.524764 systemd[1]: Finished ignition-quench.service. Oct 2 19:14:03.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.550206 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:14:03.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.565213 systemd[1]: Reached target ignition-complete.target. Oct 2 19:14:03.582209 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:14:03.866147 ignition[992]: INFO : Ignition 2.14.0 Oct 2 19:14:03.866147 ignition[992]: INFO : Stage: umount Oct 2 19:14:03.866147 ignition[992]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:14:03.866147 ignition[992]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:14:03.866147 ignition[992]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:14:03.866147 ignition[992]: INFO : umount: umount passed Oct 2 19:14:03.866147 ignition[992]: INFO : Ignition finished successfully Oct 2 19:14:03.599417 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:14:03.599503 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:14:03.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.604680 systemd[1]: Reached target initrd-fs.target. Oct 2 19:14:03.629045 systemd[1]: Reached target initrd.target. Oct 2 19:14:03.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.633942 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:14:03.634736 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:14:03.648749 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:14:03.669666 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:14:03.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.683173 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:14:03.683254 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:14:03.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.702731 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:14:03.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.715044 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:14:03.720000 systemd[1]: Stopped target timers.target. Oct 2 19:14:03.938000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:14:03.721857 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:14:03.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.721903 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:14:03.729266 systemd[1]: Stopped target initrd.target. Oct 2 19:14:03.745431 systemd[1]: Stopped target basic.target. Oct 2 19:14:03.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.747250 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:14:03.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.752301 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:14:03.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.754325 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:14:03.756404 systemd[1]: Stopped target remote-fs.target. Oct 2 19:14:03.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.758248 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:14:03.760349 systemd[1]: Stopped target sysinit.target. Oct 2 19:14:03.765337 systemd[1]: Stopped target local-fs.target. Oct 2 19:14:03.767162 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:14:03.772511 systemd[1]: Stopped target swap.target. Oct 2 19:14:03.774272 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:14:03.774322 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:14:03.779597 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:14:03.784684 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:14:03.784737 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:14:03.790180 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:14:04.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.790222 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:14:03.796578 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:14:04.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:04.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.796623 systemd[1]: Stopped ignition-files.service. Oct 2 19:14:03.802540 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:14:04.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.802596 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:14:04.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:04.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.807474 systemd[1]: Stopping ignition-mount.service... Oct 2 19:14:03.811017 systemd[1]: Stopping iscsid.service... Oct 2 19:14:03.812519 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:14:03.812593 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:14:03.815597 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:14:03.817485 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:14:03.817580 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:14:03.819950 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:14:03.820043 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:14:03.841045 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:14:04.054793 kernel: hv_netvsc 000d3ad7-dc53-000d-3ad7-dc53000d3ad7 eth0: Data path switched from VF: enP29441s1 Oct 2 19:14:03.841138 systemd[1]: Stopped iscsid.service. Oct 2 19:14:03.843618 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:14:03.843720 systemd[1]: Stopped ignition-mount.service. Oct 2 19:14:03.847975 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:14:03.848018 systemd[1]: Stopped ignition-disks.service. Oct 2 19:14:03.851724 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:14:03.851774 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:14:03.854382 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:14:03.854419 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:14:03.858082 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:14:03.858130 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:14:03.860154 systemd[1]: Stopped target paths.target. Oct 2 19:14:04.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:03.861874 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:14:03.866624 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:14:03.870213 systemd[1]: Stopped target slices.target. Oct 2 19:14:03.877224 systemd[1]: Stopped target sockets.target. Oct 2 19:14:03.884454 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:14:03.884491 systemd[1]: Closed iscsid.socket. Oct 2 19:14:03.886205 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:14:03.886251 systemd[1]: Stopped ignition-setup.service. Oct 2 19:14:03.898698 systemd[1]: Stopping iscsiuio.service... Oct 2 19:14:03.903444 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:14:03.904355 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:14:03.904439 systemd[1]: Stopped iscsiuio.service. Oct 2 19:14:03.907661 systemd[1]: Stopped target network.target. Oct 2 19:14:03.912374 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:14:03.912413 systemd[1]: Closed iscsiuio.socket. Oct 2 19:14:03.916052 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:14:03.920026 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:14:03.922814 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:14:03.922892 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:14:03.924782 systemd-networkd[796]: eth0: DHCPv6 lease lost Oct 2 19:14:04.124000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:14:03.926050 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:14:03.926133 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:14:03.932509 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:14:03.932667 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:14:03.938670 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:14:03.938708 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:14:03.942045 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:14:03.942093 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:14:03.946909 systemd[1]: Stopping network-cleanup.service... Oct 2 19:14:03.955686 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:14:03.955748 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:14:03.959828 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:14:03.959879 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:14:03.964656 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:14:03.964707 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:14:03.969381 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:14:03.973512 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:14:03.973656 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:14:03.979786 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:14:03.979837 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:14:03.986527 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:14:03.988079 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:14:03.993944 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:14:03.993988 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:14:04.001655 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:14:04.004941 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:14:04.008962 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:14:04.009006 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:14:04.013874 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:14:04.017171 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:14:04.198105 systemd-journald[183]: Received SIGTERM from PID 1 (n/a). Oct 2 19:14:04.017232 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:14:04.022626 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:14:04.022717 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:14:04.081203 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:14:04.081313 systemd[1]: Stopped network-cleanup.service. Oct 2 19:14:04.084700 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:14:04.090012 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:14:04.168774 systemd[1]: Switching root. Oct 2 19:14:04.203229 systemd-journald[183]: Journal stopped Oct 2 19:14:16.337521 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:14:16.337559 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:14:16.337581 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:14:16.337590 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:14:16.337601 kernel: SELinux: policy capability open_perms=1 Oct 2 19:14:16.337609 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:14:16.337621 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:14:16.337634 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:14:16.337643 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:14:16.337653 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:14:16.337663 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:14:16.337677 systemd[1]: Successfully loaded SELinux policy in 299.789ms. Oct 2 19:14:16.337687 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 24.762ms. Oct 2 19:14:16.337700 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:14:16.337715 systemd[1]: Detected virtualization microsoft. Oct 2 19:14:16.337724 systemd[1]: Detected architecture x86-64. Oct 2 19:14:16.337736 systemd[1]: Detected first boot. Oct 2 19:14:16.337748 systemd[1]: Hostname set to . Oct 2 19:14:16.337757 systemd[1]: Initializing machine ID from random generator. Oct 2 19:14:16.337771 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:14:16.337783 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:14:16.337794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:14:16.337808 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:14:16.337818 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 19:14:16.337829 kernel: audit: type=1334 audit(1696274055.816:89): prog-id=12 op=LOAD Oct 2 19:14:16.337837 kernel: audit: type=1334 audit(1696274055.816:90): prog-id=3 op=UNLOAD Oct 2 19:14:16.337851 kernel: audit: type=1334 audit(1696274055.821:91): prog-id=13 op=LOAD Oct 2 19:14:16.337863 kernel: audit: type=1334 audit(1696274055.825:92): prog-id=14 op=LOAD Oct 2 19:14:16.337871 kernel: audit: type=1334 audit(1696274055.825:93): prog-id=4 op=UNLOAD Oct 2 19:14:16.337883 kernel: audit: type=1334 audit(1696274055.825:94): prog-id=5 op=UNLOAD Oct 2 19:14:16.337893 kernel: audit: type=1334 audit(1696274055.830:95): prog-id=15 op=LOAD Oct 2 19:14:16.337904 kernel: audit: type=1334 audit(1696274055.830:96): prog-id=12 op=UNLOAD Oct 2 19:14:16.337912 kernel: audit: type=1334 audit(1696274055.848:97): prog-id=16 op=LOAD Oct 2 19:14:16.337923 kernel: audit: type=1334 audit(1696274055.852:98): prog-id=17 op=LOAD Oct 2 19:14:16.337938 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:14:16.337947 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:14:16.337962 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:14:16.337975 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:14:16.337984 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:14:16.337996 systemd[1]: Created slice system-getty.slice. Oct 2 19:14:16.338012 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:14:16.338023 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:14:16.338036 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:14:16.338049 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:14:16.338059 systemd[1]: Created slice user.slice. Oct 2 19:14:16.338071 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:14:16.338082 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:14:16.338093 systemd[1]: Set up automount boot.automount. Oct 2 19:14:16.338104 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:14:16.338116 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:14:16.338130 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:14:16.338141 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:14:16.338153 systemd[1]: Reached target integritysetup.target. Oct 2 19:14:16.338165 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:14:16.338174 systemd[1]: Reached target remote-fs.target. Oct 2 19:14:16.338187 systemd[1]: Reached target slices.target. Oct 2 19:14:16.338199 systemd[1]: Reached target swap.target. Oct 2 19:14:16.338209 systemd[1]: Reached target torcx.target. Oct 2 19:14:16.338224 systemd[1]: Reached target veritysetup.target. Oct 2 19:14:16.338236 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:14:16.338246 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:14:16.338259 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:14:16.338272 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:14:16.338284 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:14:16.338297 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:14:16.338311 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:14:16.338320 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:14:16.338333 systemd[1]: Mounting media.mount... Oct 2 19:14:16.338345 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:14:16.338356 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:14:16.338367 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:14:16.338379 systemd[1]: Mounting tmp.mount... Oct 2 19:14:16.338392 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:14:16.338404 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:14:16.338415 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:14:16.338427 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:14:16.338438 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:14:16.338450 systemd[1]: Starting modprobe@drm.service... Oct 2 19:14:16.338464 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:14:16.338473 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:14:16.338486 systemd[1]: Starting modprobe@loop.service... Oct 2 19:14:16.338501 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:14:16.338511 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:14:16.338524 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:14:16.338537 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:14:16.338547 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:14:16.338565 systemd[1]: Stopped systemd-journald.service. Oct 2 19:14:16.338578 systemd[1]: Starting systemd-journald.service... Oct 2 19:14:16.338588 kernel: loop: module loaded Oct 2 19:14:16.338601 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:14:16.338614 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:14:16.338624 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:14:16.338637 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:14:16.338650 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:14:16.338660 systemd[1]: Stopped verity-setup.service. Oct 2 19:14:16.338673 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:14:16.338685 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:14:16.338695 kernel: fuse: init (API version 7.34) Oct 2 19:14:16.338709 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:14:16.338722 systemd[1]: Mounted media.mount. Oct 2 19:14:16.338732 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:14:16.338743 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:14:16.338754 systemd[1]: Mounted tmp.mount. Oct 2 19:14:16.338767 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:14:16.338777 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:14:16.338789 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:14:16.338802 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:14:16.338814 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:14:16.338826 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:14:16.338839 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:14:16.338849 systemd[1]: Finished modprobe@drm.service. Oct 2 19:14:16.338863 systemd-journald[1118]: Journal started Oct 2 19:14:16.338911 systemd-journald[1118]: Runtime Journal (/run/log/journal/1fc9c06796e7443a97996498db3737fc) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:14:06.388000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:14:07.056000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:14:07.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:14:07.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:14:07.070000 audit: BPF prog-id=10 op=LOAD Oct 2 19:14:07.070000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:14:07.071000 audit: BPF prog-id=11 op=LOAD Oct 2 19:14:07.071000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:14:15.816000 audit: BPF prog-id=12 op=LOAD Oct 2 19:14:15.816000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:14:15.821000 audit: BPF prog-id=13 op=LOAD Oct 2 19:14:15.825000 audit: BPF prog-id=14 op=LOAD Oct 2 19:14:15.825000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:14:15.825000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:14:15.830000 audit: BPF prog-id=15 op=LOAD Oct 2 19:14:15.830000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:14:15.848000 audit: BPF prog-id=16 op=LOAD Oct 2 19:14:15.852000 audit: BPF prog-id=17 op=LOAD Oct 2 19:14:15.852000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:14:15.852000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:14:15.857000 audit: BPF prog-id=18 op=LOAD Oct 2 19:14:15.857000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:14:15.861000 audit: BPF prog-id=19 op=LOAD Oct 2 19:14:15.865000 audit: BPF prog-id=20 op=LOAD Oct 2 19:14:15.865000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:14:15.865000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:14:15.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:15.887000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:14:16.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.183000 audit: BPF prog-id=21 op=LOAD Oct 2 19:14:16.183000 audit: BPF prog-id=22 op=LOAD Oct 2 19:14:16.184000 audit: BPF prog-id=23 op=LOAD Oct 2 19:14:16.184000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:14:16.184000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:14:16.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.331000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:14:16.331000 audit[1118]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd0b551e60 a2=4000 a3=7ffd0b551efc items=0 ppid=1 pid=1118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:16.331000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:14:15.815202 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:14:08.286369 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:14:15.866750 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:14:08.286858 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:14:08.286881 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:14:08.286921 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:14:08.286933 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:14:08.286982 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:14:08.286997 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:14:08.287209 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:14:08.287262 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:14:08.287279 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:14:08.287798 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:14:08.287837 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:14:08.287858 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:14:08.287875 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:14:16.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:08.287894 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:14:08.287910 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:08Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:14:14.752389 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:14:14.752685 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:14:14.752833 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:14:14.753062 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:14:14.753111 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:14:14.753183 /usr/lib/systemd/system-generators/torcx-generator[1027]: time="2023-10-02T19:14:14Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:14:16.345928 systemd[1]: Started systemd-journald.service. Oct 2 19:14:16.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.348316 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:14:16.348456 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:14:16.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.350885 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:14:16.351022 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:14:16.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.353495 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:14:16.353744 systemd[1]: Finished modprobe@loop.service. Oct 2 19:14:16.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.357129 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:14:16.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.360161 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:14:16.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.363159 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:14:16.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.366221 systemd[1]: Reached target network-pre.target. Oct 2 19:14:16.370596 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:14:16.374344 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:14:16.376705 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:14:16.392219 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:14:16.396665 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:14:16.400047 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:14:16.401304 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:14:16.404068 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:14:16.405531 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:14:16.410038 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:14:16.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.417032 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:14:16.419854 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:14:16.422398 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:14:16.425893 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:14:16.430392 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:14:16.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.432858 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:14:16.438263 udevadm[1151]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:14:16.454779 systemd-journald[1118]: Time spent on flushing to /var/log/journal/1fc9c06796e7443a97996498db3737fc is 23.033ms for 1174 entries. Oct 2 19:14:16.454779 systemd-journald[1118]: System Journal (/var/log/journal/1fc9c06796e7443a97996498db3737fc) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:14:16.523222 systemd-journald[1118]: Received client request to flush runtime journal. Oct 2 19:14:16.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.485345 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:14:16.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:16.524278 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:14:16.944798 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:14:16.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:17.647873 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:14:17.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:17.650000 audit: BPF prog-id=24 op=LOAD Oct 2 19:14:17.650000 audit: BPF prog-id=25 op=LOAD Oct 2 19:14:17.650000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:14:17.650000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:14:17.652144 systemd[1]: Starting systemd-udevd.service... Oct 2 19:14:17.670969 systemd-udevd[1154]: Using default interface naming scheme 'v252'. Oct 2 19:14:17.886249 systemd[1]: Started systemd-udevd.service. Oct 2 19:14:17.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:17.889000 audit: BPF prog-id=26 op=LOAD Oct 2 19:14:17.891041 systemd[1]: Starting systemd-networkd.service... Oct 2 19:14:17.924148 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:14:17.987425 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:14:17.990000 audit: BPF prog-id=27 op=LOAD Oct 2 19:14:17.991000 audit: BPF prog-id=28 op=LOAD Oct 2 19:14:17.991000 audit: BPF prog-id=29 op=LOAD Oct 2 19:14:17.992532 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:14:18.012979 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:14:18.013046 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:14:18.367786 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:14:18.367863 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:14:18.367888 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:14:18.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.392002 systemd[1]: Started systemd-userdbd.service. Oct 2 19:14:18.012000 audit[1158]: AVC avc: denied { confidentiality } for pid=1158 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:14:18.403971 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:14:18.408989 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:14:18.412904 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:14:18.012000 audit[1158]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55748b03dbb0 a1=f884 a2=7f943a3f0bc5 a3=5 items=10 ppid=1154 pid=1158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:18.012000 audit: CWD cwd="/" Oct 2 19:14:18.012000 audit: PATH item=0 name=(null) inode=13174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=1 name=(null) inode=13175 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=2 name=(null) inode=13174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=3 name=(null) inode=13176 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=4 name=(null) inode=13174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.440903 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:14:18.440950 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:14:18.445934 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:14:18.456652 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:14:18.012000 audit: PATH item=5 name=(null) inode=13177 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=6 name=(null) inode=13174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=7 name=(null) inode=13178 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=8 name=(null) inode=13174 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PATH item=9 name=(null) inode=13179 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:14:18.012000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:14:18.618976 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1164) Oct 2 19:14:18.666977 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:14:18.683736 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:14:18.726461 systemd-networkd[1162]: lo: Link UP Oct 2 19:14:18.726472 systemd-networkd[1162]: lo: Gained carrier Oct 2 19:14:18.727047 systemd-networkd[1162]: Enumeration completed Oct 2 19:14:18.727149 systemd[1]: Started systemd-networkd.service. Oct 2 19:14:18.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.730606 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:14:18.755397 systemd-networkd[1162]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:14:18.770389 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:14:18.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:18.774731 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:14:18.815982 kernel: mlx5_core 7301:00:02.0 enP29441s1: Link up Oct 2 19:14:18.854999 kernel: hv_netvsc 000d3ad7-dc53-000d-3ad7-dc53000d3ad7 eth0: Data path switched to VF: enP29441s1 Oct 2 19:14:18.856565 systemd-networkd[1162]: enP29441s1: Link UP Oct 2 19:14:18.856733 systemd-networkd[1162]: eth0: Link UP Oct 2 19:14:18.856741 systemd-networkd[1162]: eth0: Gained carrier Oct 2 19:14:18.861761 systemd-networkd[1162]: enP29441s1: Gained carrier Oct 2 19:14:18.887060 systemd-networkd[1162]: eth0: DHCPv4 address 10.200.8.4/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:14:19.080624 lvm[1231]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:14:19.110067 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:14:19.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:19.117224 systemd[1]: Reached target cryptsetup.target. Oct 2 19:14:19.120525 systemd[1]: Starting lvm2-activation.service... Oct 2 19:14:19.125074 lvm[1233]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:14:19.151252 systemd[1]: Finished lvm2-activation.service. Oct 2 19:14:19.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:19.153993 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:14:19.156423 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:14:19.156460 systemd[1]: Reached target local-fs.target. Oct 2 19:14:19.158426 systemd[1]: Reached target machines.target. Oct 2 19:14:19.161605 systemd[1]: Starting ldconfig.service... Oct 2 19:14:19.179107 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:14:19.179208 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:14:19.180388 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:14:19.183924 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:14:19.187572 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:14:19.190008 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:14:19.190093 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:14:19.191168 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:14:19.233442 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:14:19.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:19.609389 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1235 (bootctl) Oct 2 19:14:19.610923 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:14:20.656241 systemd-networkd[1162]: eth0: Gained IPv6LL Oct 2 19:14:20.661913 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:14:20.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:20.760600 systemd-tmpfiles[1238]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:14:20.825881 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:14:20.826521 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:14:20.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:20.902515 systemd-tmpfiles[1238]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:14:20.985564 systemd-tmpfiles[1238]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:14:21.344662 systemd-fsck[1243]: fsck.fat 4.2 (2021-01-31) Oct 2 19:14:21.344662 systemd-fsck[1243]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:14:21.347803 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:14:21.354573 kernel: kauditd_printk_skb: 80 callbacks suppressed Oct 2 19:14:21.354658 kernel: audit: type=1130 audit(1696274061.349:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:21.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:21.353275 systemd[1]: Mounting boot.mount... Oct 2 19:14:21.370750 systemd[1]: Mounted boot.mount. Oct 2 19:14:21.384818 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:14:21.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:21.397974 kernel: audit: type=1130 audit(1696274061.386:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:22.973385 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:14:22.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:22.977731 systemd[1]: Starting audit-rules.service... Oct 2 19:14:22.987069 kernel: audit: type=1130 audit(1696274062.974:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:22.989698 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:14:22.993352 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:14:23.003105 kernel: audit: type=1334 audit(1696274062.996:167): prog-id=30 op=LOAD Oct 2 19:14:22.996000 audit: BPF prog-id=30 op=LOAD Oct 2 19:14:22.998227 systemd[1]: Starting systemd-resolved.service... Oct 2 19:14:23.003000 audit: BPF prog-id=31 op=LOAD Oct 2 19:14:23.005789 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:14:23.012902 kernel: audit: type=1334 audit(1696274063.003:168): prog-id=31 op=LOAD Oct 2 19:14:23.012515 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:14:23.048000 audit[1255]: SYSTEM_BOOT pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.061668 kernel: audit: type=1127 audit(1696274063.048:169): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.064358 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:14:23.081220 kernel: audit: type=1130 audit(1696274063.068:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.084545 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:14:23.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.086978 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:14:23.097984 kernel: audit: type=1130 audit(1696274063.085:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.146183 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:14:23.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.148685 systemd[1]: Reached target time-set.target. Oct 2 19:14:23.161940 kernel: audit: type=1130 audit(1696274063.147:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.197479 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:14:23.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.215203 kernel: audit: type=1130 audit(1696274063.199:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:14:23.284910 systemd-resolved[1253]: Positive Trust Anchors: Oct 2 19:14:23.284938 systemd-resolved[1253]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:14:23.285008 systemd-resolved[1253]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:14:23.328000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:14:23.328000 audit[1270]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff837fb3f0 a2=420 a3=0 items=0 ppid=1249 pid=1270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:14:23.328000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:14:23.329733 augenrules[1270]: No rules Oct 2 19:14:23.330436 systemd[1]: Finished audit-rules.service. Oct 2 19:14:23.400857 systemd-timesyncd[1254]: Contacted time server 188.125.64.7:123 (0.flatcar.pool.ntp.org). Oct 2 19:14:23.401056 systemd-timesyncd[1254]: Initial clock synchronization to Mon 2023-10-02 19:14:23.401101 UTC. Oct 2 19:14:23.404942 systemd-resolved[1253]: Using system hostname 'ci-3510.3.0-a-f1fdbe70e6'. Oct 2 19:14:23.406758 systemd[1]: Started systemd-resolved.service. Oct 2 19:14:23.410092 systemd[1]: Reached target network.target. Oct 2 19:14:23.412340 systemd[1]: Reached target network-online.target. Oct 2 19:14:23.415085 systemd[1]: Reached target nss-lookup.target. Oct 2 19:14:28.881584 ldconfig[1234]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:14:28.895338 systemd[1]: Finished ldconfig.service. Oct 2 19:14:28.899378 systemd[1]: Starting systemd-update-done.service... Oct 2 19:14:28.919373 systemd[1]: Finished systemd-update-done.service. Oct 2 19:14:28.922378 systemd[1]: Reached target sysinit.target. Oct 2 19:14:28.924749 systemd[1]: Started motdgen.path. Oct 2 19:14:28.926555 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:14:28.929378 systemd[1]: Started logrotate.timer. Oct 2 19:14:28.931184 systemd[1]: Started mdadm.timer. Oct 2 19:14:28.932754 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:14:28.934876 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:14:28.934910 systemd[1]: Reached target paths.target. Oct 2 19:14:28.936745 systemd[1]: Reached target timers.target. Oct 2 19:14:28.940458 systemd[1]: Listening on dbus.socket. Oct 2 19:14:28.943217 systemd[1]: Starting docker.socket... Oct 2 19:14:28.961843 systemd[1]: Listening on sshd.socket. Oct 2 19:14:28.964008 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:14:28.964493 systemd[1]: Listening on docker.socket. Oct 2 19:14:28.966462 systemd[1]: Reached target sockets.target. Oct 2 19:14:28.968574 systemd[1]: Reached target basic.target. Oct 2 19:14:28.970606 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:14:28.970641 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:14:28.971592 systemd[1]: Starting containerd.service... Oct 2 19:14:28.974363 systemd[1]: Starting dbus.service... Oct 2 19:14:28.976825 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:14:28.979824 systemd[1]: Starting extend-filesystems.service... Oct 2 19:14:28.981945 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:14:28.983195 systemd[1]: Starting motdgen.service... Oct 2 19:14:28.986856 systemd[1]: Started nvidia.service. Oct 2 19:14:28.990003 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:14:28.992948 systemd[1]: Starting prepare-critools.service... Oct 2 19:14:28.995765 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:14:28.999222 systemd[1]: Starting sshd-keygen.service... Oct 2 19:14:29.005682 systemd[1]: Starting systemd-logind.service... Oct 2 19:14:29.007890 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:14:29.007977 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:14:29.008481 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:14:29.009289 systemd[1]: Starting update-engine.service... Oct 2 19:14:29.013271 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:14:29.023234 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:14:29.023440 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:14:29.062447 extend-filesystems[1281]: Found sda Oct 2 19:14:29.062447 extend-filesystems[1281]: Found sda1 Oct 2 19:14:29.062447 extend-filesystems[1281]: Found sda2 Oct 2 19:14:29.062447 extend-filesystems[1281]: Found sda3 Oct 2 19:14:29.073285 extend-filesystems[1281]: Found usr Oct 2 19:14:29.073285 extend-filesystems[1281]: Found sda4 Oct 2 19:14:29.073285 extend-filesystems[1281]: Found sda6 Oct 2 19:14:29.073285 extend-filesystems[1281]: Found sda7 Oct 2 19:14:29.073285 extend-filesystems[1281]: Found sda9 Oct 2 19:14:29.073285 extend-filesystems[1281]: Checking size of /dev/sda9 Oct 2 19:14:29.096408 jq[1295]: true Oct 2 19:14:29.071456 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:14:29.096605 jq[1280]: false Oct 2 19:14:29.071597 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:14:29.091480 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:14:29.091719 systemd[1]: Finished motdgen.service. Oct 2 19:14:29.098697 jq[1307]: true Oct 2 19:14:29.116003 tar[1297]: ./ Oct 2 19:14:29.116003 tar[1297]: ./macvlan Oct 2 19:14:29.117627 tar[1298]: crictl Oct 2 19:14:29.141444 extend-filesystems[1281]: Old size kept for /dev/sda9 Oct 2 19:14:29.144340 extend-filesystems[1281]: Found sr0 Oct 2 19:14:29.147003 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:14:29.147192 systemd[1]: Finished extend-filesystems.service. Oct 2 19:14:29.202837 systemd-logind[1293]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:14:29.204787 systemd-logind[1293]: New seat seat0. Oct 2 19:14:29.243111 dbus-daemon[1279]: [system] SELinux support is enabled Oct 2 19:14:29.243281 systemd[1]: Started dbus.service. Oct 2 19:14:29.261313 dbus-daemon[1279]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:14:29.247964 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:14:29.247993 systemd[1]: Reached target system-config.target. Oct 2 19:14:29.250418 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:14:29.250437 systemd[1]: Reached target user-config.target. Oct 2 19:14:29.261516 systemd[1]: Started systemd-logind.service. Oct 2 19:14:29.276373 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:14:29.292213 bash[1330]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:14:29.296912 env[1309]: time="2023-10-02T19:14:29.295098964Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:14:29.293025 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:14:29.349486 tar[1297]: ./static Oct 2 19:14:29.417226 env[1309]: time="2023-10-02T19:14:29.417135585Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:14:29.417351 env[1309]: time="2023-10-02T19:14:29.417316988Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419223 env[1309]: time="2023-10-02T19:14:29.419186618Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419338621Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419584725Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419607825Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419625626Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419639326Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.419985 env[1309]: time="2023-10-02T19:14:29.419742028Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.420365 env[1309]: time="2023-10-02T19:14:29.420339338Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:14:29.420655 env[1309]: time="2023-10-02T19:14:29.420623942Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:14:29.420750 env[1309]: time="2023-10-02T19:14:29.420733644Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:14:29.420877 env[1309]: time="2023-10-02T19:14:29.420858846Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:14:29.420981 env[1309]: time="2023-10-02T19:14:29.420950348Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:14:29.450359 env[1309]: time="2023-10-02T19:14:29.450326934Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:14:29.450455 env[1309]: time="2023-10-02T19:14:29.450367135Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:14:29.450455 env[1309]: time="2023-10-02T19:14:29.450421736Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:14:29.450541 env[1309]: time="2023-10-02T19:14:29.450477036Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450541 env[1309]: time="2023-10-02T19:14:29.450498837Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450616 env[1309]: time="2023-10-02T19:14:29.450558038Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450616 env[1309]: time="2023-10-02T19:14:29.450578638Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450616 env[1309]: time="2023-10-02T19:14:29.450599638Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450725 env[1309]: time="2023-10-02T19:14:29.450631339Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450725 env[1309]: time="2023-10-02T19:14:29.450651639Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450725 env[1309]: time="2023-10-02T19:14:29.450669440Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.450725 env[1309]: time="2023-10-02T19:14:29.450687640Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:14:29.450863 env[1309]: time="2023-10-02T19:14:29.450829442Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:14:29.450994 env[1309]: time="2023-10-02T19:14:29.450973745Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:14:29.451417 env[1309]: time="2023-10-02T19:14:29.451382551Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:14:29.451478 env[1309]: time="2023-10-02T19:14:29.451434752Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451478 env[1309]: time="2023-10-02T19:14:29.451455153Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:14:29.451558 env[1309]: time="2023-10-02T19:14:29.451535354Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451627 env[1309]: time="2023-10-02T19:14:29.451609055Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451671 env[1309]: time="2023-10-02T19:14:29.451647256Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451671 env[1309]: time="2023-10-02T19:14:29.451664556Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451750 env[1309]: time="2023-10-02T19:14:29.451681856Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451750 env[1309]: time="2023-10-02T19:14:29.451699457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451750 env[1309]: time="2023-10-02T19:14:29.451728457Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451750 env[1309]: time="2023-10-02T19:14:29.451745257Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.451895 env[1309]: time="2023-10-02T19:14:29.451763958Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:14:29.452011 env[1309]: time="2023-10-02T19:14:29.451989561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.452060 env[1309]: time="2023-10-02T19:14:29.452021262Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.452060 env[1309]: time="2023-10-02T19:14:29.452053663Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.452143 env[1309]: time="2023-10-02T19:14:29.452074963Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:14:29.452143 env[1309]: time="2023-10-02T19:14:29.452095863Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:14:29.452143 env[1309]: time="2023-10-02T19:14:29.452124564Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:14:29.452255 env[1309]: time="2023-10-02T19:14:29.452149464Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:14:29.452255 env[1309]: time="2023-10-02T19:14:29.452201665Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:14:29.452571 env[1309]: time="2023-10-02T19:14:29.452495770Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.452596472Z" level=info msg="Connect containerd service" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.452640172Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453470686Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453601988Z" level=info msg="Start subscribing containerd event" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453647189Z" level=info msg="Start recovering state" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453706390Z" level=info msg="Start event monitor" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453717990Z" level=info msg="Start snapshots syncer" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453728190Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.453736990Z" level=info msg="Start streaming server" Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.456482136Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.456559637Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:14:29.485696 env[1309]: time="2023-10-02T19:14:29.478026993Z" level=info msg="containerd successfully booted in 0.239329s" Oct 2 19:14:29.486197 tar[1297]: ./vlan Oct 2 19:14:29.456739 systemd[1]: Started containerd.service. Oct 2 19:14:29.526491 tar[1297]: ./portmap Oct 2 19:14:29.577404 tar[1297]: ./host-local Oct 2 19:14:29.612540 tar[1297]: ./vrf Oct 2 19:14:29.649087 tar[1297]: ./bridge Oct 2 19:14:29.693116 tar[1297]: ./tuning Oct 2 19:14:29.728333 tar[1297]: ./firewall Oct 2 19:14:29.773713 tar[1297]: ./host-device Oct 2 19:14:29.813438 tar[1297]: ./sbr Oct 2 19:14:29.819173 update_engine[1294]: I1002 19:14:29.805209 1294 main.cc:92] Flatcar Update Engine starting Oct 2 19:14:29.835175 systemd[1]: Finished prepare-critools.service. Oct 2 19:14:29.854494 tar[1297]: ./loopback Oct 2 19:14:29.866425 systemd[1]: Started update-engine.service. Oct 2 19:14:29.874564 update_engine[1294]: I1002 19:14:29.874311 1294 update_check_scheduler.cc:74] Next update check in 3m58s Oct 2 19:14:29.871599 systemd[1]: Started locksmithd.service. Oct 2 19:14:29.889565 tar[1297]: ./dhcp Oct 2 19:14:29.990076 tar[1297]: ./ptp Oct 2 19:14:30.032188 tar[1297]: ./ipvlan Oct 2 19:14:30.073062 tar[1297]: ./bandwidth Oct 2 19:14:30.154769 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:14:30.291380 sshd_keygen[1305]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:14:30.311569 systemd[1]: Finished sshd-keygen.service. Oct 2 19:14:30.315337 systemd[1]: Starting issuegen.service... Oct 2 19:14:30.318630 systemd[1]: Started waagent.service. Oct 2 19:14:30.323147 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:14:30.323343 systemd[1]: Finished issuegen.service. Oct 2 19:14:30.328709 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:14:30.348570 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:14:30.352575 systemd[1]: Started getty@tty1.service. Oct 2 19:14:30.356316 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:14:30.358735 systemd[1]: Reached target getty.target. Oct 2 19:14:30.360698 systemd[1]: Reached target multi-user.target. Oct 2 19:14:30.364166 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:14:30.374045 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:14:30.374207 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:14:30.379367 systemd[1]: Startup finished in 940ms (firmware) + 26.135s (loader) + 901ms (kernel) + 21.167s (initrd) + 24.167s (userspace) = 1min 13.313s. Oct 2 19:14:30.789595 login[1406]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:14:30.791117 login[1407]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:14:30.817904 systemd[1]: Created slice user-500.slice. Oct 2 19:14:30.819514 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:14:30.821513 systemd-logind[1293]: New session 2 of user core. Oct 2 19:14:30.826421 systemd-logind[1293]: New session 1 of user core. Oct 2 19:14:30.844902 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:14:30.846976 systemd[1]: Starting user@500.service... Oct 2 19:14:30.850250 (systemd)[1414]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:14:31.045617 systemd[1414]: Queued start job for default target default.target. Oct 2 19:14:31.046246 systemd[1414]: Reached target paths.target. Oct 2 19:14:31.046276 systemd[1414]: Reached target sockets.target. Oct 2 19:14:31.046292 systemd[1414]: Reached target timers.target. Oct 2 19:14:31.046307 systemd[1414]: Reached target basic.target. Oct 2 19:14:31.046364 systemd[1414]: Reached target default.target. Oct 2 19:14:31.046401 systemd[1414]: Startup finished in 189ms. Oct 2 19:14:31.046442 systemd[1]: Started user@500.service. Oct 2 19:14:31.047771 systemd[1]: Started session-1.scope. Oct 2 19:14:31.048570 systemd[1]: Started session-2.scope. Oct 2 19:14:31.307368 locksmithd[1390]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:14:36.781760 waagent[1401]: 2023-10-02T19:14:36.781644Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:14:36.798636 waagent[1401]: 2023-10-02T19:14:36.787170Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:14:36.798636 waagent[1401]: 2023-10-02T19:14:36.788146Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:14:36.798636 waagent[1401]: 2023-10-02T19:14:36.789313Z INFO Daemon Daemon Run daemon Oct 2 19:14:36.798636 waagent[1401]: 2023-10-02T19:14:36.790582Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:14:36.808848 waagent[1401]: 2023-10-02T19:14:36.808728Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:14:36.816921 waagent[1401]: 2023-10-02T19:14:36.816817Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:14:36.821692 waagent[1401]: 2023-10-02T19:14:36.821631Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:14:36.824279 waagent[1401]: 2023-10-02T19:14:36.824220Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:14:36.827359 waagent[1401]: 2023-10-02T19:14:36.827301Z INFO Daemon Daemon Activate resource disk Oct 2 19:14:36.829918 waagent[1401]: 2023-10-02T19:14:36.829860Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:14:36.839968 waagent[1401]: 2023-10-02T19:14:36.839886Z INFO Daemon Daemon Found device: None Oct 2 19:14:36.842399 waagent[1401]: 2023-10-02T19:14:36.842339Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:14:36.846529 waagent[1401]: 2023-10-02T19:14:36.846472Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:14:36.852578 waagent[1401]: 2023-10-02T19:14:36.852516Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:14:36.855605 waagent[1401]: 2023-10-02T19:14:36.855546Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:14:36.865552 waagent[1401]: 2023-10-02T19:14:36.865429Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:14:36.873234 waagent[1401]: 2023-10-02T19:14:36.873133Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:14:36.878167 waagent[1401]: 2023-10-02T19:14:36.878107Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:14:36.880723 waagent[1401]: 2023-10-02T19:14:36.880663Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:14:36.966794 waagent[1401]: 2023-10-02T19:14:36.965122Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:14:37.045207 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:14:37.063803 waagent[1401]: 2023-10-02T19:14:37.063678Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:14:37.067063 waagent[1401]: 2023-10-02T19:14:37.066993Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:14:37.070386 waagent[1401]: 2023-10-02T19:14:37.070316Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:14:37.073846 waagent[1401]: 2023-10-02T19:14:37.073782Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:14:37.076784 waagent[1401]: 2023-10-02T19:14:37.076720Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:14:37.079591 waagent[1401]: 2023-10-02T19:14:37.079532Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:14:37.203297 waagent[1401]: 2023-10-02T19:14:37.203208Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:14:37.211379 waagent[1401]: 2023-10-02T19:14:37.204304Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:14:37.211379 waagent[1401]: 2023-10-02T19:14:37.205288Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:14:37.454129 waagent[1401]: 2023-10-02T19:14:37.453972Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:14:37.467324 waagent[1401]: 2023-10-02T19:14:37.467245Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:14:37.470851 waagent[1401]: 2023-10-02T19:14:37.470782Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:14:37.550142 waagent[1401]: 2023-10-02T19:14:37.550019Z INFO Daemon Daemon Found private key matching thumbprint 0243B914BF72F5FA761597FC9665DDFDBF6B0C48 Oct 2 19:14:37.560248 waagent[1401]: 2023-10-02T19:14:37.550545Z INFO Daemon Daemon Certificate with thumbprint F6E16FA69B1CCBBF0B06F392B672016E0D52A94A has no matching private key. Oct 2 19:14:37.560248 waagent[1401]: 2023-10-02T19:14:37.551675Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:14:37.605716 waagent[1401]: 2023-10-02T19:14:37.605631Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: cd48dca1-eef5-4ed3-92b9-6cd59b1d557b New eTag: 17729693277634074060] Oct 2 19:14:37.612094 waagent[1401]: 2023-10-02T19:14:37.612027Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:14:37.624302 waagent[1401]: 2023-10-02T19:14:37.624245Z INFO Daemon Daemon Starting provisioning Oct 2 19:14:37.626788 waagent[1401]: 2023-10-02T19:14:37.626728Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:14:37.629274 waagent[1401]: 2023-10-02T19:14:37.629216Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-f1fdbe70e6] Oct 2 19:14:37.649423 waagent[1401]: 2023-10-02T19:14:37.649308Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-f1fdbe70e6] Oct 2 19:14:37.653166 waagent[1401]: 2023-10-02T19:14:37.653097Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:14:37.656492 waagent[1401]: 2023-10-02T19:14:37.656432Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:14:37.670364 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:14:37.670617 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:14:37.670686 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:14:37.670951 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:14:37.676993 systemd-networkd[1162]: eth0: DHCPv6 lease lost Oct 2 19:14:37.678539 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:14:37.678736 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:14:37.680946 systemd[1]: Starting systemd-networkd.service... Oct 2 19:14:37.710849 systemd-networkd[1459]: enP29441s1: Link UP Oct 2 19:14:37.710860 systemd-networkd[1459]: enP29441s1: Gained carrier Oct 2 19:14:37.712165 systemd-networkd[1459]: eth0: Link UP Oct 2 19:14:37.712174 systemd-networkd[1459]: eth0: Gained carrier Oct 2 19:14:37.712590 systemd-networkd[1459]: lo: Link UP Oct 2 19:14:37.712599 systemd-networkd[1459]: lo: Gained carrier Oct 2 19:14:37.712904 systemd-networkd[1459]: eth0: Gained IPv6LL Oct 2 19:14:37.713519 systemd-networkd[1459]: Enumeration completed Oct 2 19:14:37.713699 systemd[1]: Started systemd-networkd.service. Oct 2 19:14:37.715911 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:14:37.718980 waagent[1401]: 2023-10-02T19:14:37.718737Z INFO Daemon Daemon Create user account if not exists Oct 2 19:14:37.722592 systemd-networkd[1459]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:14:37.723596 waagent[1401]: 2023-10-02T19:14:37.723475Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:14:37.731611 waagent[1401]: 2023-10-02T19:14:37.723900Z INFO Daemon Daemon Configure sudoer Oct 2 19:14:37.731611 waagent[1401]: 2023-10-02T19:14:37.725125Z INFO Daemon Daemon Configure sshd Oct 2 19:14:37.731611 waagent[1401]: 2023-10-02T19:14:37.726023Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:14:37.795042 systemd-networkd[1459]: eth0: DHCPv4 address 10.200.8.4/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:14:37.797992 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:15:06.523836 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:15:08.043368 waagent[1401]: 2023-10-02T19:15:08.043266Z INFO Daemon Daemon Provisioning complete Oct 2 19:15:08.059691 waagent[1401]: 2023-10-02T19:15:08.059618Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:15:08.066667 waagent[1401]: 2023-10-02T19:15:08.060076Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:15:08.066667 waagent[1401]: 2023-10-02T19:15:08.061839Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:15:08.326076 waagent[1468]: 2023-10-02T19:15:08.325975Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:15:08.326849 waagent[1468]: 2023-10-02T19:15:08.326782Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:08.327013 waagent[1468]: 2023-10-02T19:15:08.326941Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:08.338160 waagent[1468]: 2023-10-02T19:15:08.338088Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:15:08.338320 waagent[1468]: 2023-10-02T19:15:08.338269Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:15:08.404022 waagent[1468]: 2023-10-02T19:15:08.403871Z INFO ExtHandler ExtHandler Found private key matching thumbprint 0243B914BF72F5FA761597FC9665DDFDBF6B0C48 Oct 2 19:15:08.404262 waagent[1468]: 2023-10-02T19:15:08.404201Z INFO ExtHandler ExtHandler Certificate with thumbprint F6E16FA69B1CCBBF0B06F392B672016E0D52A94A has no matching private key. Oct 2 19:15:08.404508 waagent[1468]: 2023-10-02T19:15:08.404456Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:15:08.424089 waagent[1468]: 2023-10-02T19:15:08.424012Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: e9155247-dcef-42f9-ab9d-f814754ced92 New eTag: 17729693277634074060] Oct 2 19:15:08.424682 waagent[1468]: 2023-10-02T19:15:08.424621Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:15:08.507335 waagent[1468]: 2023-10-02T19:15:08.507167Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:15:08.517149 waagent[1468]: 2023-10-02T19:15:08.517063Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1468 Oct 2 19:15:08.520553 waagent[1468]: 2023-10-02T19:15:08.520482Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:15:08.521777 waagent[1468]: 2023-10-02T19:15:08.521715Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:15:08.592274 waagent[1468]: 2023-10-02T19:15:08.592144Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:15:08.592635 waagent[1468]: 2023-10-02T19:15:08.592571Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:15:08.600214 waagent[1468]: 2023-10-02T19:15:08.600161Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:15:08.600660 waagent[1468]: 2023-10-02T19:15:08.600602Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:15:08.601695 waagent[1468]: 2023-10-02T19:15:08.601630Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:15:08.602978 waagent[1468]: 2023-10-02T19:15:08.602900Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:15:08.603550 waagent[1468]: 2023-10-02T19:15:08.603495Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:08.604029 waagent[1468]: 2023-10-02T19:15:08.603972Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:15:08.604396 waagent[1468]: 2023-10-02T19:15:08.604346Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:08.605156 waagent[1468]: 2023-10-02T19:15:08.605101Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:15:08.605989 waagent[1468]: 2023-10-02T19:15:08.605912Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:15:08.606110 waagent[1468]: 2023-10-02T19:15:08.606032Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:08.606416 waagent[1468]: 2023-10-02T19:15:08.606362Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:15:08.606540 waagent[1468]: 2023-10-02T19:15:08.606488Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:08.607221 waagent[1468]: 2023-10-02T19:15:08.607166Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:15:08.607643 waagent[1468]: 2023-10-02T19:15:08.607585Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:15:08.607939 waagent[1468]: 2023-10-02T19:15:08.607883Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:15:08.608117 waagent[1468]: 2023-10-02T19:15:08.608044Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:15:08.608117 waagent[1468]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:15:08.608117 waagent[1468]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:15:08.608117 waagent[1468]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:15:08.608117 waagent[1468]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:08.608117 waagent[1468]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:08.608117 waagent[1468]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:08.608402 waagent[1468]: 2023-10-02T19:15:08.608232Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:15:08.609088 waagent[1468]: 2023-10-02T19:15:08.609029Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:15:08.609564 waagent[1468]: 2023-10-02T19:15:08.609514Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:15:08.622576 waagent[1468]: 2023-10-02T19:15:08.622524Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:15:08.623850 waagent[1468]: 2023-10-02T19:15:08.623802Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:15:08.624769 waagent[1468]: 2023-10-02T19:15:08.624723Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:15:08.641906 waagent[1468]: 2023-10-02T19:15:08.641833Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1459' Oct 2 19:15:08.674554 waagent[1468]: 2023-10-02T19:15:08.674463Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:15:08.732769 waagent[1468]: 2023-10-02T19:15:08.732685Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:15:08.732769 waagent[1468]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:15:08.732769 waagent[1468]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:15:08.732769 waagent[1468]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:d7:dc:53 brd ff:ff:ff:ff:ff:ff Oct 2 19:15:08.732769 waagent[1468]: 3: enP29441s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:d7:dc:53 brd ff:ff:ff:ff:ff:ff\ altname enP29441p0s2 Oct 2 19:15:08.732769 waagent[1468]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:15:08.732769 waagent[1468]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:15:08.732769 waagent[1468]: 2: eth0 inet 10.200.8.4/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:15:08.732769 waagent[1468]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:15:08.732769 waagent[1468]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:15:08.732769 waagent[1468]: 2: eth0 inet6 fe80::20d:3aff:fed7:dc53/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:15:08.971296 waagent[1468]: 2023-10-02T19:15:08.971130Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:15:08.974126 waagent[1468]: 2023-10-02T19:15:08.974027Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:15:08.974126 waagent[1468]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:08.974126 waagent[1468]: pkts bytes target prot opt in out source destination Oct 2 19:15:08.974126 waagent[1468]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:08.974126 waagent[1468]: pkts bytes target prot opt in out source destination Oct 2 19:15:08.974126 waagent[1468]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:08.974126 waagent[1468]: pkts bytes target prot opt in out source destination Oct 2 19:15:08.974126 waagent[1468]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:15:08.974126 waagent[1468]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:15:08.975430 waagent[1468]: 2023-10-02T19:15:08.975378Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:15:09.081879 waagent[1468]: 2023-10-02T19:15:09.081804Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:15:10.066543 waagent[1401]: 2023-10-02T19:15:10.066358Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:15:10.073827 waagent[1401]: 2023-10-02T19:15:10.073761Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:15:11.053760 waagent[1508]: 2023-10-02T19:15:11.053646Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:15:11.054462 waagent[1508]: 2023-10-02T19:15:11.054396Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:15:11.054605 waagent[1508]: 2023-10-02T19:15:11.054552Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:15:11.063854 waagent[1508]: 2023-10-02T19:15:11.063756Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:15:11.064263 waagent[1508]: 2023-10-02T19:15:11.064204Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:11.064423 waagent[1508]: 2023-10-02T19:15:11.064375Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:11.076415 waagent[1508]: 2023-10-02T19:15:11.076339Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:15:11.084542 waagent[1508]: 2023-10-02T19:15:11.084467Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:15:11.085435 waagent[1508]: 2023-10-02T19:15:11.085375Z INFO ExtHandler Oct 2 19:15:11.085585 waagent[1508]: 2023-10-02T19:15:11.085534Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: ab7c66de-4b72-4462-905a-a961574c6a20 eTag: 17729693277634074060 source: Fabric] Oct 2 19:15:11.086281 waagent[1508]: 2023-10-02T19:15:11.086223Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:15:11.087365 waagent[1508]: 2023-10-02T19:15:11.087298Z INFO ExtHandler Oct 2 19:15:11.087497 waagent[1508]: 2023-10-02T19:15:11.087447Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:15:11.093838 waagent[1508]: 2023-10-02T19:15:11.093787Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:15:11.094265 waagent[1508]: 2023-10-02T19:15:11.094219Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:15:11.119167 waagent[1508]: 2023-10-02T19:15:11.119108Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:15:11.183788 waagent[1508]: 2023-10-02T19:15:11.183651Z INFO ExtHandler Downloaded certificate {'thumbprint': 'F6E16FA69B1CCBBF0B06F392B672016E0D52A94A', 'hasPrivateKey': False} Oct 2 19:15:11.184778 waagent[1508]: 2023-10-02T19:15:11.184711Z INFO ExtHandler Downloaded certificate {'thumbprint': '0243B914BF72F5FA761597FC9665DDFDBF6B0C48', 'hasPrivateKey': True} Oct 2 19:15:11.185756 waagent[1508]: 2023-10-02T19:15:11.185693Z INFO ExtHandler Fetch goal state completed Oct 2 19:15:11.208229 waagent[1508]: 2023-10-02T19:15:11.208156Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1508 Oct 2 19:15:11.211488 waagent[1508]: 2023-10-02T19:15:11.211426Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:15:11.212907 waagent[1508]: 2023-10-02T19:15:11.212852Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:15:11.217648 waagent[1508]: 2023-10-02T19:15:11.217595Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:15:11.218027 waagent[1508]: 2023-10-02T19:15:11.217971Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:15:11.225742 waagent[1508]: 2023-10-02T19:15:11.225687Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:15:11.226220 waagent[1508]: 2023-10-02T19:15:11.226162Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:15:11.250193 waagent[1508]: 2023-10-02T19:15:11.250092Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:15:11.252877 waagent[1508]: 2023-10-02T19:15:11.252775Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:15:11.258218 waagent[1508]: 2023-10-02T19:15:11.258160Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:15:11.259605 waagent[1508]: 2023-10-02T19:15:11.259547Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:15:11.259836 waagent[1508]: 2023-10-02T19:15:11.259779Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:11.260503 waagent[1508]: 2023-10-02T19:15:11.260448Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:15:11.260669 waagent[1508]: 2023-10-02T19:15:11.260618Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:11.261263 waagent[1508]: 2023-10-02T19:15:11.261204Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:15:11.261880 waagent[1508]: 2023-10-02T19:15:11.261828Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:15:11.262033 waagent[1508]: 2023-10-02T19:15:11.261972Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:15:11.262429 waagent[1508]: 2023-10-02T19:15:11.262372Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:15:11.262683 waagent[1508]: 2023-10-02T19:15:11.262632Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:15:11.262683 waagent[1508]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:15:11.262683 waagent[1508]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:15:11.262683 waagent[1508]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:15:11.262683 waagent[1508]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:11.262683 waagent[1508]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:11.262683 waagent[1508]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:15:11.262982 waagent[1508]: 2023-10-02T19:15:11.262777Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:15:11.263228 waagent[1508]: 2023-10-02T19:15:11.263172Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:15:11.263526 waagent[1508]: 2023-10-02T19:15:11.263475Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:15:11.268758 waagent[1508]: 2023-10-02T19:15:11.268682Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:15:11.269263 waagent[1508]: 2023-10-02T19:15:11.269208Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:15:11.269769 waagent[1508]: 2023-10-02T19:15:11.269716Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:15:11.276531 waagent[1508]: 2023-10-02T19:15:11.276424Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:15:11.290882 waagent[1508]: 2023-10-02T19:15:11.290819Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:15:11.295497 waagent[1508]: 2023-10-02T19:15:11.295441Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:15:11.295497 waagent[1508]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:15:11.295497 waagent[1508]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:15:11.295497 waagent[1508]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:d7:dc:53 brd ff:ff:ff:ff:ff:ff Oct 2 19:15:11.295497 waagent[1508]: 3: enP29441s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:d7:dc:53 brd ff:ff:ff:ff:ff:ff\ altname enP29441p0s2 Oct 2 19:15:11.295497 waagent[1508]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:15:11.295497 waagent[1508]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:15:11.295497 waagent[1508]: 2: eth0 inet 10.200.8.4/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:15:11.295497 waagent[1508]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:15:11.295497 waagent[1508]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:15:11.295497 waagent[1508]: 2: eth0 inet6 fe80::20d:3aff:fed7:dc53/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:15:11.336301 waagent[1508]: 2023-10-02T19:15:11.336231Z INFO ExtHandler ExtHandler Oct 2 19:15:11.339190 waagent[1508]: 2023-10-02T19:15:11.339003Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 20e85f7a-b5fd-49d7-bace-d2c8d06686bd correlation 8268fc71-cebf-41db-9526-f026096273fe created: 2023-10-02T19:13:07.050781Z] Oct 2 19:15:11.347765 waagent[1508]: 2023-10-02T19:15:11.347627Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:15:11.350468 waagent[1508]: 2023-10-02T19:15:11.350412Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 14 ms] Oct 2 19:15:11.369335 waagent[1508]: 2023-10-02T19:15:11.369263Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:15:11.369335 waagent[1508]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:11.369335 waagent[1508]: pkts bytes target prot opt in out source destination Oct 2 19:15:11.369335 waagent[1508]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:11.369335 waagent[1508]: pkts bytes target prot opt in out source destination Oct 2 19:15:11.369335 waagent[1508]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:15:11.369335 waagent[1508]: pkts bytes target prot opt in out source destination Oct 2 19:15:11.369335 waagent[1508]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:15:11.369335 waagent[1508]: 136 16150 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:15:11.369335 waagent[1508]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:15:11.381053 waagent[1508]: 2023-10-02T19:15:11.380983Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:15:11.390469 waagent[1508]: 2023-10-02T19:15:11.390393Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 2F6739A6-6151-4169-B142-1C3EE167A082;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:15:15.181287 update_engine[1294]: I1002 19:15:15.181195 1294 update_attempter.cc:505] Updating boot flags... Oct 2 19:15:43.956190 systemd[1]: Created slice system-sshd.slice. Oct 2 19:15:43.958099 systemd[1]: Started sshd@0-10.200.8.4:22-10.200.12.6:38012.service. Oct 2 19:15:44.765175 sshd[1589]: Accepted publickey for core from 10.200.12.6 port 38012 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:44.766703 sshd[1589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:44.771176 systemd-logind[1293]: New session 3 of user core. Oct 2 19:15:44.772092 systemd[1]: Started session-3.scope. Oct 2 19:15:45.306633 systemd[1]: Started sshd@1-10.200.8.4:22-10.200.12.6:38026.service. Oct 2 19:15:45.939829 sshd[1594]: Accepted publickey for core from 10.200.12.6 port 38026 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:45.941470 sshd[1594]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:45.947071 systemd[1]: Started session-4.scope. Oct 2 19:15:45.947775 systemd-logind[1293]: New session 4 of user core. Oct 2 19:15:46.395225 sshd[1594]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:46.398220 systemd[1]: sshd@1-10.200.8.4:22-10.200.12.6:38026.service: Deactivated successfully. Oct 2 19:15:46.399080 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:15:46.399675 systemd-logind[1293]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:15:46.400397 systemd-logind[1293]: Removed session 4. Oct 2 19:15:46.500319 systemd[1]: Started sshd@2-10.200.8.4:22-10.200.12.6:38034.service. Oct 2 19:15:47.132155 sshd[1600]: Accepted publickey for core from 10.200.12.6 port 38034 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:47.133813 sshd[1600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:47.139206 systemd[1]: Started session-5.scope. Oct 2 19:15:47.139785 systemd-logind[1293]: New session 5 of user core. Oct 2 19:15:47.574112 sshd[1600]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:47.577213 systemd[1]: sshd@2-10.200.8.4:22-10.200.12.6:38034.service: Deactivated successfully. Oct 2 19:15:47.578051 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:15:47.578667 systemd-logind[1293]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:15:47.579387 systemd-logind[1293]: Removed session 5. Oct 2 19:15:47.679109 systemd[1]: Started sshd@3-10.200.8.4:22-10.200.12.6:58092.service. Oct 2 19:15:48.311478 sshd[1606]: Accepted publickey for core from 10.200.12.6 port 58092 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:48.313097 sshd[1606]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:48.318740 systemd[1]: Started session-6.scope. Oct 2 19:15:48.319339 systemd-logind[1293]: New session 6 of user core. Oct 2 19:15:48.756756 sshd[1606]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:48.760099 systemd[1]: sshd@3-10.200.8.4:22-10.200.12.6:58092.service: Deactivated successfully. Oct 2 19:15:48.761101 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:15:48.761824 systemd-logind[1293]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:15:48.762762 systemd-logind[1293]: Removed session 6. Oct 2 19:15:48.860495 systemd[1]: Started sshd@4-10.200.8.4:22-10.200.12.6:58100.service. Oct 2 19:15:49.833820 sshd[1612]: Accepted publickey for core from 10.200.12.6 port 58100 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:49.835476 sshd[1612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:49.840039 systemd[1]: Started session-7.scope. Oct 2 19:15:49.840706 systemd-logind[1293]: New session 7 of user core. Oct 2 19:15:50.454330 sudo[1615]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:15:50.454660 sudo[1615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:15:50.478165 dbus-daemon[1279]: Э\xf0uvU: received setenforce notice (enforcing=1396353440) Oct 2 19:15:50.480011 sudo[1615]: pam_unix(sudo:session): session closed for user root Oct 2 19:15:50.811512 sshd[1612]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:50.815553 systemd[1]: sshd@4-10.200.8.4:22-10.200.12.6:58100.service: Deactivated successfully. Oct 2 19:15:50.816432 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:15:50.817064 systemd-logind[1293]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:15:50.817829 systemd-logind[1293]: Removed session 7. Oct 2 19:15:51.038985 systemd[1]: Started sshd@5-10.200.8.4:22-10.200.12.6:58108.service. Oct 2 19:15:51.663978 sshd[1619]: Accepted publickey for core from 10.200.12.6 port 58108 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:51.665629 sshd[1619]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:51.671207 systemd[1]: Started session-8.scope. Oct 2 19:15:51.671759 systemd-logind[1293]: New session 8 of user core. Oct 2 19:15:52.009162 sudo[1623]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:15:52.009419 sudo[1623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:15:52.012323 sudo[1623]: pam_unix(sudo:session): session closed for user root Oct 2 19:15:52.016695 sudo[1622]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:15:52.016972 sudo[1622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:15:52.025559 systemd[1]: Stopping audit-rules.service... Oct 2 19:15:52.025000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:15:52.030196 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:15:52.030270 kernel: audit: type=1305 audit(1696274152.025:175): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:15:52.030297 auditctl[1626]: No rules Oct 2 19:15:52.027469 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:15:52.027625 systemd[1]: Stopped audit-rules.service. Oct 2 19:15:52.030807 systemd[1]: Starting audit-rules.service... Oct 2 19:15:52.025000 audit[1626]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffefc23d9c0 a2=420 a3=0 items=0 ppid=1 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:52.050859 kernel: audit: type=1300 audit(1696274152.025:175): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffefc23d9c0 a2=420 a3=0 items=0 ppid=1 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:52.050941 kernel: audit: type=1327 audit(1696274152.025:175): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:15:52.025000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:15:52.052521 augenrules[1643]: No rules Oct 2 19:15:52.053245 systemd[1]: Finished audit-rules.service. Oct 2 19:15:52.054209 sudo[1622]: pam_unix(sudo:session): session closed for user root Oct 2 19:15:52.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.066486 kernel: audit: type=1131 audit(1696274152.025:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.066550 kernel: audit: type=1130 audit(1696274152.050:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.050000 audit[1622]: USER_END pid=1622 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.077168 kernel: audit: type=1106 audit(1696274152.050:178): pid=1622 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.050000 audit[1622]: CRED_DISP pid=1622 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.088967 kernel: audit: type=1104 audit(1696274152.050:179): pid=1622 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.154833 sshd[1619]: pam_unix(sshd:session): session closed for user core Oct 2 19:15:52.155000 audit[1619]: USER_END pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:52.155000 audit[1619]: CRED_DISP pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:52.158155 systemd[1]: sshd@5-10.200.8.4:22-10.200.12.6:58108.service: Deactivated successfully. Oct 2 19:15:52.159134 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:15:52.160294 systemd-logind[1293]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:15:52.161267 systemd-logind[1293]: Removed session 8. Oct 2 19:15:52.182031 kernel: audit: type=1106 audit(1696274152.155:180): pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:52.182124 kernel: audit: type=1104 audit(1696274152.155:181): pid=1619 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:52.182150 kernel: audit: type=1131 audit(1696274152.155:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.4:22-10.200.12.6:58108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.4:22-10.200.12.6:58108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:52.521719 systemd[1]: Started sshd@6-10.200.8.4:22-10.200.12.6:58120.service. Oct 2 19:15:52.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.4:22-10.200.12.6:58120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:53.154000 audit[1649]: USER_ACCT pid=1649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:53.156024 sshd[1649]: Accepted publickey for core from 10.200.12.6 port 58120 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:15:53.156000 audit[1649]: CRED_ACQ pid=1649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:53.156000 audit[1649]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff95260360 a2=3 a3=0 items=0 ppid=1 pid=1649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:53.156000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:15:53.157650 sshd[1649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:15:53.162260 systemd[1]: Started session-9.scope. Oct 2 19:15:53.162715 systemd-logind[1293]: New session 9 of user core. Oct 2 19:15:53.166000 audit[1649]: USER_START pid=1649 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:53.167000 audit[1651]: CRED_ACQ pid=1651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:15:53.510000 audit[1652]: USER_ACCT pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:53.511000 audit[1652]: CRED_REFR pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:53.511946 sudo[1652]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:15:53.512297 sudo[1652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:15:53.513000 audit[1652]: USER_START pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.240458 systemd[1]: Starting docker.service... Oct 2 19:15:54.277818 env[1667]: time="2023-10-02T19:15:54.277757945Z" level=info msg="Starting up" Oct 2 19:15:54.279083 env[1667]: time="2023-10-02T19:15:54.279059559Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:15:54.279083 env[1667]: time="2023-10-02T19:15:54.279078659Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:15:54.279238 env[1667]: time="2023-10-02T19:15:54.279099759Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:15:54.279238 env[1667]: time="2023-10-02T19:15:54.279112560Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:15:54.281137 env[1667]: time="2023-10-02T19:15:54.281112380Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:15:54.281137 env[1667]: time="2023-10-02T19:15:54.281128180Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:15:54.281334 env[1667]: time="2023-10-02T19:15:54.281143681Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:15:54.281334 env[1667]: time="2023-10-02T19:15:54.281156381Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:15:54.357228 env[1667]: time="2023-10-02T19:15:54.357191369Z" level=info msg="Loading containers: start." Oct 2 19:15:54.392000 audit[1695]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.392000 audit[1695]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeebe0a080 a2=0 a3=7ffeebe0a06c items=0 ppid=1667 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.392000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:15:54.394000 audit[1697]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.394000 audit[1697]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe62eac3e0 a2=0 a3=7ffe62eac3cc items=0 ppid=1667 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.394000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:15:54.396000 audit[1699]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.396000 audit[1699]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffed8588ad0 a2=0 a3=7ffed8588abc items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:15:54.397000 audit[1701]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.397000 audit[1701]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc8053ab90 a2=0 a3=7ffc8053ab7c items=0 ppid=1667 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.397000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:15:54.399000 audit[1703]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.399000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffce3755670 a2=0 a3=7ffce375565c items=0 ppid=1667 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.399000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:15:54.401000 audit[1705]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.401000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef695a9a0 a2=0 a3=7ffef695a98c items=0 ppid=1667 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.401000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:15:54.417000 audit[1707]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.417000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc450aca80 a2=0 a3=7ffc450aca6c items=0 ppid=1667 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.417000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:15:54.419000 audit[1709]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.419000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff6f12b760 a2=0 a3=7fff6f12b74c items=0 ppid=1667 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.419000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:15:54.421000 audit[1711]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.421000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffebbe60c0 a2=0 a3=7fffebbe60ac items=0 ppid=1667 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.421000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:15:54.436000 audit[1715]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.436000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffa59992f0 a2=0 a3=7fffa59992dc items=0 ppid=1667 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.436000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:15:54.437000 audit[1716]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.437000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc72f94250 a2=0 a3=7ffc72f9423c items=0 ppid=1667 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.437000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:15:54.473981 kernel: Initializing XFRM netlink socket Oct 2 19:15:54.512205 env[1667]: time="2023-10-02T19:15:54.509689351Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:15:54.567000 audit[1724]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.567000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc60e13320 a2=0 a3=7ffc60e1330c items=0 ppid=1667 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.567000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:15:54.592000 audit[1727]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.592000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff43022350 a2=0 a3=7fff4302233c items=0 ppid=1667 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.592000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:15:54.595000 audit[1730]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.595000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe40b81ac0 a2=0 a3=7ffe40b81aac items=0 ppid=1667 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.595000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:15:54.597000 audit[1732]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.597000 audit[1732]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdc6e2b720 a2=0 a3=7ffdc6e2b70c items=0 ppid=1667 pid=1732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.597000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:15:54.598000 audit[1734]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.598000 audit[1734]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffef5896c50 a2=0 a3=7ffef5896c3c items=0 ppid=1667 pid=1734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.598000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:15:54.600000 audit[1736]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.600000 audit[1736]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff52be40c0 a2=0 a3=7fff52be40ac items=0 ppid=1667 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.600000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:15:54.602000 audit[1738]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.602000 audit[1738]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffee0e90650 a2=0 a3=7ffee0e9063c items=0 ppid=1667 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.602000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:15:54.604000 audit[1740]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.604000 audit[1740]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffefb55570 a2=0 a3=7fffefb5555c items=0 ppid=1667 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.604000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:15:54.606000 audit[1742]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.606000 audit[1742]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcff16bed0 a2=0 a3=7ffcff16bebc items=0 ppid=1667 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.606000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:15:54.608000 audit[1744]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.608000 audit[1744]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd0e79b310 a2=0 a3=7ffd0e79b2fc items=0 ppid=1667 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.608000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:15:54.610000 audit[1746]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.610000 audit[1746]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff1c050320 a2=0 a3=7fff1c05030c items=0 ppid=1667 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.610000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:15:54.611923 systemd-networkd[1459]: docker0: Link UP Oct 2 19:15:54.629000 audit[1750]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.629000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc4e8b260 a2=0 a3=7ffcc4e8b24c items=0 ppid=1667 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.629000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:15:54.630000 audit[1751]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:15:54.630000 audit[1751]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff8980a7e0 a2=0 a3=7fff8980a7cc items=0 ppid=1667 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:15:54.630000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:15:54.632151 env[1667]: time="2023-10-02T19:15:54.632115020Z" level=info msg="Loading containers: done." Oct 2 19:15:54.669467 env[1667]: time="2023-10-02T19:15:54.669419707Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:15:54.669670 env[1667]: time="2023-10-02T19:15:54.669642409Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:15:54.669801 env[1667]: time="2023-10-02T19:15:54.669778111Z" level=info msg="Daemon has completed initialization" Oct 2 19:15:54.706651 systemd[1]: Started docker.service. Oct 2 19:15:54.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:54.717996 env[1667]: time="2023-10-02T19:15:54.717912910Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:15:54.734545 systemd[1]: Reloading. Oct 2 19:15:54.826669 /usr/lib/systemd/system-generators/torcx-generator[1798]: time="2023-10-02T19:15:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:15:54.826706 /usr/lib/systemd/system-generators/torcx-generator[1798]: time="2023-10-02T19:15:54Z" level=info msg="torcx already run" Oct 2 19:15:54.904122 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:15:54.904144 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:15:54.920615 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit: BPF prog-id=38 op=LOAD Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit: BPF prog-id=39 op=LOAD Oct 2 19:15:54.989000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:15:54.989000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.989000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.990000 audit: BPF prog-id=40 op=LOAD Oct 2 19:15:54.990000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit: BPF prog-id=41 op=LOAD Oct 2 19:15:54.991000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.992000 audit: BPF prog-id=42 op=LOAD Oct 2 19:15:54.992000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit: BPF prog-id=43 op=LOAD Oct 2 19:15:54.995000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit: BPF prog-id=44 op=LOAD Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.995000 audit: BPF prog-id=45 op=LOAD Oct 2 19:15:54.995000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:15:54.995000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit: BPF prog-id=46 op=LOAD Oct 2 19:15:54.996000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit: BPF prog-id=47 op=LOAD Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.996000 audit: BPF prog-id=48 op=LOAD Oct 2 19:15:54.996000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:15:54.996000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit: BPF prog-id=49 op=LOAD Oct 2 19:15:54.998000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit: BPF prog-id=50 op=LOAD Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:54.998000 audit: BPF prog-id=51 op=LOAD Oct 2 19:15:54.998000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:15:54.998000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:15:55.000000 audit: BPF prog-id=52 op=LOAD Oct 2 19:15:55.000000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:15:55.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:15:55.011903 systemd[1]: Started kubelet.service. Oct 2 19:15:55.075276 kubelet[1859]: E1002 19:15:55.075224 1859 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:15:55.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:15:55.076703 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:15:55.076813 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:15:58.586100 env[1309]: time="2023-10-02T19:15:58.586035078Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 19:15:59.330371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount231052337.mount: Deactivated successfully. Oct 2 19:16:01.391668 env[1309]: time="2023-10-02T19:16:01.391606063Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:01.400745 env[1309]: time="2023-10-02T19:16:01.400681943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:01.410048 env[1309]: time="2023-10-02T19:16:01.410012925Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:01.416909 env[1309]: time="2023-10-02T19:16:01.416811184Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:01.417798 env[1309]: time="2023-10-02T19:16:01.417768293Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f\"" Oct 2 19:16:01.428578 env[1309]: time="2023-10-02T19:16:01.428549887Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 19:16:03.338687 env[1309]: time="2023-10-02T19:16:03.338630289Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:03.345268 env[1309]: time="2023-10-02T19:16:03.345222644Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:03.349791 env[1309]: time="2023-10-02T19:16:03.349754482Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:03.355129 env[1309]: time="2023-10-02T19:16:03.355095826Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:03.355729 env[1309]: time="2023-10-02T19:16:03.355698131Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f\"" Oct 2 19:16:03.365973 env[1309]: time="2023-10-02T19:16:03.365924717Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 19:16:04.524637 env[1309]: time="2023-10-02T19:16:04.524575310Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:04.531424 env[1309]: time="2023-10-02T19:16:04.531371666Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:04.538127 env[1309]: time="2023-10-02T19:16:04.538089221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:04.543900 env[1309]: time="2023-10-02T19:16:04.543867368Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:04.544558 env[1309]: time="2023-10-02T19:16:04.544522873Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a\"" Oct 2 19:16:04.554449 env[1309]: time="2023-10-02T19:16:04.554420654Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 19:16:05.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.237222 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:16:05.243489 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:16:05.243529 kernel: audit: type=1130 audit(1696274165.236:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.237450 systemd[1]: Stopped kubelet.service. Oct 2 19:16:05.239553 systemd[1]: Started kubelet.service. Oct 2 19:16:05.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.269971 kernel: audit: type=1131 audit(1696274165.236:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.286003 kernel: audit: type=1130 audit(1696274165.238:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:05.312353 kubelet[1893]: E1002 19:16:05.312311 1893 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:16:05.316263 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:16:05.316425 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:16:05.315000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:16:05.331987 kernel: audit: type=1131 audit(1696274165.315:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:16:05.648933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1631180973.mount: Deactivated successfully. Oct 2 19:16:06.102605 env[1309]: time="2023-10-02T19:16:06.102550790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.107639 env[1309]: time="2023-10-02T19:16:06.107595429Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.111727 env[1309]: time="2023-10-02T19:16:06.111690061Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.114943 env[1309]: time="2023-10-02T19:16:06.114908287Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.115409 env[1309]: time="2023-10-02T19:16:06.115377690Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2\"" Oct 2 19:16:06.125538 env[1309]: time="2023-10-02T19:16:06.125510169Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 19:16:06.630728 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1762994950.mount: Deactivated successfully. Oct 2 19:16:06.655859 env[1309]: time="2023-10-02T19:16:06.655814713Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.663435 env[1309]: time="2023-10-02T19:16:06.663395672Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.668154 env[1309]: time="2023-10-02T19:16:06.668065309Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.673889 env[1309]: time="2023-10-02T19:16:06.673860054Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:06.674326 env[1309]: time="2023-10-02T19:16:06.674298858Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517\"" Oct 2 19:16:06.688200 env[1309]: time="2023-10-02T19:16:06.688164766Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:16:07.519682 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3001369827.mount: Deactivated successfully. Oct 2 19:16:11.654387 env[1309]: time="2023-10-02T19:16:11.654336174Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:11.662896 env[1309]: time="2023-10-02T19:16:11.662851834Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:11.670121 env[1309]: time="2023-10-02T19:16:11.670093284Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:11.675606 env[1309]: time="2023-10-02T19:16:11.675576623Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:11.676142 env[1309]: time="2023-10-02T19:16:11.676111126Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:16:11.686434 env[1309]: time="2023-10-02T19:16:11.686398499Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:16:12.337269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3076491186.mount: Deactivated successfully. Oct 2 19:16:12.942734 env[1309]: time="2023-10-02T19:16:12.942683060Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:12.950297 env[1309]: time="2023-10-02T19:16:12.950259312Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:12.955461 env[1309]: time="2023-10-02T19:16:12.955423848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:12.961065 env[1309]: time="2023-10-02T19:16:12.961030586Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:12.961494 env[1309]: time="2023-10-02T19:16:12.961461389Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:16:15.319798 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:16:15.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.320077 systemd[1]: Stopped kubelet.service. Oct 2 19:16:15.337982 kernel: audit: type=1130 audit(1696274175.319:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.339262 systemd[1]: Started kubelet.service. Oct 2 19:16:15.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.356972 kernel: audit: type=1131 audit(1696274175.319:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.377993 kernel: audit: type=1130 audit(1696274175.338:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.391408 systemd[1]: Stopping kubelet.service... Oct 2 19:16:15.392329 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:16:15.392539 systemd[1]: Stopped kubelet.service. Oct 2 19:16:15.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.404978 kernel: audit: type=1131 audit(1696274175.391:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.414680 systemd[1]: Reloading. Oct 2 19:16:15.484439 /usr/lib/systemd/system-generators/torcx-generator[1998]: time="2023-10-02T19:16:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:16:15.492034 /usr/lib/systemd/system-generators/torcx-generator[1998]: time="2023-10-02T19:16:15Z" level=info msg="torcx already run" Oct 2 19:16:15.584913 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:16:15.584937 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:16:15.601486 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697858 kernel: audit: type=1400 audit(1696274175.669:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697971 kernel: audit: type=1400 audit(1696274175.669:400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.698001 kernel: audit: type=1400 audit(1696274175.669:401): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.723967 kernel: audit: type=1400 audit(1696274175.669:402): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.724053 kernel: audit: type=1400 audit(1696274175.669:403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751013 kernel: audit: type=1400 audit(1696274175.669:404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit: BPF prog-id=53 op=LOAD Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit: BPF prog-id=54 op=LOAD Oct 2 19:16:15.709000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:16:15.709000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.736000 audit: BPF prog-id=55 op=LOAD Oct 2 19:16:15.736000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit: BPF prog-id=56 op=LOAD Oct 2 19:16:15.751000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.751000 audit: BPF prog-id=57 op=LOAD Oct 2 19:16:15.751000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit: BPF prog-id=58 op=LOAD Oct 2 19:16:15.754000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit: BPF prog-id=59 op=LOAD Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.754000 audit: BPF prog-id=60 op=LOAD Oct 2 19:16:15.755000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:16:15.755000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit: BPF prog-id=61 op=LOAD Oct 2 19:16:15.755000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.755000 audit: BPF prog-id=62 op=LOAD Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.756000 audit: BPF prog-id=63 op=LOAD Oct 2 19:16:15.756000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:16:15.756000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:16:15.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit: BPF prog-id=64 op=LOAD Oct 2 19:16:15.758000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit: BPF prog-id=65 op=LOAD Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.758000 audit: BPF prog-id=66 op=LOAD Oct 2 19:16:15.758000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:16:15.758000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:15.759000 audit: BPF prog-id=67 op=LOAD Oct 2 19:16:15.759000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:16:15.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:15.776754 systemd[1]: Started kubelet.service. Oct 2 19:16:15.828547 kubelet[2060]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:16:15.828547 kubelet[2060]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:16:15.828547 kubelet[2060]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:16:15.829039 kubelet[2060]: I1002 19:16:15.828594 2060 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:16:15.831492 kubelet[2060]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:16:15.831492 kubelet[2060]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:16:15.831492 kubelet[2060]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:16:16.219002 kubelet[2060]: I1002 19:16:16.218950 2060 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:16:16.219002 kubelet[2060]: I1002 19:16:16.218998 2060 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:16:16.219321 kubelet[2060]: I1002 19:16:16.219293 2060 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:16:16.222349 kubelet[2060]: E1002 19:16:16.222324 2060 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.4:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.222552 kubelet[2060]: I1002 19:16:16.222537 2060 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:16:16.224817 kubelet[2060]: I1002 19:16:16.224788 2060 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:16:16.225036 kubelet[2060]: I1002 19:16:16.225018 2060 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:16:16.225133 kubelet[2060]: I1002 19:16:16.225117 2060 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:16:16.225276 kubelet[2060]: I1002 19:16:16.225143 2060 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:16:16.225276 kubelet[2060]: I1002 19:16:16.225165 2060 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:16:16.225367 kubelet[2060]: I1002 19:16:16.225279 2060 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:16:16.227722 kubelet[2060]: I1002 19:16:16.227703 2060 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:16:16.227722 kubelet[2060]: I1002 19:16:16.227724 2060 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:16:16.227852 kubelet[2060]: I1002 19:16:16.227745 2060 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:16:16.227852 kubelet[2060]: I1002 19:16:16.227759 2060 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:16:16.237248 kubelet[2060]: W1002 19:16:16.237199 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://10.200.8.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-f1fdbe70e6&limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.237348 kubelet[2060]: E1002 19:16:16.237274 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-f1fdbe70e6&limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.238037 kubelet[2060]: I1002 19:16:16.238016 2060 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:16:16.238337 kubelet[2060]: W1002 19:16:16.238312 2060 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:16:16.238779 kubelet[2060]: I1002 19:16:16.238758 2060 server.go:1175] "Started kubelet" Oct 2 19:16:16.239107 kubelet[2060]: W1002 19:16:16.239072 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://10.200.8.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.239191 kubelet[2060]: E1002 19:16:16.239111 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.240105 kubelet[2060]: E1002 19:16:16.239661 2060 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-f1fdbe70e6.178a6060446062c6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-f1fdbe70e6", UID:"ci-3510.3.0-a-f1fdbe70e6", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-f1fdbe70e6"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 16, 16, 238707398, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 16, 16, 238707398, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.4:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.4:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:16:16.240105 kubelet[2060]: I1002 19:16:16.239816 2060 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:16:16.240504 kubelet[2060]: I1002 19:16:16.240481 2060 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:16:16.240000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:16.240000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:16.240000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b7fe00 a1=c0004fb2f0 a2=c000b7fdd0 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.240000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:16.240000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:16.240000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:16.240000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000421060 a1=c0004fb308 a2=c000b7fe90 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.240000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:16.242371 kubelet[2060]: I1002 19:16:16.241805 2060 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:16:16.242371 kubelet[2060]: I1002 19:16:16.241853 2060 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:16:16.242371 kubelet[2060]: I1002 19:16:16.241915 2060 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:16:16.243000 audit[2071]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.243000 audit[2071]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcf2ee9080 a2=0 a3=7ffcf2ee906c items=0 ppid=2060 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:16:16.246014 kubelet[2060]: I1002 19:16:16.245994 2060 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:16:16.246000 audit[2072]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2072 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.246000 audit[2072]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd5c9a950 a2=0 a3=7ffcd5c9a93c items=0 ppid=2060 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.246000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:16:16.247408 kubelet[2060]: I1002 19:16:16.247387 2060 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:16:16.248000 audit[2074]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.248000 audit[2074]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdc958fcf0 a2=0 a3=7ffdc958fcdc items=0 ppid=2060 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.248000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:16:16.250000 audit[2076]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.250000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffdcbce1c0 a2=0 a3=7fffdcbce1ac items=0 ppid=2060 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.250000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:16:16.257264 kubelet[2060]: E1002 19:16:16.257081 2060 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.8.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-f1fdbe70e6?timeout=10s": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.257601 kubelet[2060]: W1002 19:16:16.257565 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://10.200.8.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.257721 kubelet[2060]: E1002 19:16:16.257710 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.257813 kubelet[2060]: E1002 19:16:16.257601 2060 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:16:16.257921 kubelet[2060]: E1002 19:16:16.257908 2060 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:16:16.258317 kubelet[2060]: E1002 19:16:16.258303 2060 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:16.277000 audit[2085]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.277000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffce934daa0 a2=0 a3=7ffce934da8c items=0 ppid=2060 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.277000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:16:16.278000 audit[2086]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.278000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff6babc1d0 a2=0 a3=7fff6babc1bc items=0 ppid=2060 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:16:16.296443 kubelet[2060]: I1002 19:16:16.296426 2060 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:16:16.296567 kubelet[2060]: I1002 19:16:16.296560 2060 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:16:16.296634 kubelet[2060]: I1002 19:16:16.296628 2060 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:16:16.302121 kubelet[2060]: I1002 19:16:16.302102 2060 policy_none.go:49] "None policy: Start" Oct 2 19:16:16.302800 kubelet[2060]: I1002 19:16:16.302786 2060 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:16:16.302907 kubelet[2060]: I1002 19:16:16.302901 2060 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:16:16.311000 audit[2089]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.311000 audit[2089]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdbb323ca0 a2=0 a3=7ffdbb323c8c items=0 ppid=2060 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.311000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:16:16.313881 systemd[1]: Created slice kubepods.slice. Oct 2 19:16:16.319113 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:16:16.321861 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:16:16.326529 kubelet[2060]: I1002 19:16:16.326516 2060 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:16:16.325000 audit[2060]: AVC avc: denied { mac_admin } for pid=2060 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:16.325000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:16.325000 audit[2060]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ecf470 a1=c000ec5668 a2=c000ecf440 a3=25 items=0 ppid=1 pid=2060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.325000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:16.328340 kubelet[2060]: I1002 19:16:16.328325 2060 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:16:16.328756 kubelet[2060]: I1002 19:16:16.328742 2060 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:16:16.329625 kubelet[2060]: E1002 19:16:16.329609 2060 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.332000 audit[2093]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.332000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc119a7d20 a2=0 a3=7ffc119a7d0c items=0 ppid=2060 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:16:16.334000 audit[2094]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.334000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffee5df32d0 a2=0 a3=7ffee5df32bc items=0 ppid=2060 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.334000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:16:16.335000 audit[2095]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.335000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff700780c0 a2=0 a3=7fff700780ac items=0 ppid=2060 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:16:16.337000 audit[2097]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.337000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd49e91960 a2=0 a3=7ffd49e9194c items=0 ppid=2060 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.337000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:16:16.339000 audit[2099]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.339000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd916bd110 a2=0 a3=7ffd916bd0fc items=0 ppid=2060 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:16:16.341000 audit[2101]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.341000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe23d201b0 a2=0 a3=7ffe23d2019c items=0 ppid=2060 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:16:16.343000 audit[2103]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.343000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff31f3f1a0 a2=0 a3=7fff31f3f18c items=0 ppid=2060 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.343000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:16:16.346230 kubelet[2060]: E1002 19:16:16.346212 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.347549 kubelet[2060]: I1002 19:16:16.347538 2060 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.347988 kubelet[2060]: E1002 19:16:16.347975 2060 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.4:6443/api/v1/nodes\": dial tcp 10.200.8.4:6443: connect: connection refused" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.347000 audit[2105]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.347000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffda7cb6840 a2=0 a3=7ffda7cb682c items=0 ppid=2060 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:16:16.349095 kubelet[2060]: I1002 19:16:16.349084 2060 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:16:16.349000 audit[2106]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.349000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff34363060 a2=0 a3=7fff3436304c items=0 ppid=2060 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.349000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:16:16.349000 audit[2107]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.349000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb094aa20 a2=0 a3=7fffb094aa0c items=0 ppid=2060 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:16:16.350000 audit[2108]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.350000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd625d6c20 a2=0 a3=7ffd625d6c0c items=0 ppid=2060 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.350000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:16:16.351000 audit[2109]: NETFILTER_CFG table=nat:48 family=2 entries=1 op=nft_register_chain pid=2109 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.351000 audit[2109]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc54b00630 a2=0 a3=7ffc54b0061c items=0 ppid=2060 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.351000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:16:16.352000 audit[2111]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2111 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:16.352000 audit[2111]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbb3bd7d0 a2=0 a3=7ffdbb3bd7bc items=0 ppid=2060 pid=2111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:16:16.353000 audit[2112]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_rule pid=2112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.353000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff11986420 a2=0 a3=7fff1198640c items=0 ppid=2060 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:16:16.354000 audit[2113]: NETFILTER_CFG table=filter:51 family=10 entries=2 op=nft_register_chain pid=2113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.354000 audit[2113]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffcdafd6b70 a2=0 a3=7ffcdafd6b5c items=0 ppid=2060 pid=2113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.354000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:16:16.356000 audit[2115]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=2115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.356000 audit[2115]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe49c78e20 a2=0 a3=7ffe49c78e0c items=0 ppid=2060 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.356000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:16:16.357000 audit[2116]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.357000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffb852faf0 a2=0 a3=7fffb852fadc items=0 ppid=2060 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:16:16.358000 audit[2117]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_chain pid=2117 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.358000 audit[2117]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff29ac6b30 a2=0 a3=7fff29ac6b1c items=0 ppid=2060 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.358000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:16:16.360000 audit[2119]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.360000 audit[2119]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc2a047c90 a2=0 a3=7ffc2a047c7c items=0 ppid=2060 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:16:16.362000 audit[2121]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=2121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.362000 audit[2121]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffff8c1c280 a2=0 a3=7ffff8c1c26c items=0 ppid=2060 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:16:16.364000 audit[2123]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.364000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc5fe59400 a2=0 a3=7ffc5fe593ec items=0 ppid=2060 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.364000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:16:16.367000 audit[2125]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.367000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffdfd2e9cc0 a2=0 a3=7ffdfd2e9cac items=0 ppid=2060 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:16:16.370000 audit[2127]: NETFILTER_CFG table=nat:59 family=10 entries=1 op=nft_register_rule pid=2127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.370000 audit[2127]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fff6bbec860 a2=0 a3=7fff6bbec84c items=0 ppid=2060 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.370000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:16:16.371893 kubelet[2060]: I1002 19:16:16.371874 2060 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:16:16.371994 kubelet[2060]: I1002 19:16:16.371898 2060 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:16:16.371994 kubelet[2060]: I1002 19:16:16.371915 2060 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:16:16.371994 kubelet[2060]: E1002 19:16:16.371977 2060 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:16:16.373019 kubelet[2060]: W1002 19:16:16.372965 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://10.200.8.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.373145 kubelet[2060]: E1002 19:16:16.373132 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.372000 audit[2128]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.372000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe31d8be90 a2=0 a3=7ffe31d8be7c items=0 ppid=2060 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.372000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:16:16.373000 audit[2130]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.373000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff32b4daf0 a2=0 a3=7fff32b4dadc items=0 ppid=2060 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.373000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:16:16.374000 audit[2131]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2131 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:16.374000 audit[2131]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7bf95170 a2=0 a3=7ffc7bf9515c items=0 ppid=2060 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:16.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:16:16.447120 kubelet[2060]: E1002 19:16:16.447075 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.457668 kubelet[2060]: E1002 19:16:16.457628 2060 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.8.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-f1fdbe70e6?timeout=10s": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.473263 kubelet[2060]: I1002 19:16:16.472916 2060 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:16.475059 kubelet[2060]: I1002 19:16:16.475029 2060 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:16.477195 kubelet[2060]: I1002 19:16:16.477178 2060 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:16.478775 kubelet[2060]: I1002 19:16:16.478757 2060 status_manager.go:667] "Failed to get status for pod" podUID=45fe2dcc9fa5db0b813d2b589a5565d8 pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" err="Get \"https://10.200.8.4:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\": dial tcp 10.200.8.4:6443: connect: connection refused" Oct 2 19:16:16.482153 kubelet[2060]: I1002 19:16:16.482039 2060 status_manager.go:667] "Failed to get status for pod" podUID=67205f7060a6f5b8ae34e83467202855 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" err="Get \"https://10.200.8.4:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\": dial tcp 10.200.8.4:6443: connect: connection refused" Oct 2 19:16:16.484197 kubelet[2060]: I1002 19:16:16.484182 2060 status_manager.go:667] "Failed to get status for pod" podUID=3910e3c5af7ad78fb4a3bffaa9910310 pod="kube-system/kube-scheduler-ci-3510.3.0-a-f1fdbe70e6" err="Get \"https://10.200.8.4:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-f1fdbe70e6\": dial tcp 10.200.8.4:6443: connect: connection refused" Oct 2 19:16:16.484684 systemd[1]: Created slice kubepods-burstable-pod45fe2dcc9fa5db0b813d2b589a5565d8.slice. Oct 2 19:16:16.494731 systemd[1]: Created slice kubepods-burstable-pod67205f7060a6f5b8ae34e83467202855.slice. Oct 2 19:16:16.499374 systemd[1]: Created slice kubepods-burstable-pod3910e3c5af7ad78fb4a3bffaa9910310.slice. Oct 2 19:16:16.547619 kubelet[2060]: E1002 19:16:16.547571 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.549070 kubelet[2060]: I1002 19:16:16.549039 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.549653 kubelet[2060]: I1002 19:16:16.549397 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.549653 kubelet[2060]: I1002 19:16:16.549452 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.549653 kubelet[2060]: I1002 19:16:16.549506 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.549653 kubelet[2060]: I1002 19:16:16.549580 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.550015 kubelet[2060]: I1002 19:16:16.549994 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3910e3c5af7ad78fb4a3bffaa9910310-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"3910e3c5af7ad78fb4a3bffaa9910310\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.550086 kubelet[2060]: I1002 19:16:16.550074 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.550142 kubelet[2060]: I1002 19:16:16.550117 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.550204 kubelet[2060]: I1002 19:16:16.550176 2060 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.551088 kubelet[2060]: I1002 19:16:16.551061 2060 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.551470 kubelet[2060]: E1002 19:16:16.551446 2060 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.4:6443/api/v1/nodes\": dial tcp 10.200.8.4:6443: connect: connection refused" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.647980 kubelet[2060]: E1002 19:16:16.647906 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.748778 kubelet[2060]: E1002 19:16:16.748649 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.792879 env[1309]: time="2023-10-02T19:16:16.792824097Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-f1fdbe70e6,Uid:45fe2dcc9fa5db0b813d2b589a5565d8,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:16.798398 env[1309]: time="2023-10-02T19:16:16.798349432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6,Uid:67205f7060a6f5b8ae34e83467202855,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:16.802203 env[1309]: time="2023-10-02T19:16:16.802174356Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-f1fdbe70e6,Uid:3910e3c5af7ad78fb4a3bffaa9910310,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:16.849024 kubelet[2060]: E1002 19:16:16.848991 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.858567 kubelet[2060]: E1002 19:16:16.858537 2060 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.8.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-f1fdbe70e6?timeout=10s": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:16.949999 kubelet[2060]: E1002 19:16:16.949934 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:16.953637 kubelet[2060]: I1002 19:16:16.953610 2060 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:16.953998 kubelet[2060]: E1002 19:16:16.953977 2060 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.4:6443/api/v1/nodes\": dial tcp 10.200.8.4:6443: connect: connection refused" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:17.050571 kubelet[2060]: E1002 19:16:17.050469 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.151039 kubelet[2060]: E1002 19:16:17.151003 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.251425 kubelet[2060]: E1002 19:16:17.251388 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.352179 kubelet[2060]: E1002 19:16:17.352137 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.368171 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount283950891.mount: Deactivated successfully. Oct 2 19:16:17.401874 env[1309]: time="2023-10-02T19:16:17.401820693Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.406431 env[1309]: time="2023-10-02T19:16:17.406396221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.421470 env[1309]: time="2023-10-02T19:16:17.421435614Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.426386 env[1309]: time="2023-10-02T19:16:17.426345944Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.430142 env[1309]: time="2023-10-02T19:16:17.430109468Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.435595 env[1309]: time="2023-10-02T19:16:17.435557301Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.439376 env[1309]: time="2023-10-02T19:16:17.439343625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.443917 env[1309]: time="2023-10-02T19:16:17.443886353Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.450230 env[1309]: time="2023-10-02T19:16:17.450201692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.452452 kubelet[2060]: E1002 19:16:17.452426 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.454108 env[1309]: time="2023-10-02T19:16:17.454074216Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.470848 env[1309]: time="2023-10-02T19:16:17.470749719Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.486634 env[1309]: time="2023-10-02T19:16:17.486598317Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:17.543396 kubelet[2060]: W1002 19:16:17.543352 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://10.200.8.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.543396 kubelet[2060]: E1002 19:16:17.543404 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.4:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.546539 env[1309]: time="2023-10-02T19:16:17.546453688Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:17.546539 env[1309]: time="2023-10-02T19:16:17.546497688Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:17.546919 env[1309]: time="2023-10-02T19:16:17.546718789Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:17.547534 env[1309]: time="2023-10-02T19:16:17.546906191Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3d3e5994656f5aa847142fe41645ff770f40e2b5758c99d70c4a72007a1a41ce pid=2140 runtime=io.containerd.runc.v2 Oct 2 19:16:17.553012 kubelet[2060]: E1002 19:16:17.552983 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.556675 env[1309]: time="2023-10-02T19:16:17.556481850Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:17.556675 env[1309]: time="2023-10-02T19:16:17.556523050Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:17.556675 env[1309]: time="2023-10-02T19:16:17.556537850Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:17.558369 env[1309]: time="2023-10-02T19:16:17.557430356Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/acd70ab1200cb861a701a92991f2bcd4246afab979ada7b13b88b8c470ec20a4 pid=2155 runtime=io.containerd.runc.v2 Oct 2 19:16:17.558586 kubelet[2060]: W1002 19:16:17.558557 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://10.200.8.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-f1fdbe70e6&limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.558670 kubelet[2060]: E1002 19:16:17.558599 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.4:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-f1fdbe70e6&limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.570400 systemd[1]: Started cri-containerd-3d3e5994656f5aa847142fe41645ff770f40e2b5758c99d70c4a72007a1a41ce.scope. Oct 2 19:16:17.593074 systemd[1]: Started cri-containerd-acd70ab1200cb861a701a92991f2bcd4246afab979ada7b13b88b8c470ec20a4.scope. Oct 2 19:16:17.601002 env[1309]: time="2023-10-02T19:16:17.600905725Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:17.601281 env[1309]: time="2023-10-02T19:16:17.601231327Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:17.601483 env[1309]: time="2023-10-02T19:16:17.601439528Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:17.601780 env[1309]: time="2023-10-02T19:16:17.601745830Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2988cdee2d37859e17cefa01220ca8d52cb049670fc405b15fb09550f805e718 pid=2200 runtime=io.containerd.runc.v2 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit: BPF prog-id=68 op=LOAD Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2140 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336535393934363536663561613834373134326665343136343566 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2140 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336535393934363536663561613834373134326665343136343566 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.603000 audit: BPF prog-id=69 op=LOAD Oct 2 19:16:17.603000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000385720 items=0 ppid=2140 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336535393934363536663561613834373134326665343136343566 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit: BPF prog-id=70 op=LOAD Oct 2 19:16:17.604000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000385768 items=0 ppid=2140 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336535393934363536663561613834373134326665343136343566 Oct 2 19:16:17.604000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:16:17.604000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { perfmon } for pid=2157 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit[2157]: AVC avc: denied { bpf } for pid=2157 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.604000 audit: BPF prog-id=71 op=LOAD Oct 2 19:16:17.604000 audit[2157]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000385b78 items=0 ppid=2140 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364336535393934363536663561613834373134326665343136343566 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.612000 audit: BPF prog-id=72 op=LOAD Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2155 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163643730616231323030636238363161373031613932393931663262 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2155 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163643730616231323030636238363161373031613932393931663262 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit: BPF prog-id=73 op=LOAD Oct 2 19:16:17.613000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003911b0 items=0 ppid=2155 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163643730616231323030636238363161373031613932393931663262 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit: BPF prog-id=74 op=LOAD Oct 2 19:16:17.613000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003911f8 items=0 ppid=2155 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163643730616231323030636238363161373031613932393931663262 Oct 2 19:16:17.613000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:16:17.613000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.613000 audit: BPF prog-id=75 op=LOAD Oct 2 19:16:17.613000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000391608 items=0 ppid=2155 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.613000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163643730616231323030636238363161373031613932393931663262 Oct 2 19:16:17.647863 systemd[1]: Started cri-containerd-2988cdee2d37859e17cefa01220ca8d52cb049670fc405b15fb09550f805e718.scope. Oct 2 19:16:17.654459 kubelet[2060]: E1002 19:16:17.654427 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.659367 kubelet[2060]: E1002 19:16:17.659331 2060 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.8.4:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-f1fdbe70e6?timeout=10s": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.665297 env[1309]: time="2023-10-02T19:16:17.665252423Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6,Uid:67205f7060a6f5b8ae34e83467202855,Namespace:kube-system,Attempt:0,} returns sandbox id \"acd70ab1200cb861a701a92991f2bcd4246afab979ada7b13b88b8c470ec20a4\"" Oct 2 19:16:17.679154 env[1309]: time="2023-10-02T19:16:17.679112409Z" level=info msg="CreateContainer within sandbox \"acd70ab1200cb861a701a92991f2bcd4246afab979ada7b13b88b8c470ec20a4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.685000 audit: BPF prog-id=76 op=LOAD Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2200 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383863646565326433373835396531376365666130313232306361 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2200 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383863646565326433373835396531376365666130313232306361 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit: BPF prog-id=77 op=LOAD Oct 2 19:16:17.686000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003dc6f0 items=0 ppid=2200 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383863646565326433373835396531376365666130313232306361 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit: BPF prog-id=78 op=LOAD Oct 2 19:16:17.686000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003dc738 items=0 ppid=2200 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383863646565326433373835396531376365666130313232306361 Oct 2 19:16:17.686000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:16:17.686000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.686000 audit: BPF prog-id=79 op=LOAD Oct 2 19:16:17.686000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003dcb48 items=0 ppid=2200 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239383863646565326433373835396531376365666130313232306361 Oct 2 19:16:17.702054 env[1309]: time="2023-10-02T19:16:17.702018451Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-f1fdbe70e6,Uid:45fe2dcc9fa5db0b813d2b589a5565d8,Namespace:kube-system,Attempt:0,} returns sandbox id \"3d3e5994656f5aa847142fe41645ff770f40e2b5758c99d70c4a72007a1a41ce\"" Oct 2 19:16:17.706096 env[1309]: time="2023-10-02T19:16:17.706064876Z" level=info msg="CreateContainer within sandbox \"3d3e5994656f5aa847142fe41645ff770f40e2b5758c99d70c4a72007a1a41ce\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:16:17.722070 env[1309]: time="2023-10-02T19:16:17.722035974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-f1fdbe70e6,Uid:3910e3c5af7ad78fb4a3bffaa9910310,Namespace:kube-system,Attempt:0,} returns sandbox id \"2988cdee2d37859e17cefa01220ca8d52cb049670fc405b15fb09550f805e718\"" Oct 2 19:16:17.725720 env[1309]: time="2023-10-02T19:16:17.725692297Z" level=info msg="CreateContainer within sandbox \"2988cdee2d37859e17cefa01220ca8d52cb049670fc405b15fb09550f805e718\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:16:17.725973 env[1309]: time="2023-10-02T19:16:17.725936599Z" level=info msg="CreateContainer within sandbox \"acd70ab1200cb861a701a92991f2bcd4246afab979ada7b13b88b8c470ec20a4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6b6cc3f907f68f03ce20723119a5b906ac8a6bed51a6c7ddb7f425c2e61d590c\"" Oct 2 19:16:17.726580 env[1309]: time="2023-10-02T19:16:17.726548602Z" level=info msg="StartContainer for \"6b6cc3f907f68f03ce20723119a5b906ac8a6bed51a6c7ddb7f425c2e61d590c\"" Oct 2 19:16:17.742869 systemd[1]: Started cri-containerd-6b6cc3f907f68f03ce20723119a5b906ac8a6bed51a6c7ddb7f425c2e61d590c.scope. Oct 2 19:16:17.754701 kubelet[2060]: E1002 19:16:17.754651 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.759495 kubelet[2060]: I1002 19:16:17.759161 2060 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:17.763581 kubelet[2060]: E1002 19:16:17.763560 2060 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.4:6443/api/v1/nodes\": dial tcp 10.200.8.4:6443: connect: connection refused" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:17.763884 kubelet[2060]: W1002 19:16:17.763786 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://10.200.8.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.763884 kubelet[2060]: E1002 19:16:17.763841 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.4:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit: BPF prog-id=80 op=LOAD Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2155 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662366363336639303766363866303363653230373233313139613562 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2155 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662366363336639303766363866303363653230373233313139613562 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.767000 audit: BPF prog-id=81 op=LOAD Oct 2 19:16:17.767000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003d2120 items=0 ppid=2155 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662366363336639303766363866303363653230373233313139613562 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit: BPF prog-id=82 op=LOAD Oct 2 19:16:17.768000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003d2168 items=0 ppid=2155 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662366363336639303766363866303363653230373233313139613562 Oct 2 19:16:17.768000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:16:17.768000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.768000 audit: BPF prog-id=83 op=LOAD Oct 2 19:16:17.768000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d2578 items=0 ppid=2155 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662366363336639303766363866303363653230373233313139613562 Oct 2 19:16:17.778665 env[1309]: time="2023-10-02T19:16:17.778612525Z" level=info msg="CreateContainer within sandbox \"3d3e5994656f5aa847142fe41645ff770f40e2b5758c99d70c4a72007a1a41ce\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"9e8e43c01bbfccdf4752842742335ea67e7b2a6e97b07f491c83119979b4cdfb\"" Oct 2 19:16:17.780141 env[1309]: time="2023-10-02T19:16:17.780113734Z" level=info msg="StartContainer for \"9e8e43c01bbfccdf4752842742335ea67e7b2a6e97b07f491c83119979b4cdfb\"" Oct 2 19:16:17.784070 kubelet[2060]: W1002 19:16:17.783940 2060 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://10.200.8.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.784070 kubelet[2060]: E1002 19:16:17.784028 2060 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.4:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.4:6443: connect: connection refused Oct 2 19:16:17.790338 env[1309]: time="2023-10-02T19:16:17.789788094Z" level=info msg="CreateContainer within sandbox \"2988cdee2d37859e17cefa01220ca8d52cb049670fc405b15fb09550f805e718\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e1153e12f2708e627bfd122db59c1ab1ccdad67b2c782c77779126ff20af6af6\"" Oct 2 19:16:17.790555 env[1309]: time="2023-10-02T19:16:17.790535298Z" level=info msg="StartContainer for \"e1153e12f2708e627bfd122db59c1ab1ccdad67b2c782c77779126ff20af6af6\"" Oct 2 19:16:17.812682 systemd[1]: Started cri-containerd-9e8e43c01bbfccdf4752842742335ea67e7b2a6e97b07f491c83119979b4cdfb.scope. Oct 2 19:16:17.824142 env[1309]: time="2023-10-02T19:16:17.824098106Z" level=info msg="StartContainer for \"6b6cc3f907f68f03ce20723119a5b906ac8a6bed51a6c7ddb7f425c2e61d590c\" returns successfully" Oct 2 19:16:17.837218 systemd[1]: Started cri-containerd-e1153e12f2708e627bfd122db59c1ab1ccdad67b2c782c77779126ff20af6af6.scope. Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.840000 audit: BPF prog-id=84 op=LOAD Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2140 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965386534336330316262666363646634373532383432373432333335 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2140 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965386534336330316262666363646634373532383432373432333335 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit: BPF prog-id=85 op=LOAD Oct 2 19:16:17.841000 audit[2296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002169c0 items=0 ppid=2140 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965386534336330316262666363646634373532383432373432333335 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit: BPF prog-id=86 op=LOAD Oct 2 19:16:17.841000 audit[2296]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000216a08 items=0 ppid=2140 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965386534336330316262666363646634373532383432373432333335 Oct 2 19:16:17.841000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:16:17.841000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { perfmon } for pid=2296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit[2296]: AVC avc: denied { bpf } for pid=2296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.841000 audit: BPF prog-id=87 op=LOAD Oct 2 19:16:17.841000 audit[2296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000216e18 items=0 ppid=2140 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965386534336330316262666363646634373532383432373432333335 Oct 2 19:16:17.855388 kubelet[2060]: E1002 19:16:17.855321 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit: BPF prog-id=88 op=LOAD Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2200 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313533653132663237303865363237626664313232646235396331 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2200 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313533653132663237303865363237626664313232646235396331 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.888000 audit: BPF prog-id=89 op=LOAD Oct 2 19:16:17.888000 audit[2316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002a6360 items=0 ppid=2200 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313533653132663237303865363237626664313232646235396331 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit: BPF prog-id=90 op=LOAD Oct 2 19:16:17.889000 audit[2316]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002a63a8 items=0 ppid=2200 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313533653132663237303865363237626664313232646235396331 Oct 2 19:16:17.889000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:16:17.889000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { perfmon } for pid=2316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit[2316]: AVC avc: denied { bpf } for pid=2316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:17.889000 audit: BPF prog-id=91 op=LOAD Oct 2 19:16:17.889000 audit[2316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002a67b8 items=0 ppid=2200 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:17.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313533653132663237303865363237626664313232646235396331 Oct 2 19:16:17.895717 env[1309]: time="2023-10-02T19:16:17.895679249Z" level=info msg="StartContainer for \"9e8e43c01bbfccdf4752842742335ea67e7b2a6e97b07f491c83119979b4cdfb\" returns successfully" Oct 2 19:16:17.942466 env[1309]: time="2023-10-02T19:16:17.942416338Z" level=info msg="StartContainer for \"e1153e12f2708e627bfd122db59c1ab1ccdad67b2c782c77779126ff20af6af6\" returns successfully" Oct 2 19:16:17.955592 kubelet[2060]: E1002 19:16:17.955557 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.056336 kubelet[2060]: E1002 19:16:18.056294 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.157025 kubelet[2060]: E1002 19:16:18.156898 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.257428 kubelet[2060]: E1002 19:16:18.257391 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.357588 kubelet[2060]: E1002 19:16:18.357548 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.458761 kubelet[2060]: E1002 19:16:18.458646 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.559243 kubelet[2060]: E1002 19:16:18.559204 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.660011 kubelet[2060]: E1002 19:16:18.659969 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.760807 kubelet[2060]: E1002 19:16:18.760681 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.861304 kubelet[2060]: E1002 19:16:18.861263 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:18.961884 kubelet[2060]: E1002 19:16:18.961839 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.022000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:19.022000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000bd4000 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:19.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:19.023000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:19.023000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001f0080 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:19.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:19.062638 kubelet[2060]: E1002 19:16:19.062594 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.163278 kubelet[2060]: E1002 19:16:19.163233 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.264102 kubelet[2060]: E1002 19:16:19.264065 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.364277 kubelet[2060]: E1002 19:16:19.364235 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.365872 kubelet[2060]: I1002 19:16:19.365843 2060 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:19.465240 kubelet[2060]: E1002 19:16:19.465201 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.565887 kubelet[2060]: E1002 19:16:19.565844 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.666283 kubelet[2060]: E1002 19:16:19.666167 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.767032 kubelet[2060]: E1002 19:16:19.766985 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.867671 kubelet[2060]: E1002 19:16:19.867618 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:19.968445 kubelet[2060]: E1002 19:16:19.968321 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.070412 kubelet[2060]: E1002 19:16:20.070367 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.171050 kubelet[2060]: E1002 19:16:20.171000 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.271273 kubelet[2060]: E1002 19:16:20.271145 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.371937 kubelet[2060]: E1002 19:16:20.371889 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.472940 kubelet[2060]: E1002 19:16:20.472903 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.573730 kubelet[2060]: E1002 19:16:20.573695 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.674346 kubelet[2060]: E1002 19:16:20.674307 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.775473 kubelet[2060]: E1002 19:16:20.775433 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.876483 kubelet[2060]: E1002 19:16:20.876357 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.952000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.957887 kernel: kauditd_printk_skb: 626 callbacks suppressed Oct 2 19:16:20.957967 kernel: audit: type=1400 audit(1696274180.952:718): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.952000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004aae090 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.995836 kernel: audit: type=1300 audit(1696274180.952:718): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004aae090 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.996083 kubelet[2060]: E1002 19:16:20.996058 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:21.039981 kernel: audit: type=1327 audit(1696274180.952:718): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:20.952000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.059978 kernel: audit: type=1400 audit(1696274180.952:719): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.952000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c003c740a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:21.089997 kernel: audit: type=1300 audit(1696274180.952:719): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c003c740a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:21.096362 kubelet[2060]: E1002 19:16:21.096336 2060 kubelet.go:2448] "Error getting node" err="node \"ci-3510.3.0-a-f1fdbe70e6\" not found" Oct 2 19:16:20.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:21.114977 kernel: audit: type=1327 audit(1696274180.952:719): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:21.115076 kernel: audit: type=1400 audit(1696274180.957:720): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004aae300 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:21.135811 kubelet[2060]: E1002 19:16:21.135785 2060 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-f1fdbe70e6\" not found" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:21.152985 kernel: audit: type=1300 audit(1696274180.957:720): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c004aae300 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:20.995000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:21.186753 kernel: audit: type=1327 audit(1696274180.957:720): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:21.186853 kernel: audit: type=1400 audit(1696274180.995:721): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.995000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c003c9a360 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.995000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:20.995000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.995000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c004baba40 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.995000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:20.996000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:20.996000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c004babbf0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:16:20.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:16:21.192665 kubelet[2060]: I1002 19:16:21.192634 2060 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:21.241014 kubelet[2060]: I1002 19:16:21.240969 2060 apiserver.go:52] "Watching apiserver" Oct 2 19:16:21.296941 kubelet[2060]: I1002 19:16:21.296908 2060 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:16:21.329740 kubelet[2060]: E1002 19:16:21.329702 2060 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:24.385036 systemd[1]: Reloading. Oct 2 19:16:24.484360 /usr/lib/systemd/system-generators/torcx-generator[2396]: time="2023-10-02T19:16:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:16:24.486002 /usr/lib/systemd/system-generators/torcx-generator[2396]: time="2023-10-02T19:16:24Z" level=info msg="torcx already run" Oct 2 19:16:24.572309 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:16:24.572329 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:16:24.588709 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.669000 audit: BPF prog-id=92 op=LOAD Oct 2 19:16:24.669000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit: BPF prog-id=93 op=LOAD Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit: BPF prog-id=94 op=LOAD Oct 2 19:16:24.670000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:16:24.670000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.671000 audit: BPF prog-id=95 op=LOAD Oct 2 19:16:24.671000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.672000 audit: BPF prog-id=96 op=LOAD Oct 2 19:16:24.672000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit: BPF prog-id=97 op=LOAD Oct 2 19:16:24.673000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.674000 audit: BPF prog-id=98 op=LOAD Oct 2 19:16:24.674000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.676000 audit: BPF prog-id=99 op=LOAD Oct 2 19:16:24.676000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.678000 audit: BPF prog-id=100 op=LOAD Oct 2 19:16:24.678000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit: BPF prog-id=101 op=LOAD Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit: BPF prog-id=102 op=LOAD Oct 2 19:16:24.679000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:16:24.679000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.679000 audit: BPF prog-id=103 op=LOAD Oct 2 19:16:24.680000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit: BPF prog-id=104 op=LOAD Oct 2 19:16:24.680000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit: BPF prog-id=105 op=LOAD Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.681000 audit: BPF prog-id=106 op=LOAD Oct 2 19:16:24.681000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:16:24.681000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.682000 audit: BPF prog-id=107 op=LOAD Oct 2 19:16:24.682000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit: BPF prog-id=108 op=LOAD Oct 2 19:16:24.684000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit: BPF prog-id=109 op=LOAD Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.684000 audit: BPF prog-id=110 op=LOAD Oct 2 19:16:24.684000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:16:24.684000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit: BPF prog-id=111 op=LOAD Oct 2 19:16:24.686000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.687000 audit: BPF prog-id=112 op=LOAD Oct 2 19:16:24.687000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:16:24.706810 kubelet[2060]: I1002 19:16:24.706296 2060 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:16:24.706600 systemd[1]: Stopping kubelet.service... Oct 2 19:16:24.728286 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:16:24.728595 systemd[1]: Stopped kubelet.service. Oct 2 19:16:24.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:24.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:24.731122 systemd[1]: Started kubelet.service. Oct 2 19:16:24.820661 kubelet[2459]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:16:24.820661 kubelet[2459]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:16:24.820661 kubelet[2459]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:16:24.821158 kubelet[2459]: I1002 19:16:24.820711 2459 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:16:24.822074 kubelet[2459]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:16:24.822074 kubelet[2459]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:16:24.822074 kubelet[2459]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:16:24.825195 kubelet[2459]: I1002 19:16:24.825159 2459 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:16:24.825195 kubelet[2459]: I1002 19:16:24.825189 2459 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:16:24.825575 kubelet[2459]: I1002 19:16:24.825552 2459 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:16:24.826731 kubelet[2459]: I1002 19:16:24.826709 2459 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:16:24.827564 kubelet[2459]: I1002 19:16:24.827547 2459 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:16:24.830379 kubelet[2459]: I1002 19:16:24.830354 2459 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:16:24.830600 kubelet[2459]: I1002 19:16:24.830582 2459 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:16:24.830673 kubelet[2459]: I1002 19:16:24.830659 2459 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:16:24.830793 kubelet[2459]: I1002 19:16:24.830706 2459 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:16:24.830793 kubelet[2459]: I1002 19:16:24.830720 2459 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:16:24.830793 kubelet[2459]: I1002 19:16:24.830757 2459 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:16:24.836657 kubelet[2459]: I1002 19:16:24.836645 2459 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:16:24.836829 kubelet[2459]: I1002 19:16:24.836810 2459 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:16:24.836890 kubelet[2459]: I1002 19:16:24.836838 2459 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:16:24.836890 kubelet[2459]: I1002 19:16:24.836861 2459 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:16:24.847216 kubelet[2459]: I1002 19:16:24.847178 2459 apiserver.go:52] "Watching apiserver" Oct 2 19:16:24.851676 kubelet[2459]: I1002 19:16:24.851656 2459 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:16:24.852081 kubelet[2459]: I1002 19:16:24.852061 2459 server.go:1175] "Started kubelet" Oct 2 19:16:24.863898 kubelet[2459]: I1002 19:16:24.863372 2459 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:16:24.865882 kubelet[2459]: I1002 19:16:24.865835 2459 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:16:24.866505 kubelet[2459]: E1002 19:16:24.866450 2459 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:16:24.866682 kubelet[2459]: E1002 19:16:24.866665 2459 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:16:24.868000 audit[2459]: AVC avc: denied { mac_admin } for pid=2459 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.868000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:24.868000 audit[2459]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009c15f0 a1=c000756708 a2=c0009c15c0 a3=25 items=0 ppid=1 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:24.868000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:24.868000 audit[2459]: AVC avc: denied { mac_admin } for pid=2459 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.868000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:24.868000 audit[2459]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b98020 a1=c000756720 a2=c0009c1680 a3=25 items=0 ppid=1 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:24.868000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:24.870102 kubelet[2459]: I1002 19:16:24.869521 2459 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:16:24.870102 kubelet[2459]: I1002 19:16:24.869583 2459 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:16:24.870102 kubelet[2459]: I1002 19:16:24.869611 2459 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:16:24.874163 kubelet[2459]: I1002 19:16:24.874146 2459 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:16:24.875349 kubelet[2459]: I1002 19:16:24.875333 2459 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:16:24.877261 kubelet[2459]: E1002 19:16:24.877244 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:24.895107 kubelet[2459]: I1002 19:16:24.895086 2459 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:16:24.945084 kubelet[2459]: I1002 19:16:24.938275 2459 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:16:24.945306 kubelet[2459]: I1002 19:16:24.945287 2459 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:16:24.945401 kubelet[2459]: I1002 19:16:24.945391 2459 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:16:24.945519 kubelet[2459]: E1002 19:16:24.945508 2459 kubelet.go:2034] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:16:24.954652 kubelet[2459]: I1002 19:16:24.954631 2459 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:16:24.954842 kubelet[2459]: I1002 19:16:24.954830 2459 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:16:24.954972 kubelet[2459]: I1002 19:16:24.954949 2459 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:16:24.955295 kubelet[2459]: I1002 19:16:24.955281 2459 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:16:24.955417 kubelet[2459]: I1002 19:16:24.955407 2459 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:16:24.955518 kubelet[2459]: I1002 19:16:24.955510 2459 policy_none.go:49] "None policy: Start" Oct 2 19:16:24.956482 kubelet[2459]: I1002 19:16:24.956384 2459 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:16:24.956482 kubelet[2459]: I1002 19:16:24.956408 2459 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:16:24.956645 kubelet[2459]: I1002 19:16:24.956630 2459 state_mem.go:75] "Updated machine memory state" Oct 2 19:16:24.961000 audit[2459]: AVC avc: denied { mac_admin } for pid=2459 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:24.961000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:16:24.961000 audit[2459]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b1e450 a1=c000cf6de0 a2=c000b1e420 a3=25 items=0 ppid=1 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:24.961000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:16:24.966482 kubelet[2459]: I1002 19:16:24.962221 2459 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:16:24.966482 kubelet[2459]: I1002 19:16:24.962295 2459 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:16:24.966482 kubelet[2459]: I1002 19:16:24.962505 2459 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:16:24.977153 kubelet[2459]: I1002 19:16:24.977135 2459 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:24.987931 kubelet[2459]: I1002 19:16:24.987887 2459 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:24.988244 kubelet[2459]: I1002 19:16:24.988233 2459 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.046307 kubelet[2459]: I1002 19:16:25.046269 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:25.046479 kubelet[2459]: I1002 19:16:25.046376 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:25.046479 kubelet[2459]: I1002 19:16:25.046413 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:25.059120 kubelet[2459]: E1002 19:16:25.059092 2459 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.176861 kubelet[2459]: I1002 19:16:25.176810 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177072 kubelet[2459]: I1002 19:16:25.176887 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177072 kubelet[2459]: I1002 19:16:25.176925 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177072 kubelet[2459]: I1002 19:16:25.176969 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177072 kubelet[2459]: I1002 19:16:25.177004 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177072 kubelet[2459]: I1002 19:16:25.177038 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177381 kubelet[2459]: I1002 19:16:25.177076 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3910e3c5af7ad78fb4a3bffaa9910310-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"3910e3c5af7ad78fb4a3bffaa9910310\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177381 kubelet[2459]: I1002 19:16:25.177112 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/45fe2dcc9fa5db0b813d2b589a5565d8-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"45fe2dcc9fa5db0b813d2b589a5565d8\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177381 kubelet[2459]: I1002 19:16:25.177157 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/67205f7060a6f5b8ae34e83467202855-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6\" (UID: \"67205f7060a6f5b8ae34e83467202855\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-f1fdbe70e6" Oct 2 19:16:25.177381 kubelet[2459]: I1002 19:16:25.177172 2459 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:16:25.849000 audit[2515]: USER_ACCT pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:25.850313 sudo[2515]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:16:25.850586 sudo[2515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:16:25.849000 audit[2515]: CRED_REFR pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:25.852000 audit[2515]: USER_START pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.345085 sudo[2515]: pam_unix(sudo:session): session closed for user root Oct 2 19:16:26.344000 audit[2515]: USER_END pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.348857 kernel: kauditd_printk_skb: 269 callbacks suppressed Oct 2 19:16:26.348976 kernel: audit: type=1106 audit(1696274186.344:976): pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.348000 audit[2515]: CRED_DISP pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:26.381155 kernel: audit: type=1104 audit(1696274186.348:977): pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.407701 sudo[1652]: pam_unix(sudo:session): session closed for user root Oct 2 19:16:27.406000 audit[1652]: USER_END pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.424976 kernel: audit: type=1106 audit(1696274187.406:978): pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.425074 kernel: audit: type=1104 audit(1696274187.406:979): pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.406000 audit[1652]: CRED_DISP pid=1652 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.507332 sshd[1649]: pam_unix(sshd:session): session closed for user core Oct 2 19:16:27.508000 audit[1649]: USER_END pid=1649 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:16:27.511230 systemd[1]: sshd@6-10.200.8.4:22-10.200.12.6:58120.service: Deactivated successfully. Oct 2 19:16:27.512803 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:16:27.513014 systemd[1]: session-9.scope: Consumed 3.667s CPU time. Oct 2 19:16:27.514425 systemd-logind[1293]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:16:27.515609 systemd-logind[1293]: Removed session 9. Oct 2 19:16:27.508000 audit[1649]: CRED_DISP pid=1649 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:16:27.543349 kernel: audit: type=1106 audit(1696274187.508:980): pid=1649 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:16:27.543434 kernel: audit: type=1104 audit(1696274187.508:981): pid=1649 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:16:27.543460 kernel: audit: type=1131 audit(1696274187.508:982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.4:22-10.200.12.6:58120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:27.508000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.4:22-10.200.12.6:58120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:16:29.963755 kubelet[2459]: E1002 19:16:29.963711 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:34.081000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7170 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:16:34.081000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000df9e40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:34.119708 kernel: audit: type=1400 audit(1696274194.081:983): avc: denied { watch } for pid=2282 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7170 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:16:34.119821 kernel: audit: type=1300 audit(1696274194.081:983): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000df9e40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:34.119848 kernel: audit: type=1327 audit(1696274194.081:983): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:34.081000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:34.965293 kubelet[2459]: E1002 19:16:34.965263 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:36.411000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.428981 kernel: audit: type=1400 audit(1696274196.411:984): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.429107 kernel: audit: type=1300 audit(1696274196.411:984): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac5e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.411000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac5e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:36.464055 kernel: audit: type=1327 audit(1696274196.411:984): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:36.464190 kernel: audit: type=1400 audit(1696274196.411:985): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.411000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.411000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000bac740 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.499878 kernel: audit: type=1300 audit(1696274196.411:985): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000bac740 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.500019 kernel: audit: type=1327 audit(1696274196.411:985): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:36.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.531229 kernel: audit: type=1400 audit(1696274196.417:986): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000bac9e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:16:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c7f5e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:16:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:16:37.040827 kubelet[2459]: I1002 19:16:37.040781 2459 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:16:37.041470 env[1309]: time="2023-10-02T19:16:37.041418999Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:16:37.041868 kubelet[2459]: I1002 19:16:37.041763 2459 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:16:37.042302 kubelet[2459]: E1002 19:16:37.042269 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:37.231112 kubelet[2459]: I1002 19:16:37.231071 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:37.238849 systemd[1]: Created slice kubepods-besteffort-pod9274c63f_2164_45c7_b317_7e4ff244403a.slice. Oct 2 19:16:37.259805 kubelet[2459]: I1002 19:16:37.259750 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:37.266325 systemd[1]: Created slice kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice. Oct 2 19:16:37.268849 kubelet[2459]: W1002 19:16:37.268808 2459 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-f1fdbe70e6" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-f1fdbe70e6' and this object Oct 2 19:16:37.268849 kubelet[2459]: E1002 19:16:37.268854 2459 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-f1fdbe70e6" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-f1fdbe70e6' and this object Oct 2 19:16:37.269066 kubelet[2459]: W1002 19:16:37.268913 2459 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-f1fdbe70e6" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-f1fdbe70e6' and this object Oct 2 19:16:37.269066 kubelet[2459]: E1002 19:16:37.268927 2459 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-f1fdbe70e6" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-f1fdbe70e6' and this object Oct 2 19:16:37.350728 kubelet[2459]: I1002 19:16:37.350679 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/9274c63f-2164-45c7-b317-7e4ff244403a-kube-proxy\") pod \"kube-proxy-rzdw7\" (UID: \"9274c63f-2164-45c7-b317-7e4ff244403a\") " pod="kube-system/kube-proxy-rzdw7" Oct 2 19:16:37.350951 kubelet[2459]: I1002 19:16:37.350760 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9274c63f-2164-45c7-b317-7e4ff244403a-lib-modules\") pod \"kube-proxy-rzdw7\" (UID: \"9274c63f-2164-45c7-b317-7e4ff244403a\") " pod="kube-system/kube-proxy-rzdw7" Oct 2 19:16:37.350951 kubelet[2459]: I1002 19:16:37.350797 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b5lw2\" (UniqueName: \"kubernetes.io/projected/9274c63f-2164-45c7-b317-7e4ff244403a-kube-api-access-b5lw2\") pod \"kube-proxy-rzdw7\" (UID: \"9274c63f-2164-45c7-b317-7e4ff244403a\") " pod="kube-system/kube-proxy-rzdw7" Oct 2 19:16:37.350951 kubelet[2459]: I1002 19:16:37.350843 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9274c63f-2164-45c7-b317-7e4ff244403a-xtables-lock\") pod \"kube-proxy-rzdw7\" (UID: \"9274c63f-2164-45c7-b317-7e4ff244403a\") " pod="kube-system/kube-proxy-rzdw7" Oct 2 19:16:37.451145 kubelet[2459]: I1002 19:16:37.451070 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-bpf-maps\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451145 kubelet[2459]: I1002 19:16:37.451124 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-net\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451145 kubelet[2459]: I1002 19:16:37.451158 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-cgroup\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451182 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cni-path\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451235 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-lib-modules\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451271 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-clustermesh-secrets\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451298 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-etc-cni-netd\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451321 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-kernel\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451421 kubelet[2459]: I1002 19:16:37.451347 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-run\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451717 kubelet[2459]: I1002 19:16:37.451376 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-config-path\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451717 kubelet[2459]: I1002 19:16:37.451404 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451717 kubelet[2459]: I1002 19:16:37.451433 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hostproc\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451717 kubelet[2459]: I1002 19:16:37.451465 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-xtables-lock\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.451717 kubelet[2459]: I1002 19:16:37.451499 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qt5lq\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq\") pod \"cilium-sgxsf\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " pod="kube-system/cilium-sgxsf" Oct 2 19:16:37.457556 kubelet[2459]: E1002 19:16:37.457524 2459 projected.go:290] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:16:37.457556 kubelet[2459]: E1002 19:16:37.457554 2459 projected.go:196] Error preparing data for projected volume kube-api-access-b5lw2 for pod kube-system/kube-proxy-rzdw7: configmap "kube-root-ca.crt" not found Oct 2 19:16:37.457747 kubelet[2459]: E1002 19:16:37.457618 2459 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/9274c63f-2164-45c7-b317-7e4ff244403a-kube-api-access-b5lw2 podName:9274c63f-2164-45c7-b317-7e4ff244403a nodeName:}" failed. No retries permitted until 2023-10-02 19:16:37.957597415 +0000 UTC m=+13.219712012 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-b5lw2" (UniqueName: "kubernetes.io/projected/9274c63f-2164-45c7-b317-7e4ff244403a-kube-api-access-b5lw2") pod "kube-proxy-rzdw7" (UID: "9274c63f-2164-45c7-b317-7e4ff244403a") : configmap "kube-root-ca.crt" not found Oct 2 19:16:37.560334 kubelet[2459]: E1002 19:16:37.560291 2459 projected.go:290] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:16:37.560570 kubelet[2459]: E1002 19:16:37.560554 2459 projected.go:196] Error preparing data for projected volume kube-api-access-qt5lq for pod kube-system/cilium-sgxsf: configmap "kube-root-ca.crt" not found Oct 2 19:16:37.560749 kubelet[2459]: E1002 19:16:37.560722 2459 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq podName:873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 nodeName:}" failed. No retries permitted until 2023-10-02 19:16:38.060700764 +0000 UTC m=+13.322815261 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-qt5lq" (UniqueName: "kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq") pod "cilium-sgxsf" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3") : configmap "kube-root-ca.crt" not found Oct 2 19:16:38.021887 kubelet[2459]: I1002 19:16:38.021841 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:16:38.027846 systemd[1]: Created slice kubepods-besteffort-pod2c9d5332_763a_4c62_9d3e_aec311dcc32d.slice. Oct 2 19:16:38.056018 kubelet[2459]: I1002 19:16:38.055981 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2zrnf\" (UniqueName: \"kubernetes.io/projected/2c9d5332-763a-4c62-9d3e-aec311dcc32d-kube-api-access-2zrnf\") pod \"cilium-operator-69b677f97c-6kh96\" (UID: \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\") " pod="kube-system/cilium-operator-69b677f97c-6kh96" Oct 2 19:16:38.056474 kubelet[2459]: I1002 19:16:38.056093 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2c9d5332-763a-4c62-9d3e-aec311dcc32d-cilium-config-path\") pod \"cilium-operator-69b677f97c-6kh96\" (UID: \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\") " pod="kube-system/cilium-operator-69b677f97c-6kh96" Oct 2 19:16:38.146017 env[1309]: time="2023-10-02T19:16:38.145973608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rzdw7,Uid:9274c63f-2164-45c7-b317-7e4ff244403a,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:38.186922 env[1309]: time="2023-10-02T19:16:38.186852484Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:38.187139 env[1309]: time="2023-10-02T19:16:38.186888184Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:38.187139 env[1309]: time="2023-10-02T19:16:38.186901784Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:38.187139 env[1309]: time="2023-10-02T19:16:38.187095585Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9 pid=2563 runtime=io.containerd.runc.v2 Oct 2 19:16:38.205044 systemd[1]: Started cri-containerd-37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9.scope. Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.219000 audit: BPF prog-id=113 op=LOAD Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2563 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337393632303033363531663038653937353732356465663335646238 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=2563 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337393632303033363531663038653937353732356465663335646238 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit: BPF prog-id=114 op=LOAD Oct 2 19:16:38.220000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0002fa720 items=0 ppid=2563 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337393632303033363531663038653937353732356465663335646238 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit: BPF prog-id=115 op=LOAD Oct 2 19:16:38.220000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0002fa768 items=0 ppid=2563 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337393632303033363531663038653937353732356465663335646238 Oct 2 19:16:38.220000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:16:38.220000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.220000 audit: BPF prog-id=116 op=LOAD Oct 2 19:16:38.220000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0002fab78 items=0 ppid=2563 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337393632303033363531663038653937353732356465663335646238 Oct 2 19:16:38.234929 env[1309]: time="2023-10-02T19:16:38.234886390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rzdw7,Uid:9274c63f-2164-45c7-b317-7e4ff244403a,Namespace:kube-system,Attempt:0,} returns sandbox id \"37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9\"" Oct 2 19:16:38.239147 env[1309]: time="2023-10-02T19:16:38.239104808Z" level=info msg="CreateContainer within sandbox \"37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:16:38.295993 env[1309]: time="2023-10-02T19:16:38.294984248Z" level=info msg="CreateContainer within sandbox \"37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"f6159a3499cf2697fa02eb9cc8832e0471716e9e5635dd00dce43074c8f0d371\"" Oct 2 19:16:38.297269 env[1309]: time="2023-10-02T19:16:38.297240458Z" level=info msg="StartContainer for \"f6159a3499cf2697fa02eb9cc8832e0471716e9e5635dd00dce43074c8f0d371\"" Oct 2 19:16:38.315462 systemd[1]: Started cri-containerd-f6159a3499cf2697fa02eb9cc8832e0471716e9e5635dd00dce43074c8f0d371.scope. Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2563 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636313539613334393963663236393766613032656239636338383332 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333222 env[1309]: time="2023-10-02T19:16:38.333179413Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-6kh96,Uid:2c9d5332-763a-4c62-9d3e-aec311dcc32d,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:38.331000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.331000 audit: BPF prog-id=117 op=LOAD Oct 2 19:16:38.331000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0003d8340 items=0 ppid=2563 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636313539613334393963663236393766613032656239636338383332 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.332000 audit: BPF prog-id=118 op=LOAD Oct 2 19:16:38.332000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0003d8388 items=0 ppid=2563 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636313539613334393963663236393766613032656239636338383332 Oct 2 19:16:38.333000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:16:38.333000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.333000 audit: BPF prog-id=119 op=LOAD Oct 2 19:16:38.333000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0003d8418 items=0 ppid=2563 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636313539613334393963663236393766613032656239636338383332 Oct 2 19:16:38.355314 env[1309]: time="2023-10-02T19:16:38.355268208Z" level=info msg="StartContainer for \"f6159a3499cf2697fa02eb9cc8832e0471716e9e5635dd00dce43074c8f0d371\" returns successfully" Oct 2 19:16:38.369675 env[1309]: time="2023-10-02T19:16:38.369599469Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:38.369857 env[1309]: time="2023-10-02T19:16:38.369827870Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:38.369963 env[1309]: time="2023-10-02T19:16:38.369928971Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:38.370417 env[1309]: time="2023-10-02T19:16:38.370363372Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425 pid=2639 runtime=io.containerd.runc.v2 Oct 2 19:16:38.383076 systemd[1]: Started cri-containerd-2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425.scope. Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.404000 audit: BPF prog-id=120 op=LOAD Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2639 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383664363632636238343761643265616135663566336563383834 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2639 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383664363632636238343761643265616135663566336563383834 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit: BPF prog-id=121 op=LOAD Oct 2 19:16:38.405000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002250f0 items=0 ppid=2639 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383664363632636238343761643265616135663566336563383834 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit: BPF prog-id=122 op=LOAD Oct 2 19:16:38.405000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000225138 items=0 ppid=2639 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383664363632636238343761643265616135663566336563383834 Oct 2 19:16:38.405000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:16:38.405000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { perfmon } for pid=2648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit[2648]: AVC avc: denied { bpf } for pid=2648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:38.405000 audit: BPF prog-id=123 op=LOAD Oct 2 19:16:38.405000 audit[2648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000225548 items=0 ppid=2639 pid=2648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230383664363632636238343761643265616135663566336563383834 Oct 2 19:16:38.438805 env[1309]: time="2023-10-02T19:16:38.438758466Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-6kh96,Uid:2c9d5332-763a-4c62-9d3e-aec311dcc32d,Namespace:kube-system,Attempt:0,} returns sandbox id \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\"" Oct 2 19:16:38.440890 env[1309]: time="2023-10-02T19:16:38.440854375Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\"" Oct 2 19:16:38.466009 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 19:16:38.466110 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 19:16:38.473757 kernel: IPVS: ipvs loaded. Oct 2 19:16:38.499977 kernel: IPVS: [rr] scheduler registered. Oct 2 19:16:38.508975 kernel: IPVS: [wrr] scheduler registered. Oct 2 19:16:38.517974 kernel: IPVS: [sh] scheduler registered. Oct 2 19:16:38.553901 kubelet[2459]: E1002 19:16:38.553798 2459 projected.go:265] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:16:38.553901 kubelet[2459]: E1002 19:16:38.553833 2459 projected.go:196] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-sgxsf: failed to sync secret cache: timed out waiting for the condition Oct 2 19:16:38.553901 kubelet[2459]: E1002 19:16:38.553906 2459 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls podName:873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 nodeName:}" failed. No retries permitted until 2023-10-02 19:16:39.053884061 +0000 UTC m=+14.315998558 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls") pod "cilium-sgxsf" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:16:38.584000 audit[2706]: NETFILTER_CFG table=mangle:63 family=2 entries=1 op=nft_register_chain pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.584000 audit[2706]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde2ea45b0 a2=0 a3=7ffde2ea459c items=0 ppid=2615 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.584000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:16:38.586000 audit[2707]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_chain pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.586000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c4f1790 a2=0 a3=7ffd8c4f177c items=0 ppid=2615 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.587000 audit[2708]: NETFILTER_CFG table=mangle:65 family=10 entries=1 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.587000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7b510ff0 a2=0 a3=7ffd7b510fdc items=0 ppid=2615 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:16:38.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:16:38.588000 audit[2709]: NETFILTER_CFG table=nat:66 family=10 entries=1 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.588000 audit[2709]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc15f73b20 a2=0 a3=7ffc15f73b0c items=0 ppid=2615 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:16:38.588000 audit[2710]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_chain pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.588000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1e3279a0 a2=0 a3=7ffe1e32798c items=0 ppid=2615 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:16:38.596000 audit[2711]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.596000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff067b7e50 a2=0 a3=7fff067b7e3c items=0 ppid=2615 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.596000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:16:38.691000 audit[2712]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_chain pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.691000 audit[2712]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc91502130 a2=0 a3=7ffc9150211c items=0 ppid=2615 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.691000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:16:38.695000 audit[2714]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.695000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc5c3d4b00 a2=0 a3=7ffc5c3d4aec items=0 ppid=2615 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.695000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:16:38.699000 audit[2717]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.699000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffee52a5760 a2=0 a3=7ffee52a574c items=0 ppid=2615 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.699000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:16:38.700000 audit[2718]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_chain pid=2718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.700000 audit[2718]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc731fe870 a2=0 a3=7ffc731fe85c items=0 ppid=2615 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.700000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:16:38.702000 audit[2720]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.702000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe17f5e2c0 a2=0 a3=7ffe17f5e2ac items=0 ppid=2615 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.702000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:16:38.703000 audit[2721]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.703000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffeb19fca0 a2=0 a3=7fffeb19fc8c items=0 ppid=2615 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.703000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:16:38.706000 audit[2723]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.706000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc36767670 a2=0 a3=7ffc3676765c items=0 ppid=2615 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:16:38.710000 audit[2726]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.710000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd4a0c2a80 a2=0 a3=7ffd4a0c2a6c items=0 ppid=2615 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.710000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:16:38.711000 audit[2727]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_chain pid=2727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.711000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1e71d450 a2=0 a3=7ffe1e71d43c items=0 ppid=2615 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:16:38.713000 audit[2729]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.713000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff9e6a2e50 a2=0 a3=7fff9e6a2e3c items=0 ppid=2615 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.713000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:16:38.715000 audit[2730]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_chain pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.715000 audit[2730]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc842519a0 a2=0 a3=7ffc8425198c items=0 ppid=2615 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:16:38.717000 audit[2732]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.717000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefcc08cb0 a2=0 a3=7ffefcc08c9c items=0 ppid=2615 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:16:38.721000 audit[2735]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.721000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc9a840a00 a2=0 a3=7ffc9a8409ec items=0 ppid=2615 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.721000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:16:38.724000 audit[2738]: NETFILTER_CFG table=filter:82 family=2 entries=1 op=nft_register_rule pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.724000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffffc391a80 a2=0 a3=7ffffc391a6c items=0 ppid=2615 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:16:38.725000 audit[2739]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_chain pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.725000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc3eabec50 a2=0 a3=7ffc3eabec3c items=0 ppid=2615 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:16:38.728000 audit[2741]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.728000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc4465d360 a2=0 a3=7ffc4465d34c items=0 ppid=2615 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:16:38.731000 audit[2744]: NETFILTER_CFG table=nat:85 family=2 entries=1 op=nft_register_rule pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:16:38.731000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe044dea30 a2=0 a3=7ffe044dea1c items=0 ppid=2615 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.731000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:16:38.767000 audit[2748]: NETFILTER_CFG table=filter:86 family=2 entries=6 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:16:38.767000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffdd9a0dd20 a2=0 a3=7ffdd9a0dd0c items=0 ppid=2615 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.767000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:16:38.791000 audit[2748]: NETFILTER_CFG table=nat:87 family=2 entries=17 op=nft_register_chain pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:16:38.791000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffdd9a0dd20 a2=0 a3=7ffdd9a0dd0c items=0 ppid=2615 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:16:38.797000 audit[2751]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.797000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd5cc89eb0 a2=0 a3=7ffd5cc89e9c items=0 ppid=2615 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.797000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:16:38.800000 audit[2753]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.800000 audit[2753]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff83d2caf0 a2=0 a3=7fff83d2cadc items=0 ppid=2615 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:16:38.804000 audit[2756]: NETFILTER_CFG table=filter:90 family=10 entries=2 op=nft_register_chain pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.804000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffea9e4f550 a2=0 a3=7ffea9e4f53c items=0 ppid=2615 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.804000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:16:38.807000 audit[2757]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.807000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc52de280 a2=0 a3=7ffdc52de26c items=0 ppid=2615 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:16:38.809000 audit[2759]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2759 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.809000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc5b006ae0 a2=0 a3=7ffc5b006acc items=0 ppid=2615 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.809000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:16:38.810000 audit[2760]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_chain pid=2760 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.810000 audit[2760]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfc537b50 a2=0 a3=7ffcfc537b3c items=0 ppid=2615 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.810000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:16:38.813000 audit[2762]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.813000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffda2cd56a0 a2=0 a3=7ffda2cd568c items=0 ppid=2615 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.813000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:16:38.816000 audit[2765]: NETFILTER_CFG table=filter:95 family=10 entries=2 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.816000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcbf9564f0 a2=0 a3=7ffcbf9564dc items=0 ppid=2615 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:16:38.817000 audit[2766]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.817000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf573ca20 a2=0 a3=7ffcf573ca0c items=0 ppid=2615 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.817000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:16:38.820000 audit[2768]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2768 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.820000 audit[2768]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffbdd8ce90 a2=0 a3=7fffbdd8ce7c items=0 ppid=2615 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.820000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:16:38.821000 audit[2769]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.821000 audit[2769]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe86e23c10 a2=0 a3=7ffe86e23bfc items=0 ppid=2615 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:16:38.823000 audit[2771]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.823000 audit[2771]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd396d8ab0 a2=0 a3=7ffd396d8a9c items=0 ppid=2615 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.823000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:16:38.827000 audit[2774]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.827000 audit[2774]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce9fc28c0 a2=0 a3=7ffce9fc28ac items=0 ppid=2615 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.827000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:16:38.831000 audit[2777]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=2777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.831000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd45eab220 a2=0 a3=7ffd45eab20c items=0 ppid=2615 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:16:38.832000 audit[2778]: NETFILTER_CFG table=nat:102 family=10 entries=1 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.832000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe44937970 a2=0 a3=7ffe4493795c items=0 ppid=2615 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:16:38.834000 audit[2780]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.834000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffdeda561d0 a2=0 a3=7ffdeda561bc items=0 ppid=2615 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:16:38.837000 audit[2783]: NETFILTER_CFG table=nat:104 family=10 entries=2 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:16:38.837000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffee555ae90 a2=0 a3=7ffee555ae7c items=0 ppid=2615 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:16:38.842000 audit[2787]: NETFILTER_CFG table=filter:105 family=10 entries=3 op=nft_register_rule pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:16:38.842000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd0f796d60 a2=0 a3=7ffd0f796d4c items=0 ppid=2615 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.842000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:16:38.843000 audit[2787]: NETFILTER_CFG table=nat:106 family=10 entries=10 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:16:38.843000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=1860 a0=3 a1=7ffd0f796d60 a2=0 a3=7ffd0f796d4c items=0 ppid=2615 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:38.843000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:16:39.066625 systemd[1]: run-containerd-runc-k8s.io-37962003651f08e975725def35db88de3e5f23d664cf91dabe1b519417022ff9-runc.wyD0Do.mount: Deactivated successfully. Oct 2 19:16:39.075806 env[1309]: time="2023-10-02T19:16:39.075750499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-sgxsf,Uid:873ae7ea-2b5d-4be7-98cf-98bc7eda05d3,Namespace:kube-system,Attempt:0,}" Oct 2 19:16:39.131088 env[1309]: time="2023-10-02T19:16:39.123871003Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:16:39.131088 env[1309]: time="2023-10-02T19:16:39.123913503Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:16:39.131088 env[1309]: time="2023-10-02T19:16:39.123929003Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:16:39.131088 env[1309]: time="2023-10-02T19:16:39.124167004Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361 pid=2797 runtime=io.containerd.runc.v2 Oct 2 19:16:39.151937 systemd[1]: Started cri-containerd-0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361.scope. Oct 2 19:16:39.186808 kernel: kauditd_printk_skb: 294 callbacks suppressed Oct 2 19:16:39.186997 kernel: audit: type=1400 audit(1696274199.168:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.212177 kernel: audit: type=1400 audit(1696274199.168:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.212263 kernel: audit: type=1400 audit(1696274199.168:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.226008 kernel: audit: type=1400 audit(1696274199.168:1077): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.239879 kernel: audit: type=1400 audit(1696274199.168:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.253045 kernel: audit: type=1400 audit(1696274199.168:1079): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.254995 env[1309]: time="2023-10-02T19:16:39.254930158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-sgxsf,Uid:873ae7ea-2b5d-4be7-98cf-98bc7eda05d3,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\"" Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.280383 kernel: audit: type=1400 audit(1696274199.168:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.280494 kernel: audit: type=1400 audit(1696274199.168:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.292582 kernel: audit: type=1400 audit(1696274199.168:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.292691 kernel: audit: type=1400 audit(1696274199.168:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit: BPF prog-id=124 op=LOAD Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2797 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:39.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063306537333165383963623464623065663165323431373431323738 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2797 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:39.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063306537333165383963623464623065663165323431373431323738 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.168000 audit: BPF prog-id=125 op=LOAD Oct 2 19:16:39.168000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002132e0 items=0 ppid=2797 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:39.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063306537333165383963623464623065663165323431373431323738 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.185000 audit: BPF prog-id=126 op=LOAD Oct 2 19:16:39.185000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000213328 items=0 ppid=2797 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:39.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063306537333165383963623464623065663165323431373431323738 Oct 2 19:16:39.185000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:16:39.186000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:39.186000 audit: BPF prog-id=127 op=LOAD Oct 2 19:16:39.186000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000213738 items=0 ppid=2797 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:39.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063306537333165383963623464623065663165323431373431323738 Oct 2 19:16:39.966133 kubelet[2459]: E1002 19:16:39.966097 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:40.883518 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1492126255.mount: Deactivated successfully. Oct 2 19:16:42.558934 env[1309]: time="2023-10-02T19:16:42.558883274Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:42.566699 env[1309]: time="2023-10-02T19:16:42.566651406Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:42.572789 env[1309]: time="2023-10-02T19:16:42.572748631Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:42.573239 env[1309]: time="2023-10-02T19:16:42.573204532Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\" returns image reference \"sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e\"" Oct 2 19:16:42.574746 env[1309]: time="2023-10-02T19:16:42.574713239Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\"" Oct 2 19:16:42.575895 env[1309]: time="2023-10-02T19:16:42.575864343Z" level=info msg="CreateContainer within sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:16:42.620528 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2158079566.mount: Deactivated successfully. Oct 2 19:16:42.640061 env[1309]: time="2023-10-02T19:16:42.640018904Z" level=info msg="CreateContainer within sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\"" Oct 2 19:16:42.642209 env[1309]: time="2023-10-02T19:16:42.640764107Z" level=info msg="StartContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\"" Oct 2 19:16:42.663367 systemd[1]: Started cri-containerd-d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce.scope. Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.680000 audit: BPF prog-id=128 op=LOAD Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2639 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:42.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432316662383761303265306335333762393638306463393230626139 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2639 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:42.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432316662383761303265306335333762393638306463393230626139 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.681000 audit: BPF prog-id=129 op=LOAD Oct 2 19:16:42.681000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030ca20 items=0 ppid=2639 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:42.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432316662383761303265306335333762393638306463393230626139 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit: BPF prog-id=130 op=LOAD Oct 2 19:16:42.682000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030ca68 items=0 ppid=2639 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:42.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432316662383761303265306335333762393638306463393230626139 Oct 2 19:16:42.682000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:16:42.682000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:16:42.682000 audit: BPF prog-id=131 op=LOAD Oct 2 19:16:42.682000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030ce78 items=0 ppid=2639 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:16:42.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432316662383761303265306335333762393638306463393230626139 Oct 2 19:16:42.702878 env[1309]: time="2023-10-02T19:16:42.702833959Z" level=info msg="StartContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" returns successfully" Oct 2 19:16:42.721000 audit[2847]: AVC avc: denied { map_create } for pid=2847 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c721 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c194,c721 tclass=bpf permissive=0 Oct 2 19:16:42.721000 audit[2847]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00068f7d0 a2=48 a3=c00068f7c0 items=0 ppid=2639 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c194,c721 key=(null) Oct 2 19:16:42.721000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:16:43.617195 systemd[1]: run-containerd-runc-k8s.io-d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce-runc.F3dK2D.mount: Deactivated successfully. Oct 2 19:16:44.966879 kubelet[2459]: E1002 19:16:44.966845 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:49.967871 kubelet[2459]: E1002 19:16:49.967804 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:50.283798 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4114193201.mount: Deactivated successfully. Oct 2 19:16:52.955578 env[1309]: time="2023-10-02T19:16:52.955533549Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:52.966198 env[1309]: time="2023-10-02T19:16:52.966156987Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:52.972663 env[1309]: time="2023-10-02T19:16:52.972626911Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:16:52.973176 env[1309]: time="2023-10-02T19:16:52.973141213Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\" returns image reference \"sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88\"" Oct 2 19:16:52.976021 env[1309]: time="2023-10-02T19:16:52.975981023Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:16:53.018426 env[1309]: time="2023-10-02T19:16:53.018340074Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" Oct 2 19:16:53.020527 env[1309]: time="2023-10-02T19:16:53.019152677Z" level=info msg="StartContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" Oct 2 19:16:53.051205 systemd[1]: Started cri-containerd-dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04.scope. Oct 2 19:16:53.063064 systemd[1]: cri-containerd-dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04.scope: Deactivated successfully. Oct 2 19:16:54.006754 systemd[1]: run-containerd-runc-k8s.io-dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04-runc.pIu08y.mount: Deactivated successfully. Oct 2 19:16:54.007228 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04-rootfs.mount: Deactivated successfully. Oct 2 19:16:54.968519 kubelet[2459]: E1002 19:16:54.968488 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:16:55.057357 env[1309]: time="2023-10-02T19:16:55.057223052Z" level=error msg="get state for dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" error="context deadline exceeded: unknown" Oct 2 19:16:55.057357 env[1309]: time="2023-10-02T19:16:55.057332252Z" level=warning msg="unknown status" status=0 Oct 2 19:16:57.159223 env[1309]: time="2023-10-02T19:16:57.159112488Z" level=error msg="get state for dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" error="context deadline exceeded: unknown" Oct 2 19:16:57.159223 env[1309]: time="2023-10-02T19:16:57.159204488Z" level=warning msg="unknown status" status=0 Oct 2 19:16:57.240216 env[1309]: time="2023-10-02T19:16:57.240157463Z" level=info msg="shim disconnected" id=dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04 Oct 2 19:16:57.240216 env[1309]: time="2023-10-02T19:16:57.240211463Z" level=warning msg="cleaning up after shim disconnected" id=dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04 namespace=k8s.io Oct 2 19:16:57.240216 env[1309]: time="2023-10-02T19:16:57.240222763Z" level=info msg="cleaning up dead shim" Oct 2 19:16:57.247888 env[1309]: time="2023-10-02T19:16:57.247829189Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2893 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:57.248233 env[1309]: time="2023-10-02T19:16:57.248125690Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:16:57.251385 env[1309]: time="2023-10-02T19:16:57.251332601Z" level=error msg="Failed to pipe stdout of container \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" error="reading from a closed fifo" Oct 2 19:16:57.251578 env[1309]: time="2023-10-02T19:16:57.251546102Z" level=error msg="Failed to pipe stderr of container \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" error="reading from a closed fifo" Oct 2 19:16:57.256647 env[1309]: time="2023-10-02T19:16:57.256601919Z" level=error msg="StartContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:57.256897 kubelet[2459]: E1002 19:16:57.256875 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" Oct 2 19:16:57.257776 kubelet[2459]: E1002 19:16:57.257037 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:57.257776 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:57.257776 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:16:57.257776 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:57.259046 kubelet[2459]: E1002 19:16:57.257089 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:16:58.061644 env[1309]: time="2023-10-02T19:16:58.061585749Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:16:58.094518 env[1309]: time="2023-10-02T19:16:58.094462559Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" Oct 2 19:16:58.095400 env[1309]: time="2023-10-02T19:16:58.095364562Z" level=info msg="StartContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" Oct 2 19:16:58.121484 systemd[1]: Started cri-containerd-600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515.scope. Oct 2 19:16:58.134588 systemd[1]: cri-containerd-600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515.scope: Deactivated successfully. Oct 2 19:16:58.168538 env[1309]: time="2023-10-02T19:16:58.168476408Z" level=info msg="shim disconnected" id=600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515 Oct 2 19:16:58.168538 env[1309]: time="2023-10-02T19:16:58.168534908Z" level=warning msg="cleaning up after shim disconnected" id=600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515 namespace=k8s.io Oct 2 19:16:58.168538 env[1309]: time="2023-10-02T19:16:58.168547608Z" level=info msg="cleaning up dead shim" Oct 2 19:16:58.176840 env[1309]: time="2023-10-02T19:16:58.176762136Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:16:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2930 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:16:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:16:58.177250 env[1309]: time="2023-10-02T19:16:58.177152537Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:16:58.180054 env[1309]: time="2023-10-02T19:16:58.180003747Z" level=error msg="Failed to pipe stdout of container \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" error="reading from a closed fifo" Oct 2 19:16:58.180255 env[1309]: time="2023-10-02T19:16:58.180218048Z" level=error msg="Failed to pipe stderr of container \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" error="reading from a closed fifo" Oct 2 19:16:58.184842 env[1309]: time="2023-10-02T19:16:58.184793863Z" level=error msg="StartContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:16:58.185116 kubelet[2459]: E1002 19:16:58.185095 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515" Oct 2 19:16:58.185240 kubelet[2459]: E1002 19:16:58.185221 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:16:58.185240 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:16:58.185240 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:16:58.185240 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:16:58.185500 kubelet[2459]: E1002 19:16:58.185267 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:16:59.061127 kubelet[2459]: I1002 19:16:59.061090 2459 scope.go:115] "RemoveContainer" containerID="dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" Oct 2 19:16:59.061743 kubelet[2459]: I1002 19:16:59.061590 2459 scope.go:115] "RemoveContainer" containerID="dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" Oct 2 19:16:59.063194 env[1309]: time="2023-10-02T19:16:59.063156412Z" level=info msg="RemoveContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" Oct 2 19:16:59.063913 env[1309]: time="2023-10-02T19:16:59.063874114Z" level=info msg="RemoveContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\"" Oct 2 19:16:59.064184 env[1309]: time="2023-10-02T19:16:59.064146415Z" level=error msg="RemoveContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\" failed" error="failed to set removing state for container \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\": container is already in removing state" Oct 2 19:16:59.065776 kubelet[2459]: E1002 19:16:59.065041 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\": container is already in removing state" containerID="dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" Oct 2 19:16:59.065776 kubelet[2459]: E1002 19:16:59.065088 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04": container is already in removing state; Skipping pod "cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)" Oct 2 19:16:59.065776 kubelet[2459]: E1002 19:16:59.065398 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:16:59.076899 env[1309]: time="2023-10-02T19:16:59.076856158Z" level=info msg="RemoveContainer for \"dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04\" returns successfully" Oct 2 19:16:59.081577 systemd[1]: run-containerd-runc-k8s.io-600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515-runc.Nn19DG.mount: Deactivated successfully. Oct 2 19:16:59.081696 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515-rootfs.mount: Deactivated successfully. Oct 2 19:16:59.970137 kubelet[2459]: E1002 19:16:59.970094 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:00.064603 kubelet[2459]: E1002 19:17:00.064561 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:00.163229 kubelet[2459]: W1002 19:17:00.163184 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04.scope WatchSource:0}: container "dc13132d7b98af8c2d2e0de8aa4b937fc91595c755669163f7e0d5f8bf5ccb04" in namespace "k8s.io": not found Oct 2 19:17:03.270559 kubelet[2459]: W1002 19:17:03.270505 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515.scope WatchSource:0}: task 600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515 not found: not found Oct 2 19:17:04.970890 kubelet[2459]: E1002 19:17:04.970851 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:09.972332 kubelet[2459]: E1002 19:17:09.972295 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:13.949205 env[1309]: time="2023-10-02T19:17:13.949144507Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:17:13.973286 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1695998392.mount: Deactivated successfully. Oct 2 19:17:13.986948 env[1309]: time="2023-10-02T19:17:13.986894518Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" Oct 2 19:17:13.987485 env[1309]: time="2023-10-02T19:17:13.987453420Z" level=info msg="StartContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" Oct 2 19:17:14.011060 systemd[1]: Started cri-containerd-a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60.scope. Oct 2 19:17:14.020841 systemd[1]: cri-containerd-a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60.scope: Deactivated successfully. Oct 2 19:17:14.021230 systemd[1]: Stopped cri-containerd-a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60.scope. Oct 2 19:17:14.050702 env[1309]: time="2023-10-02T19:17:14.050648006Z" level=info msg="shim disconnected" id=a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60 Oct 2 19:17:14.050702 env[1309]: time="2023-10-02T19:17:14.050700606Z" level=warning msg="cleaning up after shim disconnected" id=a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60 namespace=k8s.io Oct 2 19:17:14.051077 env[1309]: time="2023-10-02T19:17:14.050711606Z" level=info msg="cleaning up dead shim" Oct 2 19:17:14.058458 env[1309]: time="2023-10-02T19:17:14.058361929Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:17:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2971 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:17:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:17:14.058688 env[1309]: time="2023-10-02T19:17:14.058622329Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:17:14.059114 env[1309]: time="2023-10-02T19:17:14.059066131Z" level=error msg="Failed to pipe stdout of container \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" error="reading from a closed fifo" Oct 2 19:17:14.059299 env[1309]: time="2023-10-02T19:17:14.059258031Z" level=error msg="Failed to pipe stderr of container \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" error="reading from a closed fifo" Oct 2 19:17:14.064154 env[1309]: time="2023-10-02T19:17:14.064107545Z" level=error msg="StartContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:17:14.064353 kubelet[2459]: E1002 19:17:14.064317 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60" Oct 2 19:17:14.064760 kubelet[2459]: E1002 19:17:14.064446 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:17:14.064760 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:17:14.064760 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:17:14.064760 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:17:14.065902 kubelet[2459]: E1002 19:17:14.064509 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:14.089042 kubelet[2459]: I1002 19:17:14.088908 2459 scope.go:115] "RemoveContainer" containerID="600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515" Oct 2 19:17:14.089328 kubelet[2459]: I1002 19:17:14.089299 2459 scope.go:115] "RemoveContainer" containerID="600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515" Oct 2 19:17:14.090730 env[1309]: time="2023-10-02T19:17:14.090688724Z" level=info msg="RemoveContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" Oct 2 19:17:14.092445 env[1309]: time="2023-10-02T19:17:14.092373729Z" level=info msg="RemoveContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\"" Oct 2 19:17:14.092779 env[1309]: time="2023-10-02T19:17:14.092731430Z" level=error msg="RemoveContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\" failed" error="failed to set removing state for container \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\": container is already in removing state" Oct 2 19:17:14.093559 kubelet[2459]: E1002 19:17:14.093001 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\": container is already in removing state" containerID="600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515" Oct 2 19:17:14.093559 kubelet[2459]: E1002 19:17:14.093033 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515": container is already in removing state; Skipping pod "cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)" Oct 2 19:17:14.093559 kubelet[2459]: E1002 19:17:14.093350 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:14.102723 env[1309]: time="2023-10-02T19:17:14.102680959Z" level=info msg="RemoveContainer for \"600cf9e800886dc778bb9a14050390a29e6a9133c88488670181768a6e91b515\" returns successfully" Oct 2 19:17:14.970595 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60-rootfs.mount: Deactivated successfully. Oct 2 19:17:14.973045 kubelet[2459]: E1002 19:17:14.973016 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:17.155308 kubelet[2459]: W1002 19:17:17.155217 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60.scope WatchSource:0}: task a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60 not found: not found Oct 2 19:17:19.023000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:19.029809 kernel: kauditd_printk_skb: 107 callbacks suppressed Oct 2 19:17:19.030681 kernel: audit: type=1400 audit(1696274239.023:1111): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:19.023000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0005f8720 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:19.077169 kernel: audit: type=1300 audit(1696274239.023:1111): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0005f8720 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:19.077406 kernel: audit: type=1327 audit(1696274239.023:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:19.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:19.024000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:19.108990 kernel: audit: type=1400 audit(1696274239.024:1112): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:19.109087 kernel: audit: type=1300 audit(1696274239.024:1112): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001107980 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:19.024000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001107980 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:19.024000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:19.132989 kernel: audit: type=1327 audit(1696274239.024:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:19.974244 kubelet[2459]: E1002 19:17:19.974207 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:20.953000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.953000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.987279 kernel: audit: type=1400 audit(1696274240.953:1114): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.987414 kernel: audit: type=1400 audit(1696274240.953:1113): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.987439 kernel: audit: type=1300 audit(1696274240.953:1113): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d9a6b20 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.953000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d9a6b20 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:21.026692 kernel: audit: type=1327 audit(1696274240.953:1113): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:20.953000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d6aaed0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d6aaf00 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:20.995000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.995000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.995000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00d6aaf30 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.995000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:20.995000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d9a6c80 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.995000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:20.997000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:20.997000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d6aaff0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:17:20.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:17:24.975901 kubelet[2459]: E1002 19:17:24.975869 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:27.946181 kubelet[2459]: E1002 19:17:27.946138 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:29.977557 kubelet[2459]: E1002 19:17:29.977501 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:34.978830 kubelet[2459]: E1002 19:17:34.978791 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:36.412000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.417333 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:17:36.417457 kernel: audit: type=1400 audit(1696274256.412:1119): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.438586 kernel: audit: type=1300 audit(1696274256.412:1119): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac000 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.412000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac000 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.455981 kernel: audit: type=1327 audit(1696274256.412:1119): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.416000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.475984 kernel: audit: type=1400 audit(1696274256.416:1120): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.416000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001156d00 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.491981 kernel: audit: type=1300 audit(1696274256.416:1120): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001156d00 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.416000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.531004 kernel: audit: type=1327 audit(1696274256.416:1120): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.531141 kernel: audit: type=1400 audit(1696274256.417:1121): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac1a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.568029 kernel: audit: type=1300 audit(1696274256.417:1121): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac1a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.568166 kernel: audit: type=1327 audit(1696274256.417:1121): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:36.420000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.605150 kernel: audit: type=1400 audit(1696274256.420:1122): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:17:36.420000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bac220 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:17:36.420000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:17:39.950941 env[1309]: time="2023-10-02T19:17:39.950702853Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:17:39.978327 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1555635244.mount: Deactivated successfully. Oct 2 19:17:39.982347 kubelet[2459]: E1002 19:17:39.982181 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:39.995912 env[1309]: time="2023-10-02T19:17:39.995864817Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" Oct 2 19:17:39.996452 env[1309]: time="2023-10-02T19:17:39.996414531Z" level=info msg="StartContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" Oct 2 19:17:40.022830 systemd[1]: Started cri-containerd-a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed.scope. Oct 2 19:17:40.035861 systemd[1]: cri-containerd-a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed.scope: Deactivated successfully. Oct 2 19:17:40.068811 env[1309]: time="2023-10-02T19:17:40.068748773Z" level=info msg="shim disconnected" id=a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed Oct 2 19:17:40.068811 env[1309]: time="2023-10-02T19:17:40.068809675Z" level=warning msg="cleaning up after shim disconnected" id=a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed namespace=k8s.io Oct 2 19:17:40.068811 env[1309]: time="2023-10-02T19:17:40.068821875Z" level=info msg="cleaning up dead shim" Oct 2 19:17:40.076748 env[1309]: time="2023-10-02T19:17:40.076691075Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:17:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3015 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:17:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:17:40.077054 env[1309]: time="2023-10-02T19:17:40.076991983Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:17:40.078227 env[1309]: time="2023-10-02T19:17:40.078176913Z" level=error msg="Failed to pipe stdout of container \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" error="reading from a closed fifo" Oct 2 19:17:40.080115 env[1309]: time="2023-10-02T19:17:40.080066661Z" level=error msg="Failed to pipe stderr of container \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" error="reading from a closed fifo" Oct 2 19:17:40.084430 env[1309]: time="2023-10-02T19:17:40.084383971Z" level=error msg="StartContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:17:40.084685 kubelet[2459]: E1002 19:17:40.084660 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed" Oct 2 19:17:40.084813 kubelet[2459]: E1002 19:17:40.084793 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:17:40.084813 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:17:40.084813 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:17:40.084813 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:17:40.085132 kubelet[2459]: E1002 19:17:40.084848 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:40.139105 kubelet[2459]: I1002 19:17:40.139066 2459 scope.go:115] "RemoveContainer" containerID="a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60" Oct 2 19:17:40.141318 kubelet[2459]: I1002 19:17:40.139499 2459 scope.go:115] "RemoveContainer" containerID="a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60" Oct 2 19:17:40.141473 env[1309]: time="2023-10-02T19:17:40.141146915Z" level=info msg="RemoveContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" Oct 2 19:17:40.143948 env[1309]: time="2023-10-02T19:17:40.142595052Z" level=info msg="RemoveContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\"" Oct 2 19:17:40.143948 env[1309]: time="2023-10-02T19:17:40.142718155Z" level=error msg="RemoveContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\" failed" error="failed to set removing state for container \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\": container is already in removing state" Oct 2 19:17:40.144113 kubelet[2459]: E1002 19:17:40.142915 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\": container is already in removing state" containerID="a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60" Oct 2 19:17:40.144113 kubelet[2459]: E1002 19:17:40.142981 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60": container is already in removing state; Skipping pod "cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)" Oct 2 19:17:40.144113 kubelet[2459]: E1002 19:17:40.143424 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:40.152236 env[1309]: time="2023-10-02T19:17:40.152120194Z" level=info msg="RemoveContainer for \"a09cb4986a4f308a2b3192e59c6cf7b90bd07773c8f5ac1c28ba1f2707690b60\" returns successfully" Oct 2 19:17:40.972272 systemd[1]: run-containerd-runc-k8s.io-a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed-runc.dhuJpl.mount: Deactivated successfully. Oct 2 19:17:40.972421 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed-rootfs.mount: Deactivated successfully. Oct 2 19:17:43.174554 kubelet[2459]: W1002 19:17:43.174488 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed.scope WatchSource:0}: task a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed not found: not found Oct 2 19:17:44.983801 kubelet[2459]: E1002 19:17:44.983765 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:49.985016 kubelet[2459]: E1002 19:17:49.984982 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:53.946474 kubelet[2459]: E1002 19:17:53.946417 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:17:54.986323 kubelet[2459]: E1002 19:17:54.986286 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:17:59.987350 kubelet[2459]: E1002 19:17:59.987311 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:04.988272 kubelet[2459]: E1002 19:18:04.988234 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:05.946631 kubelet[2459]: E1002 19:18:05.946582 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:09.989294 kubelet[2459]: E1002 19:18:09.989254 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:14.990755 kubelet[2459]: E1002 19:18:14.990721 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:16.947157 kubelet[2459]: E1002 19:18:16.947112 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:19.025000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:19.034231 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:18:19.034333 kernel: audit: type=1400 audit(1696274299.025:1123): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:19.025000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:19.074012 kernel: audit: type=1400 audit(1696274299.025:1124): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:19.074133 kernel: audit: type=1300 audit(1696274299.025:1123): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001a145d0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:19.025000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001a145d0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:19.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:19.114904 kernel: audit: type=1327 audit(1696274299.025:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:19.115015 kernel: audit: type=1300 audit(1696274299.025:1124): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001e51f00 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:19.025000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001e51f00 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:19.025000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:19.154790 kernel: audit: type=1327 audit(1696274299.025:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:19.992501 kubelet[2459]: E1002 19:18:19.992435 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:20.955000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.955000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.988237 kernel: audit: type=1400 audit(1696274300.955:1125): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.988346 kernel: audit: type=1400 audit(1696274300.955:1126): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.988372 kernel: audit: type=1300 audit(1696274300.955:1126): arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00189be60 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.955000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00189be60 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:21.025200 kernel: audit: type=1327 audit(1696274300.955:1126): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:20.955000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c7a04b0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.955000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:20.958000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.958000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c7a0540 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.958000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:20.996000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.996000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c001758000 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:20.996000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.996000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c7a0660 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:20.998000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:20.998000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c7a06f0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:18:20.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:18:24.993608 kubelet[2459]: E1002 19:18:24.993578 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:28.166134 update_engine[1294]: I1002 19:18:28.166076 1294 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:18:28.166134 update_engine[1294]: I1002 19:18:28.166116 1294 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:18:28.166618 update_engine[1294]: I1002 19:18:28.166251 1294 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:18:28.166826 update_engine[1294]: I1002 19:18:28.166708 1294 omaha_request_params.cc:62] Current group set to lts Oct 2 19:18:28.166926 update_engine[1294]: I1002 19:18:28.166889 1294 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:18:28.166926 update_engine[1294]: I1002 19:18:28.166898 1294 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:18:28.166926 update_engine[1294]: I1002 19:18:28.166915 1294 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:18:28.167074 update_engine[1294]: I1002 19:18:28.166949 1294 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:18:28.167074 update_engine[1294]: I1002 19:18:28.167037 1294 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:18:28.167074 update_engine[1294]: I1002 19:18:28.167043 1294 omaha_request_action.cc:269] Request: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: Oct 2 19:18:28.167074 update_engine[1294]: I1002 19:18:28.167048 1294 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:18:28.167903 locksmithd[1390]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:18:28.168331 update_engine[1294]: I1002 19:18:28.168308 1294 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:18:28.168509 update_engine[1294]: I1002 19:18:28.168485 1294 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:18:28.948751 env[1309]: time="2023-10-02T19:18:28.948700406Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:18:28.973509 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3823554412.mount: Deactivated successfully. Oct 2 19:18:28.987419 env[1309]: time="2023-10-02T19:18:28.987377971Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" Oct 2 19:18:28.988683 env[1309]: time="2023-10-02T19:18:28.987770077Z" level=info msg="StartContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" Oct 2 19:18:29.014537 systemd[1]: Started cri-containerd-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a.scope. Oct 2 19:18:29.024916 systemd[1]: cri-containerd-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a.scope: Deactivated successfully. Oct 2 19:18:29.025288 systemd[1]: Stopped cri-containerd-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a.scope. Oct 2 19:18:29.065378 env[1309]: time="2023-10-02T19:18:29.065315400Z" level=info msg="shim disconnected" id=cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a Oct 2 19:18:29.065378 env[1309]: time="2023-10-02T19:18:29.065371201Z" level=warning msg="cleaning up after shim disconnected" id=cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a namespace=k8s.io Oct 2 19:18:29.065378 env[1309]: time="2023-10-02T19:18:29.065385001Z" level=info msg="cleaning up dead shim" Oct 2 19:18:29.073360 env[1309]: time="2023-10-02T19:18:29.073312916Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:18:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3055 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:18:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:18:29.073645 env[1309]: time="2023-10-02T19:18:29.073582620Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:18:29.074868 env[1309]: time="2023-10-02T19:18:29.074818138Z" level=error msg="Failed to pipe stdout of container \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" error="reading from a closed fifo" Oct 2 19:18:29.074948 env[1309]: time="2023-10-02T19:18:29.074890639Z" level=error msg="Failed to pipe stderr of container \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" error="reading from a closed fifo" Oct 2 19:18:29.079298 env[1309]: time="2023-10-02T19:18:29.079255502Z" level=error msg="StartContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:18:29.079500 kubelet[2459]: E1002 19:18:29.079479 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a" Oct 2 19:18:29.079863 kubelet[2459]: E1002 19:18:29.079607 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:18:29.079863 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:18:29.079863 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:18:29.079863 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:18:29.080025 kubelet[2459]: E1002 19:18:29.079655 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:29.208523 update_engine[1294]: I1002 19:18:29.207119 1294 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:18:29.208523 update_engine[1294]: I1002 19:18:29.207401 1294 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:18:29.208523 update_engine[1294]: I1002 19:18:29.207605 1294 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:18:29.233683 kubelet[2459]: I1002 19:18:29.233656 2459 scope.go:115] "RemoveContainer" containerID="a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed" Oct 2 19:18:29.234051 kubelet[2459]: I1002 19:18:29.234032 2459 scope.go:115] "RemoveContainer" containerID="a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed" Oct 2 19:18:29.235586 env[1309]: time="2023-10-02T19:18:29.235546462Z" level=info msg="RemoveContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" Oct 2 19:18:29.236938 env[1309]: time="2023-10-02T19:18:29.236656878Z" level=info msg="RemoveContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\"" Oct 2 19:18:29.236938 env[1309]: time="2023-10-02T19:18:29.236748279Z" level=error msg="RemoveContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\" failed" error="failed to set removing state for container \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\": container is already in removing state" Oct 2 19:18:29.237785 kubelet[2459]: E1002 19:18:29.237765 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\": container is already in removing state" containerID="a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed" Oct 2 19:18:29.237886 kubelet[2459]: E1002 19:18:29.237797 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed": container is already in removing state; Skipping pod "cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)" Oct 2 19:18:29.238101 kubelet[2459]: E1002 19:18:29.238082 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:29.252720 env[1309]: time="2023-10-02T19:18:29.252680809Z" level=info msg="RemoveContainer for \"a242ea5133a28d898cba94b3b9be72212bc5e93f9a0459a19eb308a1f87696ed\" returns successfully" Oct 2 19:18:29.293142 update_engine[1294]: I1002 19:18:29.293099 1294 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:18:29.295056 update_engine[1294]: I1002 19:18:29.295018 1294 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:18:29.295056 update_engine[1294]: I1002 19:18:29.295043 1294 omaha_request_action.cc:619] Omaha request response: Oct 2 19:18:29.295056 update_engine[1294]: Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403640 1294 omaha_request_action.cc:409] No update. Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403684 1294 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403692 1294 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403699 1294 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403704 1294 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:18:29.403692 update_engine[1294]: I1002 19:18:29.403709 1294 update_attempter.cc:302] Processing Done. Oct 2 19:18:29.404165 update_engine[1294]: I1002 19:18:29.403730 1294 update_attempter.cc:338] No update. Oct 2 19:18:29.404165 update_engine[1294]: I1002 19:18:29.403746 1294 update_check_scheduler.cc:74] Next update check in 44m19s Oct 2 19:18:29.404275 locksmithd[1390]: LastCheckedTime=1696274309 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:18:29.970588 systemd[1]: run-containerd-runc-k8s.io-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a-runc.eBymMk.mount: Deactivated successfully. Oct 2 19:18:29.970708 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a-rootfs.mount: Deactivated successfully. Oct 2 19:18:29.995165 kubelet[2459]: E1002 19:18:29.995134 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:32.171074 kubelet[2459]: W1002 19:18:32.171022 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a.scope WatchSource:0}: task cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a not found: not found Oct 2 19:18:34.996786 kubelet[2459]: E1002 19:18:34.996679 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:36.413000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.418691 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:18:36.418815 kernel: audit: type=1400 audit(1696274316.413:1131): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.413000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa8f40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.455721 kernel: audit: type=1300 audit(1696274316.413:1131): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa8f40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.455837 kernel: audit: type=1327 audit(1696274316.413:1131): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.489648 kernel: audit: type=1400 audit(1696274316.417:1132): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.510707 kernel: audit: type=1300 audit(1696274316.417:1132): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa9080 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa9080 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.527464 kernel: audit: type=1327 audit(1696274316.417:1132): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.527536 kernel: audit: type=1400 audit(1696274316.417:1133): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.543169 kernel: audit: type=1300 audit(1696274316.417:1133): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa90c0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa90c0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.563010 kernel: audit: type=1327 audit(1696274316.417:1133): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:36.421000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.594326 kernel: audit: type=1400 audit(1696274316.421:1134): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:18:36.421000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa9200 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:18:36.421000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:18:39.997881 kubelet[2459]: E1002 19:18:39.997840 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:42.946438 kubelet[2459]: E1002 19:18:42.946395 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:44.998666 kubelet[2459]: E1002 19:18:44.998624 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:50.000481 kubelet[2459]: E1002 19:18:50.000396 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:18:54.947025 kubelet[2459]: E1002 19:18:54.946979 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:18:55.001854 kubelet[2459]: E1002 19:18:55.001810 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:00.002803 kubelet[2459]: E1002 19:19:00.002749 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:05.004115 kubelet[2459]: E1002 19:19:05.004084 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:05.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.4:22-10.200.12.6:49710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.314343 systemd[1]: Started sshd@7-10.200.8.4:22-10.200.12.6:49710.service. Oct 2 19:19:05.319585 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:19:05.319680 kernel: audit: type=1130 audit(1696274345.313:1135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.4:22-10.200.12.6:49710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:05.943000 audit[3071]: USER_ACCT pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:05.945272 sshd[3071]: Accepted publickey for core from 10.200.12.6 port 49710 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:19:05.964236 kernel: audit: type=1101 audit(1696274345.943:1136): pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:05.964438 sshd[3071]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:05.962000 audit[3071]: CRED_ACQ pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:05.970003 systemd[1]: Started session-10.scope. Oct 2 19:19:05.970642 systemd-logind[1293]: New session 10 of user core. Oct 2 19:19:05.991226 kernel: audit: type=1103 audit(1696274345.962:1137): pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:05.991325 kernel: audit: type=1006 audit(1696274345.962:1138): pid=3071 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:19:05.991358 kernel: audit: type=1300 audit(1696274345.962:1138): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd7c525e0 a2=3 a3=0 items=0 ppid=1 pid=3071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:05.962000 audit[3071]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd7c525e0 a2=3 a3=0 items=0 ppid=1 pid=3071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:05.962000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:06.007976 kernel: audit: type=1327 audit(1696274345.962:1138): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:05.976000 audit[3071]: USER_START pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:05.978000 audit[3073]: CRED_ACQ pid=3073 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.046500 kernel: audit: type=1105 audit(1696274345.976:1139): pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.046618 kernel: audit: type=1103 audit(1696274345.978:1140): pid=3073 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.472983 sshd[3071]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:06.474000 audit[3071]: USER_END pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.481584 systemd[1]: sshd@7-10.200.8.4:22-10.200.12.6:49710.service: Deactivated successfully. Oct 2 19:19:06.482365 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:19:06.485378 systemd-logind[1293]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:19:06.486332 systemd-logind[1293]: Removed session 10. Oct 2 19:19:06.479000 audit[3071]: CRED_DISP pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.508453 kernel: audit: type=1106 audit(1696274346.474:1141): pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.508626 kernel: audit: type=1104 audit(1696274346.479:1142): pid=3071 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:06.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.4:22-10.200.12.6:49710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:06.947577 kubelet[2459]: E1002 19:19:06.947539 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:10.006101 kubelet[2459]: E1002 19:19:10.006058 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:15.007229 kubelet[2459]: E1002 19:19:15.007191 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:16.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.4:22-10.200.12.6:34576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:16.578329 systemd[1]: Started sshd@8-10.200.8.4:22-10.200.12.6:34576.service. Oct 2 19:19:16.583625 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:19:16.583702 kernel: audit: type=1130 audit(1696274356.577:1144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.4:22-10.200.12.6:34576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:17.204000 audit[3086]: USER_ACCT pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.224000 audit[3086]: CRED_ACQ pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.225803 sshd[3086]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:17.230094 sshd[3086]: Accepted publickey for core from 10.200.12.6 port 34576 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:19:17.231655 systemd[1]: Started session-11.scope. Oct 2 19:19:17.233000 systemd-logind[1293]: New session 11 of user core. Oct 2 19:19:17.242979 kernel: audit: type=1101 audit(1696274357.204:1145): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.243084 kernel: audit: type=1103 audit(1696274357.224:1146): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.243116 kernel: audit: type=1006 audit(1696274357.224:1147): pid=3086 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:19:17.224000 audit[3086]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdc144e20 a2=3 a3=0 items=0 ppid=1 pid=3086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:17.268947 kernel: audit: type=1300 audit(1696274357.224:1147): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdc144e20 a2=3 a3=0 items=0 ppid=1 pid=3086 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:17.269200 kernel: audit: type=1327 audit(1696274357.224:1147): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:17.224000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:17.275286 kernel: audit: type=1105 audit(1696274357.237:1148): pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.237000 audit[3086]: USER_START pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.239000 audit[3089]: CRED_ACQ pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.307620 kernel: audit: type=1103 audit(1696274357.239:1149): pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.728701 sshd[3086]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:17.729000 audit[3086]: USER_END pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.732222 systemd[1]: sshd@8-10.200.8.4:22-10.200.12.6:34576.service: Deactivated successfully. Oct 2 19:19:17.733006 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:19:17.734333 systemd-logind[1293]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:19:17.735261 systemd-logind[1293]: Removed session 11. Oct 2 19:19:17.729000 audit[3086]: CRED_DISP pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.763270 kernel: audit: type=1106 audit(1696274357.729:1150): pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.763407 kernel: audit: type=1104 audit(1696274357.729:1151): pid=3086 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:17.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.4:22-10.200.12.6:34576 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:18.948079 kubelet[2459]: E1002 19:19:18.948035 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:19.028000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:19.028000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:19.028000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012346e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:19.028000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:19.028000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000b766f0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:19.028000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:20.008934 kubelet[2459]: E1002 19:19:20.008862 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:20.956000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.956000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00a097740 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.956000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00dabe540 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:20.958000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.958000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00dabe5a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.958000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:20.997000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.997000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.997000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00db2ca50 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:20.997000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a0978a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:20.998000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:20.998000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00dabe6f0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:19:20.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:19:25.010604 kubelet[2459]: E1002 19:19:25.010567 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:27.839978 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:19:27.840095 kernel: audit: type=1130 audit(1696274367.833:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.4:22-10.200.12.6:43228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:27.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.4:22-10.200.12.6:43228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:27.834319 systemd[1]: Started sshd@9-10.200.8.4:22-10.200.12.6:43228.service. Oct 2 19:19:28.460000 audit[3103]: USER_ACCT pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.461776 sshd[3103]: Accepted publickey for core from 10.200.12.6 port 43228 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:19:28.480867 sshd[3103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:28.481175 kernel: audit: type=1101 audit(1696274368.460:1162): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.481216 kernel: audit: type=1103 audit(1696274368.479:1163): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.479000 audit[3103]: CRED_ACQ pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.486991 systemd[1]: Started session-12.scope. Oct 2 19:19:28.488176 systemd-logind[1293]: New session 12 of user core. Oct 2 19:19:28.479000 audit[3103]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcebf1d160 a2=3 a3=0 items=0 ppid=1 pid=3103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:28.528916 kernel: audit: type=1006 audit(1696274368.479:1164): pid=3103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:19:28.529150 kernel: audit: type=1300 audit(1696274368.479:1164): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcebf1d160 a2=3 a3=0 items=0 ppid=1 pid=3103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:28.479000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:28.535003 kernel: audit: type=1327 audit(1696274368.479:1164): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:28.535045 kernel: audit: type=1105 audit(1696274368.493:1165): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.493000 audit[3103]: USER_START pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.495000 audit[3108]: CRED_ACQ pid=3108 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.566200 kernel: audit: type=1103 audit(1696274368.495:1166): pid=3108 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.949648 sshd[3103]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:28.950000 audit[3103]: USER_END pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.952973 systemd-logind[1293]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:19:28.953722 systemd[1]: sshd@9-10.200.8.4:22-10.200.12.6:43228.service: Deactivated successfully. Oct 2 19:19:28.954511 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:19:28.955939 systemd-logind[1293]: Removed session 12. Oct 2 19:19:28.950000 audit[3103]: CRED_DISP pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.984685 kernel: audit: type=1106 audit(1696274368.950:1167): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.984760 kernel: audit: type=1104 audit(1696274368.950:1168): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:28.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.4:22-10.200.12.6:43228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:30.011902 kubelet[2459]: E1002 19:19:30.011861 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:30.946775 kubelet[2459]: E1002 19:19:30.946734 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:35.013088 kubelet[2459]: E1002 19:19:35.013043 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:36.414000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.421641 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:19:36.421783 kernel: audit: type=1400 audit(1696274376.414:1170): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.414000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00092d200 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.457666 kernel: audit: type=1300 audit(1696274376.414:1170): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00092d200 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.457791 kernel: audit: type=1327 audit(1696274376.414:1170): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.489568 kernel: audit: type=1400 audit(1696274376.419:1171): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.489712 kernel: audit: type=1300 audit(1696274376.419:1171): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00092d240 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.419000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.419000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00092d240 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.527058 kernel: audit: type=1327 audit(1696274376.419:1171): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.527195 kernel: audit: type=1400 audit(1696274376.420:1172): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.420000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.420000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1620 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.420000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.578784 kernel: audit: type=1300 audit(1696274376.420:1172): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1620 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.578973 kernel: audit: type=1327 audit(1696274376.420:1172): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.421000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:36.421000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00092d480 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:19:36.421000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:19:36.595974 kernel: audit: type=1400 audit(1696274376.421:1173): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:19:39.058061 systemd[1]: Started sshd@10-10.200.8.4:22-10.200.12.6:40734.service. Oct 2 19:19:39.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.4:22-10.200.12.6:40734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:39.691000 audit[3122]: USER_ACCT pid=3122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:39.692438 sshd[3122]: Accepted publickey for core from 10.200.12.6 port 40734 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:19:39.692000 audit[3122]: CRED_ACQ pid=3122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:39.692000 audit[3122]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc93de97a0 a2=3 a3=0 items=0 ppid=1 pid=3122 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:39.692000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:39.693892 sshd[3122]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:39.698934 systemd[1]: Started session-13.scope. Oct 2 19:19:39.699578 systemd-logind[1293]: New session 13 of user core. Oct 2 19:19:39.703000 audit[3122]: USER_START pid=3122 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:39.704000 audit[3124]: CRED_ACQ pid=3124 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:40.014554 kubelet[2459]: E1002 19:19:40.014442 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:40.197571 sshd[3122]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:40.197000 audit[3122]: USER_END pid=3122 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:40.198000 audit[3122]: CRED_DISP pid=3122 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:40.200571 systemd[1]: sshd@10-10.200.8.4:22-10.200.12.6:40734.service: Deactivated successfully. Oct 2 19:19:40.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.4:22-10.200.12.6:40734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:40.201679 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:19:40.202413 systemd-logind[1293]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:19:40.203227 systemd-logind[1293]: Removed session 13. Oct 2 19:19:41.947343 kubelet[2459]: E1002 19:19:41.947299 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:45.015310 kubelet[2459]: E1002 19:19:45.015273 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:50.016848 kubelet[2459]: E1002 19:19:50.016810 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:50.304479 systemd[1]: Started sshd@11-10.200.8.4:22-10.200.12.6:59962.service. Oct 2 19:19:50.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.4:22-10.200.12.6:59962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:50.316304 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:19:50.316379 kernel: audit: type=1130 audit(1696274390.304:1183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.4:22-10.200.12.6:59962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:50.934000 audit[3134]: USER_ACCT pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:50.955345 sshd[3134]: Accepted publickey for core from 10.200.12.6 port 59962 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:19:50.955998 kernel: audit: type=1101 audit(1696274390.934:1184): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:50.956657 sshd[3134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:19:50.955000 audit[3134]: CRED_ACQ pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:50.963984 systemd[1]: Started session-14.scope. Oct 2 19:19:50.965110 systemd-logind[1293]: New session 14 of user core. Oct 2 19:19:50.984416 kernel: audit: type=1103 audit(1696274390.955:1185): pid=3134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:50.984490 kernel: audit: type=1006 audit(1696274390.955:1186): pid=3134 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:19:50.984513 kernel: audit: type=1300 audit(1696274390.955:1186): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf9154090 a2=3 a3=0 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:50.955000 audit[3134]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf9154090 a2=3 a3=0 items=0 ppid=1 pid=3134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:19:50.955000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:51.001981 kernel: audit: type=1327 audit(1696274390.955:1186): proctitle=737368643A20636F7265205B707269765D Oct 2 19:19:50.967000 audit[3134]: USER_START pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.024383 kernel: audit: type=1105 audit(1696274390.967:1187): pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:50.972000 audit[3136]: CRED_ACQ pid=3136 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.041921 kernel: audit: type=1103 audit(1696274390.972:1188): pid=3136 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.480655 sshd[3134]: pam_unix(sshd:session): session closed for user core Oct 2 19:19:51.481000 audit[3134]: USER_END pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.485289 systemd[1]: sshd@11-10.200.8.4:22-10.200.12.6:59962.service: Deactivated successfully. Oct 2 19:19:51.486061 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:19:51.487601 systemd-logind[1293]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:19:51.488371 systemd-logind[1293]: Removed session 14. Oct 2 19:19:51.482000 audit[3134]: CRED_DISP pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.516797 kernel: audit: type=1106 audit(1696274391.481:1189): pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.516992 kernel: audit: type=1104 audit(1696274391.482:1190): pid=3134 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:19:51.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.4:22-10.200.12.6:59962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:19:55.018181 kubelet[2459]: E1002 19:19:55.018139 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:19:56.949491 env[1309]: time="2023-10-02T19:19:56.949440434Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:19:56.987796 env[1309]: time="2023-10-02T19:19:56.987746118Z" level=info msg="CreateContainer within sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\"" Oct 2 19:19:56.988253 env[1309]: time="2023-10-02T19:19:56.988220822Z" level=info msg="StartContainer for \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\"" Oct 2 19:19:57.015174 systemd[1]: Started cri-containerd-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca.scope. Oct 2 19:19:57.025750 systemd[1]: cri-containerd-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca.scope: Deactivated successfully. Oct 2 19:19:57.026084 systemd[1]: Stopped cri-containerd-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca.scope. Oct 2 19:19:57.089227 env[1309]: time="2023-10-02T19:19:57.089170167Z" level=info msg="shim disconnected" id=049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca Oct 2 19:19:57.089227 env[1309]: time="2023-10-02T19:19:57.089226968Z" level=warning msg="cleaning up after shim disconnected" id=049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca namespace=k8s.io Oct 2 19:19:57.089600 env[1309]: time="2023-10-02T19:19:57.089238668Z" level=info msg="cleaning up dead shim" Oct 2 19:19:57.097179 env[1309]: time="2023-10-02T19:19:57.097138926Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:19:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3172 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:19:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:19:57.097438 env[1309]: time="2023-10-02T19:19:57.097381928Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:19:57.097642 env[1309]: time="2023-10-02T19:19:57.097599030Z" level=error msg="Failed to pipe stdout of container \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\"" error="reading from a closed fifo" Oct 2 19:19:57.099227 env[1309]: time="2023-10-02T19:19:57.099190941Z" level=error msg="Failed to pipe stderr of container \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\"" error="reading from a closed fifo" Oct 2 19:19:57.103707 env[1309]: time="2023-10-02T19:19:57.103597674Z" level=error msg="StartContainer for \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:19:57.104113 kubelet[2459]: E1002 19:19:57.104089 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca" Oct 2 19:19:57.104476 kubelet[2459]: E1002 19:19:57.104212 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:19:57.104476 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:19:57.104476 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:19:57.104476 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qt5lq,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:19:57.104630 kubelet[2459]: E1002 19:19:57.104260 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:57.397082 kubelet[2459]: I1002 19:19:57.397049 2459 scope.go:115] "RemoveContainer" containerID="cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a" Oct 2 19:19:57.397441 kubelet[2459]: I1002 19:19:57.397423 2459 scope.go:115] "RemoveContainer" containerID="cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a" Oct 2 19:19:57.400285 env[1309]: time="2023-10-02T19:19:57.399567259Z" level=info msg="RemoveContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" Oct 2 19:19:57.405982 env[1309]: time="2023-10-02T19:19:57.401693074Z" level=info msg="RemoveContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\"" Oct 2 19:19:57.405982 env[1309]: time="2023-10-02T19:19:57.401794975Z" level=error msg="RemoveContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\" failed" error="failed to set removing state for container \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\": container is already in removing state" Oct 2 19:19:57.406108 kubelet[2459]: E1002 19:19:57.401915 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\": container is already in removing state" containerID="cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a" Oct 2 19:19:57.406108 kubelet[2459]: E1002 19:19:57.401942 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a": container is already in removing state; Skipping pod "cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)" Oct 2 19:19:57.406108 kubelet[2459]: E1002 19:19:57.402250 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:19:57.410189 env[1309]: time="2023-10-02T19:19:57.410156937Z" level=info msg="RemoveContainer for \"cf9794a2e4f1c51e0143dc52df718bb28a84b03f7b81707d7cdca2cb956cfb1a\" returns successfully" Oct 2 19:19:57.973912 systemd[1]: run-containerd-runc-k8s.io-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca-runc.RG2IyG.mount: Deactivated successfully. Oct 2 19:19:57.974380 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca-rootfs.mount: Deactivated successfully. Oct 2 19:20:00.019732 kubelet[2459]: E1002 19:20:00.019697 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:00.194768 kubelet[2459]: W1002 19:20:00.194729 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice/cri-containerd-049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca.scope WatchSource:0}: task 049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca not found: not found Oct 2 19:20:01.741265 systemd[1]: Started sshd@12-10.200.8.4:22-10.200.12.6:51898.service. Oct 2 19:20:01.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.4:22-10.200.12.6:51898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:01.746877 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:20:01.746983 kernel: audit: type=1130 audit(1696274401.740:1192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.4:22-10.200.12.6:51898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:02.438000 audit[3185]: USER_ACCT pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.458589 sshd[3185]: Accepted publickey for core from 10.200.12.6 port 51898 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:02.460128 kernel: audit: type=1101 audit(1696274402.438:1193): pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.460222 kernel: audit: type=1103 audit(1696274402.457:1194): pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.457000 audit[3185]: CRED_ACQ pid=3185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.459039 sshd[3185]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:02.464622 systemd[1]: Started session-15.scope. Oct 2 19:20:02.465786 systemd-logind[1293]: New session 15 of user core. Oct 2 19:20:02.485315 kernel: audit: type=1006 audit(1696274402.457:1195): pid=3185 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:20:02.485397 kernel: audit: type=1300 audit(1696274402.457:1195): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56f397a0 a2=3 a3=0 items=0 ppid=1 pid=3185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:02.457000 audit[3185]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56f397a0 a2=3 a3=0 items=0 ppid=1 pid=3185 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:02.504537 kernel: audit: type=1327 audit(1696274402.457:1195): proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:02.457000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:02.470000 audit[3185]: USER_START pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.526827 kernel: audit: type=1105 audit(1696274402.470:1196): pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.472000 audit[3187]: CRED_ACQ pid=3187 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:02.542061 kernel: audit: type=1103 audit(1696274402.472:1197): pid=3187 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:03.066721 sshd[3185]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:03.067000 audit[3185]: USER_END pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:03.069906 systemd[1]: sshd@12-10.200.8.4:22-10.200.12.6:51898.service: Deactivated successfully. Oct 2 19:20:03.070699 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:20:03.072400 systemd-logind[1293]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:20:03.073393 systemd-logind[1293]: Removed session 15. Oct 2 19:20:03.067000 audit[3185]: CRED_DISP pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:03.101811 kernel: audit: type=1106 audit(1696274403.067:1198): pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:03.101897 kernel: audit: type=1104 audit(1696274403.067:1199): pid=3185 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:03.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.4:22-10.200.12.6:51898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:05.020701 kubelet[2459]: E1002 19:20:05.020662 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:10.022180 kubelet[2459]: E1002 19:20:10.022136 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:11.946408 kubelet[2459]: E1002 19:20:11.946361 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:20:13.160091 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:20:13.160207 kernel: audit: type=1130 audit(1696274413.152:1201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.4:22-10.200.12.6:36526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:13.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.4:22-10.200.12.6:36526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:13.153599 systemd[1]: Started sshd@13-10.200.8.4:22-10.200.12.6:36526.service. Oct 2 19:20:13.793000 audit[3204]: USER_ACCT pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.812765 sshd[3204]: Accepted publickey for core from 10.200.12.6 port 36526 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:13.813126 kernel: audit: type=1101 audit(1696274413.793:1202): pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.813173 sshd[3204]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:13.811000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.818031 systemd[1]: Started session-16.scope. Oct 2 19:20:13.818642 systemd-logind[1293]: New session 16 of user core. Oct 2 19:20:13.839577 kernel: audit: type=1103 audit(1696274413.811:1203): pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.839655 kernel: audit: type=1006 audit(1696274413.811:1204): pid=3204 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:20:13.839678 kernel: audit: type=1300 audit(1696274413.811:1204): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff688221d0 a2=3 a3=0 items=0 ppid=1 pid=3204 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:13.811000 audit[3204]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff688221d0 a2=3 a3=0 items=0 ppid=1 pid=3204 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:13.811000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:13.862018 kernel: audit: type=1327 audit(1696274413.811:1204): proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:13.863973 kernel: audit: type=1105 audit(1696274413.824:1205): pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.824000 audit[3204]: USER_START pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.825000 audit[3206]: CRED_ACQ pid=3206 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:13.895536 kernel: audit: type=1103 audit(1696274413.825:1206): pid=3206 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:14.288837 sshd[3204]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:14.289000 audit[3204]: USER_END pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:14.292084 systemd[1]: sshd@13-10.200.8.4:22-10.200.12.6:36526.service: Deactivated successfully. Oct 2 19:20:14.292842 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:20:14.294070 systemd-logind[1293]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:20:14.294977 systemd-logind[1293]: Removed session 16. Oct 2 19:20:14.289000 audit[3204]: CRED_DISP pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:14.309980 kernel: audit: type=1106 audit(1696274414.289:1207): pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:14.310031 kernel: audit: type=1104 audit(1696274414.289:1208): pid=3204 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:14.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.4:22-10.200.12.6:36526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:15.023368 kubelet[2459]: E1002 19:20:15.023328 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:19.029000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:19.034687 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:20:19.034771 kernel: audit: type=1400 audit(1696274419.029:1210): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:19.029000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:19.070390 kernel: audit: type=1400 audit(1696274419.029:1211): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:19.070488 kernel: audit: type=1300 audit(1696274419.029:1210): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0021041b0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:19.029000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0021041b0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:19.029000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001fa87a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:19.112233 kernel: audit: type=1300 audit(1696274419.029:1211): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001fa87a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:19.112311 kernel: audit: type=1327 audit(1696274419.029:1211): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:19.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:19.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:19.147092 kernel: audit: type=1327 audit(1696274419.029:1210): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:20.024732 kubelet[2459]: E1002 19:20:20.024695 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001b0f920 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.993727 kernel: audit: type=1400 audit(1696274420.957:1212): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.993794 kernel: audit: type=1300 audit(1696274420.957:1212): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001b0f920 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.993815 kernel: audit: type=1327 audit(1696274420.957:1212): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:21.028448 kernel: audit: type=1400 audit(1696274420.957:1213): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00c6a8e40 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.958000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.958000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00d17d920 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.958000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.999000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.999000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00d17d950 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.999000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.999000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001a971e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:20.999000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:20.999000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00c6a8fc0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:20:20.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:20:24.405062 systemd[1]: Started sshd@14-10.200.8.4:22-10.200.12.6:35318.service. Oct 2 19:20:24.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.4:22-10.200.12.6:35318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:24.410882 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:20:24.410968 kernel: audit: type=1130 audit(1696274424.404:1218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.4:22-10.200.12.6:35318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:24.947743 kubelet[2459]: E1002 19:20:24.947705 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:20:25.026267 kubelet[2459]: E1002 19:20:25.026237 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:25.097000 audit[3217]: USER_ACCT pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.116451 sshd[3217]: Accepted publickey for core from 10.200.12.6 port 35318 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:25.116667 sshd[3217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:25.117010 kernel: audit: type=1101 audit(1696274425.097:1219): pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.117057 kernel: audit: type=1103 audit(1696274425.115:1220): pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.115000 audit[3217]: CRED_ACQ pid=3217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.121876 systemd[1]: Started session-17.scope. Oct 2 19:20:25.123135 systemd-logind[1293]: New session 17 of user core. Oct 2 19:20:25.142076 kernel: audit: type=1006 audit(1696274425.115:1221): pid=3217 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:20:25.115000 audit[3217]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc5f65560 a2=3 a3=0 items=0 ppid=1 pid=3217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:25.158810 kernel: audit: type=1300 audit(1696274425.115:1221): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc5f65560 a2=3 a3=0 items=0 ppid=1 pid=3217 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:25.115000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:25.126000 audit[3217]: USER_START pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.182595 kernel: audit: type=1327 audit(1696274425.115:1221): proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:25.182753 kernel: audit: type=1105 audit(1696274425.126:1222): pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.182783 kernel: audit: type=1103 audit(1696274425.126:1223): pid=3221 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.126000 audit[3221]: CRED_ACQ pid=3221 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.637223 sshd[3217]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:25.637000 audit[3217]: USER_END pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.641058 systemd-logind[1293]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:20:25.642411 systemd[1]: sshd@14-10.200.8.4:22-10.200.12.6:35318.service: Deactivated successfully. Oct 2 19:20:25.643162 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:20:25.644773 systemd-logind[1293]: Removed session 17. Oct 2 19:20:25.637000 audit[3217]: CRED_DISP pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.671539 kernel: audit: type=1106 audit(1696274425.637:1224): pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.671638 kernel: audit: type=1104 audit(1696274425.637:1225): pid=3217 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:25.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.4:22-10.200.12.6:35318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:30.027856 kubelet[2459]: E1002 19:20:30.027812 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:35.029641 kubelet[2459]: E1002 19:20:35.029607 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:35.744511 systemd[1]: Started sshd@15-10.200.8.4:22-10.200.12.6:58222.service. Oct 2 19:20:35.766994 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:20:35.767126 kernel: audit: type=1130 audit(1696274435.744:1227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.4:22-10.200.12.6:58222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:35.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.4:22-10.200.12.6:58222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.379000 audit[3232]: USER_ACCT pid=3232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.399724 sshd[3232]: Accepted publickey for core from 10.200.12.6 port 58222 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:36.400130 kernel: audit: type=1101 audit(1696274436.379:1228): pid=3232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.400042 sshd[3232]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:36.398000 audit[3232]: CRED_ACQ pid=3232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.405247 systemd[1]: Started session-18.scope. Oct 2 19:20:36.406336 systemd-logind[1293]: New session 18 of user core. Oct 2 19:20:36.418066 kernel: audit: type=1103 audit(1696274436.398:1229): pid=3232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.418148 kernel: audit: type=1006 audit(1696274436.398:1230): pid=3232 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 19:20:36.398000 audit[3232]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd07b93950 a2=3 a3=0 items=0 ppid=1 pid=3232 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:36.443855 kernel: audit: type=1300 audit(1696274436.398:1230): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd07b93950 a2=3 a3=0 items=0 ppid=1 pid=3232 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:36.443926 kernel: audit: type=1327 audit(1696274436.398:1230): proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:36.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:36.410000 audit[3232]: USER_START pid=3232 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.472638 kernel: audit: type=1105 audit(1696274436.410:1231): pid=3232 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.412000 audit[3234]: CRED_ACQ pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.472985 kernel: audit: type=1103 audit(1696274436.412:1232): pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.415000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:36.503244 kernel: audit: type=1400 audit(1696274436.415:1233): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:36.503385 kernel: audit: type=1300 audit(1696274436.415:1233): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002171860 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:36.415000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002171860 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:36.415000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:36.426000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:36.426000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0021719a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:36.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:36.426000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:36.426000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa9c40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:36.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:36.426000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:20:36.426000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001fa9c80 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:20:36.426000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:20:36.875892 sshd[3232]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:36.876000 audit[3232]: USER_END pid=3232 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.876000 audit[3232]: CRED_DISP pid=3232 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:36.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.4:22-10.200.12.6:58222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:36.878611 systemd[1]: sshd@15-10.200.8.4:22-10.200.12.6:58222.service: Deactivated successfully. Oct 2 19:20:36.879483 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:20:36.880161 systemd-logind[1293]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:20:36.881151 systemd-logind[1293]: Removed session 18. Oct 2 19:20:37.946258 kubelet[2459]: E1002 19:20:37.946214 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:20:40.031661 kubelet[2459]: E1002 19:20:40.031606 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:45.032680 kubelet[2459]: E1002 19:20:45.032644 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:46.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.4:22-10.200.12.6:37702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:46.981925 systemd[1]: Started sshd@16-10.200.8.4:22-10.200.12.6:37702.service. Oct 2 19:20:46.987605 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:20:46.987713 kernel: audit: type=1130 audit(1696274446.981:1240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.4:22-10.200.12.6:37702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:47.615000 audit[3247]: USER_ACCT pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.617035 sshd[3247]: Accepted publickey for core from 10.200.12.6 port 37702 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:47.634000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.635838 sshd[3247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:47.641014 systemd-logind[1293]: New session 19 of user core. Oct 2 19:20:47.642022 systemd[1]: Started session-19.scope. Oct 2 19:20:47.652205 kernel: audit: type=1101 audit(1696274447.615:1241): pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.652286 kernel: audit: type=1103 audit(1696274447.634:1242): pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.652317 kernel: audit: type=1006 audit(1696274447.634:1243): pid=3247 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:20:47.634000 audit[3247]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde46b9d80 a2=3 a3=0 items=0 ppid=1 pid=3247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:47.662977 kernel: audit: type=1300 audit(1696274447.634:1243): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde46b9d80 a2=3 a3=0 items=0 ppid=1 pid=3247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:47.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:47.684667 kernel: audit: type=1327 audit(1696274447.634:1243): proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:47.684730 kernel: audit: type=1105 audit(1696274447.646:1244): pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.646000 audit[3247]: USER_START pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.648000 audit[3249]: CRED_ACQ pid=3249 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:47.716879 kernel: audit: type=1103 audit(1696274447.648:1245): pid=3249 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.112559 sshd[3247]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:48.113000 audit[3247]: USER_END pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.116068 systemd[1]: sshd@16-10.200.8.4:22-10.200.12.6:37702.service: Deactivated successfully. Oct 2 19:20:48.116824 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:20:48.118030 systemd-logind[1293]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:20:48.118903 systemd-logind[1293]: Removed session 19. Oct 2 19:20:48.133986 kernel: audit: type=1106 audit(1696274448.113:1246): pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.134069 kernel: audit: type=1104 audit(1696274448.113:1247): pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.113000 audit[3247]: CRED_DISP pid=3247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.4:22-10.200.12.6:37702 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.4:22-10.200.12.6:38328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:48.220162 systemd[1]: Started sshd@17-10.200.8.4:22-10.200.12.6:38328.service. Oct 2 19:20:48.847000 audit[3260]: USER_ACCT pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.848290 sshd[3260]: Accepted publickey for core from 10.200.12.6 port 38328 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:48.848000 audit[3260]: CRED_ACQ pid=3260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.848000 audit[3260]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff64012ef0 a2=3 a3=0 items=0 ppid=1 pid=3260 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:48.848000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:48.849897 sshd[3260]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:48.855652 systemd[1]: Started session-20.scope. Oct 2 19:20:48.856413 systemd-logind[1293]: New session 20 of user core. Oct 2 19:20:48.859000 audit[3260]: USER_START pid=3260 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:48.861000 audit[3262]: CRED_ACQ pid=3262 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.033720 kubelet[2459]: E1002 19:20:50.033686 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:20:50.089459 sshd[3260]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:50.090000 audit[3260]: USER_END pid=3260 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.090000 audit[3260]: CRED_DISP pid=3260 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.092922 systemd[1]: sshd@17-10.200.8.4:22-10.200.12.6:38328.service: Deactivated successfully. Oct 2 19:20:50.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.4:22-10.200.12.6:38328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:50.094536 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:20:50.094593 systemd-logind[1293]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:20:50.096294 systemd-logind[1293]: Removed session 20. Oct 2 19:20:50.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.4:22-10.200.12.6:38342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:50.192857 systemd[1]: Started sshd@18-10.200.8.4:22-10.200.12.6:38342.service. Oct 2 19:20:50.809000 audit[3269]: USER_ACCT pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.810718 sshd[3269]: Accepted publickey for core from 10.200.12.6 port 38342 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:20:50.810000 audit[3269]: CRED_ACQ pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.810000 audit[3269]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc53215130 a2=3 a3=0 items=0 ppid=1 pid=3269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:20:50.810000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:20:50.812117 sshd[3269]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:20:50.816880 systemd-logind[1293]: New session 21 of user core. Oct 2 19:20:50.817500 systemd[1]: Started session-21.scope. Oct 2 19:20:50.820000 audit[3269]: USER_START pid=3269 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:50.822000 audit[3271]: CRED_ACQ pid=3271 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:51.303841 sshd[3269]: pam_unix(sshd:session): session closed for user core Oct 2 19:20:51.304000 audit[3269]: USER_END pid=3269 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:51.304000 audit[3269]: CRED_DISP pid=3269 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:20:51.307412 systemd[1]: sshd@18-10.200.8.4:22-10.200.12.6:38342.service: Deactivated successfully. Oct 2 19:20:51.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.4:22-10.200.12.6:38342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:20:51.308530 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:20:51.309270 systemd-logind[1293]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:20:51.310116 systemd-logind[1293]: Removed session 21. Oct 2 19:20:52.947612 kubelet[2459]: E1002 19:20:52.947560 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:20:55.034550 kubelet[2459]: E1002 19:20:55.034510 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:00.035835 kubelet[2459]: E1002 19:21:00.035787 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:01.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.4:22-10.200.12.6:35028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:01.424798 systemd[1]: Started sshd@19-10.200.8.4:22-10.200.12.6:35028.service. Oct 2 19:21:01.447895 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:21:01.448048 kernel: audit: type=1130 audit(1696274461.424:1267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.4:22-10.200.12.6:35028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:02.425000 audit[3281]: USER_ACCT pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.428233 sshd[3281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:02.445192 kernel: audit: type=1101 audit(1696274462.425:1268): pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.445237 sshd[3281]: Accepted publickey for core from 10.200.12.6 port 35028 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:02.426000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.449822 systemd[1]: Started session-22.scope. Oct 2 19:21:02.451045 systemd-logind[1293]: New session 22 of user core. Oct 2 19:21:02.470916 kernel: audit: type=1103 audit(1696274462.426:1269): pid=3281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.471018 kernel: audit: type=1006 audit(1696274462.426:1270): pid=3281 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:21:02.471052 kernel: audit: type=1300 audit(1696274462.426:1270): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d067560 a2=3 a3=0 items=0 ppid=1 pid=3281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:02.426000 audit[3281]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d067560 a2=3 a3=0 items=0 ppid=1 pid=3281 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:02.488462 kernel: audit: type=1327 audit(1696274462.426:1270): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:02.426000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:02.456000 audit[3281]: USER_START pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.513891 kernel: audit: type=1105 audit(1696274462.456:1271): pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.513973 kernel: audit: type=1103 audit(1696274462.458:1272): pid=3283 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:02.458000 audit[3283]: CRED_ACQ pid=3283 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:03.118092 sshd[3281]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:03.118000 audit[3281]: USER_END pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:03.121723 systemd[1]: sshd@19-10.200.8.4:22-10.200.12.6:35028.service: Deactivated successfully. Oct 2 19:21:03.122631 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:21:03.124176 systemd-logind[1293]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:21:03.125079 systemd-logind[1293]: Removed session 22. Oct 2 19:21:03.119000 audit[3281]: CRED_DISP pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:03.155310 kernel: audit: type=1106 audit(1696274463.118:1273): pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:03.155388 kernel: audit: type=1104 audit(1696274463.119:1274): pid=3281 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:03.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.4:22-10.200.12.6:35028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:05.037349 kubelet[2459]: E1002 19:21:05.037311 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:07.946979 kubelet[2459]: E1002 19:21:07.946929 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:21:10.038888 kubelet[2459]: E1002 19:21:10.038856 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:13.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.4:22-10.200.12.6:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:13.273742 systemd[1]: Started sshd@20-10.200.8.4:22-10.200.12.6:34512.service. Oct 2 19:21:13.279198 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:21:13.279286 kernel: audit: type=1130 audit(1696274473.273:1276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.4:22-10.200.12.6:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:13.921412 kernel: audit: type=1101 audit(1696274473.899:1277): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.899000 audit[3295]: USER_ACCT pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.921374 sshd[3295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:13.919000 audit[3295]: CRED_ACQ pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.921979 sshd[3295]: Accepted publickey for core from 10.200.12.6 port 34512 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:13.926867 systemd[1]: Started session-23.scope. Oct 2 19:21:13.928378 systemd-logind[1293]: New session 23 of user core. Oct 2 19:21:13.938968 kernel: audit: type=1103 audit(1696274473.919:1278): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.939039 kernel: audit: type=1006 audit(1696274473.919:1279): pid=3295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:21:13.919000 audit[3295]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde45a8710 a2=3 a3=0 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:13.964569 kernel: audit: type=1300 audit(1696274473.919:1279): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde45a8710 a2=3 a3=0 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:13.964640 kernel: audit: type=1327 audit(1696274473.919:1279): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:13.919000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:13.931000 audit[3295]: USER_START pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.970970 kernel: audit: type=1105 audit(1696274473.931:1280): pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.988266 kernel: audit: type=1103 audit(1696274473.931:1281): pid=3297 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:13.931000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:14.399538 sshd[3295]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:14.400000 audit[3295]: USER_END pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:14.403350 systemd[1]: sshd@20-10.200.8.4:22-10.200.12.6:34512.service: Deactivated successfully. Oct 2 19:21:14.404260 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:21:14.405772 systemd-logind[1293]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:21:14.406665 systemd-logind[1293]: Removed session 23. Oct 2 19:21:14.420026 kernel: audit: type=1106 audit(1696274474.400:1282): pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:14.420095 kernel: audit: type=1104 audit(1696274474.400:1283): pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:14.400000 audit[3295]: CRED_DISP pid=3295 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:14.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.4:22-10.200.12.6:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:15.039725 kubelet[2459]: E1002 19:21:15.039687 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:18.947152 kubelet[2459]: E1002 19:21:18.946800 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:21:19.030000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:19.035583 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:21:19.035678 kernel: audit: type=1400 audit(1696274479.030:1285): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:19.030000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001156440 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:19.082986 kernel: audit: type=1300 audit(1696274479.030:1285): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001156440 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:19.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:19.083976 kernel: audit: type=1327 audit(1696274479.030:1285): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:19.099985 kernel: audit: type=1400 audit(1696274479.030:1286): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:19.030000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:19.030000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ddc570 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:19.138231 kernel: audit: type=1300 audit(1696274479.030:1286): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ddc570 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:19.138346 kernel: audit: type=1327 audit(1696274479.030:1286): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:19.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:20.041071 kubelet[2459]: E1002 19:21:20.041037 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00189b440 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:21.002383 kernel: audit: type=1400 audit(1696274480.957:1287): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:21.003561 kernel: audit: type=1300 audit(1696274480.957:1287): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00189b440 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:21.004310 kernel: audit: type=1327 audit(1696274480.957:1287): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:21.023980 kernel: audit: type=1400 audit(1696274480.957:1288): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00afd1530 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:20.960000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:20.960000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00ac05470 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:20.960000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:20.999000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:20.999000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0017582a0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:20.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:20.999000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:20.999000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00ac05590 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:20.999000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:21.000000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:21.000000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00ac05680 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:21:21.000000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:21:24.504346 systemd[1]: Started sshd@21-10.200.8.4:22-10.200.12.6:49796.service. Oct 2 19:21:24.527032 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:21:24.527121 kernel: audit: type=1130 audit(1696274484.504:1293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.4:22-10.200.12.6:49796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:24.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.4:22-10.200.12.6:49796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:25.042456 kubelet[2459]: E1002 19:21:25.042424 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:25.140000 audit[3307]: USER_ACCT pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.160093 kernel: audit: type=1101 audit(1696274485.140:1294): pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.160148 sshd[3307]: Accepted publickey for core from 10.200.12.6 port 49796 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:25.160428 sshd[3307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:25.159000 audit[3307]: CRED_ACQ pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.165298 systemd[1]: Started session-24.scope. Oct 2 19:21:25.166267 systemd-logind[1293]: New session 24 of user core. Oct 2 19:21:25.180977 kernel: audit: type=1103 audit(1696274485.159:1295): pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.181057 kernel: audit: type=1006 audit(1696274485.159:1296): pid=3307 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:21:25.159000 audit[3307]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf81ac40 a2=3 a3=0 items=0 ppid=1 pid=3307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:25.187970 kernel: audit: type=1300 audit(1696274485.159:1296): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbf81ac40 a2=3 a3=0 items=0 ppid=1 pid=3307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:25.159000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:25.204979 kernel: audit: type=1327 audit(1696274485.159:1296): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:25.170000 audit[3307]: USER_START pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.209978 kernel: audit: type=1105 audit(1696274485.170:1297): pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.229479 kernel: audit: type=1103 audit(1696274485.175:1298): pid=3311 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.175000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.638529 sshd[3307]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:25.639000 audit[3307]: USER_END pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.642440 systemd[1]: sshd@21-10.200.8.4:22-10.200.12.6:49796.service: Deactivated successfully. Oct 2 19:21:25.643406 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:21:25.645338 systemd-logind[1293]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:21:25.646585 systemd-logind[1293]: Removed session 24. Oct 2 19:21:25.639000 audit[3307]: CRED_DISP pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.676839 kernel: audit: type=1106 audit(1696274485.639:1299): pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.676934 kernel: audit: type=1104 audit(1696274485.639:1300): pid=3307 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:25.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.4:22-10.200.12.6:49796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:29.946929 kubelet[2459]: E1002 19:21:29.946885 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:21:30.044044 kubelet[2459]: E1002 19:21:30.044013 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:35.045853 kubelet[2459]: E1002 19:21:35.045814 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:35.749387 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:21:35.749519 kernel: audit: type=1130 audit(1696274495.743:1302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.4:22-10.200.12.6:50776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:35.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.4:22-10.200.12.6:50776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:35.743947 systemd[1]: Started sshd@22-10.200.8.4:22-10.200.12.6:50776.service. Oct 2 19:21:36.362000 audit[3321]: USER_ACCT pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.363979 sshd[3321]: Accepted publickey for core from 10.200.12.6 port 50776 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:36.382980 kernel: audit: type=1101 audit(1696274496.362:1303): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.382000 audit[3321]: CRED_ACQ pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.383565 sshd[3321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:36.388612 systemd[1]: Started session-25.scope. Oct 2 19:21:36.389744 systemd-logind[1293]: New session 25 of user core. Oct 2 19:21:36.403275 kernel: audit: type=1103 audit(1696274496.382:1304): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.403355 kernel: audit: type=1006 audit(1696274496.382:1305): pid=3321 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:21:36.382000 audit[3321]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed7ac3930 a2=3 a3=0 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:36.425938 kernel: audit: type=1300 audit(1696274496.382:1305): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed7ac3930 a2=3 a3=0 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:36.426018 kernel: audit: type=1327 audit(1696274496.382:1305): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:36.382000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:36.394000 audit[3321]: USER_START pid=3321 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.449339 kernel: audit: type=1105 audit(1696274496.394:1306): pid=3321 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.449401 kernel: audit: type=1103 audit(1696274496.396:1307): pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.396000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.413000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:36.481680 kernel: audit: type=1400 audit(1696274496.413:1308): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:36.481752 kernel: audit: type=1300 audit(1696274496.413:1308): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000cc1c20 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:36.413000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000cc1c20 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:36.413000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:36.425000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:36.425000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011574a0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:36.425000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:36.425000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:36.425000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001157500 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:36.425000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:36.425000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:21:36.425000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000cc1f40 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:21:36.425000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:21:36.856676 sshd[3321]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:36.857000 audit[3321]: USER_END pid=3321 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.857000 audit[3321]: CRED_DISP pid=3321 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:36.860227 systemd[1]: sshd@22-10.200.8.4:22-10.200.12.6:50776.service: Deactivated successfully. Oct 2 19:21:36.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.4:22-10.200.12.6:50776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:36.861423 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:21:36.862347 systemd-logind[1293]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:21:36.863324 systemd-logind[1293]: Removed session 25. Oct 2 19:21:40.047242 kubelet[2459]: E1002 19:21:40.047212 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:42.946716 kubelet[2459]: E1002 19:21:42.946667 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:21:45.048230 kubelet[2459]: E1002 19:21:45.048196 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:46.983365 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:21:46.983503 kernel: audit: type=1130 audit(1696274506.961:1315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.4:22-10.200.12.6:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:46.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.4:22-10.200.12.6:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:46.961885 systemd[1]: Started sshd@23-10.200.8.4:22-10.200.12.6:52556.service. Oct 2 19:21:47.586000 audit[3335]: USER_ACCT pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.589563 sshd[3335]: Accepted publickey for core from 10.200.12.6 port 52556 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:47.610873 kernel: audit: type=1101 audit(1696274507.586:1316): pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.610589 sshd[3335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:47.608000 audit[3335]: CRED_ACQ pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.630683 systemd[1]: Started session-26.scope. Oct 2 19:21:47.631259 kernel: audit: type=1103 audit(1696274507.608:1317): pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.630869 systemd-logind[1293]: New session 26 of user core. Oct 2 19:21:47.609000 audit[3335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd940136f0 a2=3 a3=0 items=0 ppid=1 pid=3335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.642975 kernel: audit: type=1006 audit(1696274507.609:1318): pid=3335 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:21:47.643025 kernel: audit: type=1300 audit(1696274507.609:1318): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd940136f0 a2=3 a3=0 items=0 ppid=1 pid=3335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:47.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:47.667552 kernel: audit: type=1327 audit(1696274507.609:1318): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:47.631000 audit[3335]: USER_START pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.667972 kernel: audit: type=1105 audit(1696274507.631:1319): pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.637000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:47.685976 kernel: audit: type=1103 audit(1696274507.637:1320): pid=3337 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:48.097940 sshd[3335]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:48.098000 audit[3335]: USER_END pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:48.101235 systemd[1]: sshd@23-10.200.8.4:22-10.200.12.6:52556.service: Deactivated successfully. Oct 2 19:21:48.102155 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:21:48.103896 systemd-logind[1293]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:21:48.104837 systemd-logind[1293]: Removed session 26. Oct 2 19:21:48.119049 kernel: audit: type=1106 audit(1696274508.098:1321): pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:48.119116 kernel: audit: type=1104 audit(1696274508.098:1322): pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:48.098000 audit[3335]: CRED_DISP pid=3335 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:48.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.4:22-10.200.12.6:52556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:50.050229 kubelet[2459]: E1002 19:21:50.050170 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:54.947330 kubelet[2459]: E1002 19:21:54.947281 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:21:55.052119 kubelet[2459]: E1002 19:21:55.052081 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:21:58.207435 systemd[1]: Started sshd@24-10.200.8.4:22-10.200.12.6:38646.service. Oct 2 19:21:58.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.4:22-10.200.12.6:38646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:58.216858 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:21:58.216999 kernel: audit: type=1130 audit(1696274518.210:1324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.4:22-10.200.12.6:38646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:21:58.842000 audit[3347]: USER_ACCT pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.844258 sshd[3347]: Accepted publickey for core from 10.200.12.6 port 38646 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:21:58.864579 kernel: audit: type=1101 audit(1696274518.842:1325): pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.863000 audit[3347]: CRED_ACQ pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.864810 sshd[3347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:21:58.870144 systemd[1]: Started session-27.scope. Oct 2 19:21:58.871355 systemd-logind[1293]: New session 27 of user core. Oct 2 19:21:58.880973 kernel: audit: type=1103 audit(1696274518.863:1326): pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.881039 kernel: audit: type=1006 audit(1696274518.863:1327): pid=3347 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:21:58.863000 audit[3347]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff08036320 a2=3 a3=0 items=0 ppid=1 pid=3347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:58.891002 kernel: audit: type=1300 audit(1696274518.863:1327): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff08036320 a2=3 a3=0 items=0 ppid=1 pid=3347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:21:58.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:58.913174 kernel: audit: type=1327 audit(1696274518.863:1327): proctitle=737368643A20636F7265205B707269765D Oct 2 19:21:58.913239 kernel: audit: type=1105 audit(1696274518.875:1328): pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.875000 audit[3347]: USER_START pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.877000 audit[3349]: CRED_ACQ pid=3349 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:58.931974 kernel: audit: type=1103 audit(1696274518.877:1329): pid=3349 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:59.336331 sshd[3347]: pam_unix(sshd:session): session closed for user core Oct 2 19:21:59.336000 audit[3347]: USER_END pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:59.339852 systemd[1]: sshd@24-10.200.8.4:22-10.200.12.6:38646.service: Deactivated successfully. Oct 2 19:21:59.340653 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:21:59.342344 systemd-logind[1293]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:21:59.343276 systemd-logind[1293]: Removed session 27. Oct 2 19:21:59.336000 audit[3347]: CRED_DISP pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:59.372967 kernel: audit: type=1106 audit(1696274519.336:1330): pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:59.373056 kernel: audit: type=1104 audit(1696274519.336:1331): pid=3347 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:21:59.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.4:22-10.200.12.6:38646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:00.052845 kubelet[2459]: E1002 19:22:00.052802 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:05.054403 kubelet[2459]: E1002 19:22:05.054357 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:09.449980 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:22:09.450117 kernel: audit: type=1130 audit(1696274529.443:1333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.4:22-10.200.12.6:41286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:09.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.4:22-10.200.12.6:41286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:09.444347 systemd[1]: Started sshd@25-10.200.8.4:22-10.200.12.6:41286.service. Oct 2 19:22:09.946527 kubelet[2459]: E1002 19:22:09.946478 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:22:10.055115 kubelet[2459]: E1002 19:22:10.055068 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:10.095087 kernel: audit: type=1101 audit(1696274530.073:1334): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.073000 audit[3361]: USER_ACCT pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.076409 sshd[3361]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:22:10.095740 sshd[3361]: Accepted publickey for core from 10.200.12.6 port 41286 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:22:10.075000 audit[3361]: CRED_ACQ pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.102206 systemd[1]: Started session-28.scope. Oct 2 19:22:10.104086 systemd-logind[1293]: New session 28 of user core. Oct 2 19:22:10.122973 kernel: audit: type=1103 audit(1696274530.075:1335): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.123077 kernel: audit: type=1006 audit(1696274530.075:1336): pid=3361 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:22:10.123108 kernel: audit: type=1300 audit(1696274530.075:1336): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebcdbed80 a2=3 a3=0 items=0 ppid=1 pid=3361 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.075000 audit[3361]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebcdbed80 a2=3 a3=0 items=0 ppid=1 pid=3361 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:10.075000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:10.145977 kernel: audit: type=1327 audit(1696274530.075:1336): proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:10.146051 kernel: audit: type=1105 audit(1696274530.108:1337): pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.108000 audit[3361]: USER_START pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.164367 kernel: audit: type=1103 audit(1696274530.110:1338): pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.110000 audit[3363]: CRED_ACQ pid=3363 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.575508 sshd[3361]: pam_unix(sshd:session): session closed for user core Oct 2 19:22:10.575000 audit[3361]: USER_END pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.579049 systemd-logind[1293]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:22:10.580257 systemd[1]: sshd@25-10.200.8.4:22-10.200.12.6:41286.service: Deactivated successfully. Oct 2 19:22:10.581083 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:22:10.582908 systemd-logind[1293]: Removed session 28. Oct 2 19:22:10.596041 kernel: audit: type=1106 audit(1696274530.575:1339): pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.596133 kernel: audit: type=1104 audit(1696274530.576:1340): pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.576000 audit[3361]: CRED_DISP pid=3361 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:10.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.4:22-10.200.12.6:41286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:15.056732 kubelet[2459]: E1002 19:22:15.056680 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:19.030000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:19.036509 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:22:19.036615 kernel: audit: type=1400 audit(1696274539.030:1342): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:19.052552 kernel: audit: type=1400 audit(1696274539.030:1343): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:19.030000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:19.030000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001970090 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:19.069973 kernel: audit: type=1300 audit(1696274539.030:1343): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001970090 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:19.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:19.106106 kernel: audit: type=1327 audit(1696274539.030:1343): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:19.106200 kernel: audit: type=1300 audit(1696274539.030:1342): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002064080 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:19.030000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002064080 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:19.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:19.141804 kernel: audit: type=1327 audit(1696274539.030:1342): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:20.057423 kubelet[2459]: E1002 19:22:20.057382 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:20.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.4:22-10.200.12.6:39850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:20.681213 systemd[1]: Started sshd@26-10.200.8.4:22-10.200.12.6:39850.service. Oct 2 19:22:20.698007 kernel: audit: type=1130 audit(1696274540.680:1344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.4:22-10.200.12.6:39850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:20.947056 kubelet[2459]: E1002 19:22:20.946702 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-sgxsf_kube-system(873ae7ea-2b5d-4be7-98cf-98bc7eda05d3)\"" pod="kube-system/cilium-sgxsf" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 Oct 2 19:22:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c003d4fec0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:20.994119 kernel: audit: type=1400 audit(1696274540.957:1345): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:20.994226 kernel: audit: type=1300 audit(1696274540.957:1345): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c003d4fec0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:20.994260 kernel: audit: type=1327 audit(1696274540.957:1345): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:20.957000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:20.957000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00c5cb3e0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:20.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:20.974000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:20.974000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c5cb470 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:20.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:21.001000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:21.001000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c003d4ff00 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:21.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:21.001000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:21.001000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00dbb4510 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:21.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:21.001000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:21.001000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c5cb620 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:22:21.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:22:21.305000 audit[3374]: USER_ACCT pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.306365 sshd[3374]: Accepted publickey for core from 10.200.12.6 port 39850 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:22:21.306000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.306000 audit[3374]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb498da50 a2=3 a3=0 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:21.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:21.308020 sshd[3374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:22:21.313019 systemd[1]: Started session-29.scope. Oct 2 19:22:21.313459 systemd-logind[1293]: New session 29 of user core. Oct 2 19:22:21.316000 audit[3374]: USER_START pid=3374 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.318000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.947209 sshd[3374]: pam_unix(sshd:session): session closed for user core Oct 2 19:22:21.947000 audit[3374]: USER_END pid=3374 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.947000 audit[3374]: CRED_DISP pid=3374 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:21.950236 systemd[1]: sshd@26-10.200.8.4:22-10.200.12.6:39850.service: Deactivated successfully. Oct 2 19:22:21.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.4:22-10.200.12.6:39850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:21.951217 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:22:21.951934 systemd-logind[1293]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:22:21.952749 systemd-logind[1293]: Removed session 29. Oct 2 19:22:25.058734 kubelet[2459]: E1002 19:22:25.058693 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:30.060202 kubelet[2459]: E1002 19:22:30.060170 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:32.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.4:22-10.200.12.6:39758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:32.129604 systemd[1]: Started sshd@27-10.200.8.4:22-10.200.12.6:39758.service. Oct 2 19:22:32.134655 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:22:32.134733 kernel: audit: type=1130 audit(1696274552.128:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.4:22-10.200.12.6:39758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:32.757000 audit[3387]: USER_ACCT pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.779115 kernel: audit: type=1101 audit(1696274552.757:1360): pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.779179 sshd[3387]: Accepted publickey for core from 10.200.12.6 port 39758 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:22:32.779073 sshd[3387]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:22:32.777000 audit[3387]: CRED_ACQ pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.784327 systemd[1]: Started session-30.scope. Oct 2 19:22:32.785530 systemd-logind[1293]: New session 30 of user core. Oct 2 19:22:32.806119 kernel: audit: type=1103 audit(1696274552.777:1361): pid=3387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.806193 kernel: audit: type=1006 audit(1696274552.777:1362): pid=3387 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:22:32.806237 kernel: audit: type=1300 audit(1696274552.777:1362): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7740a620 a2=3 a3=0 items=0 ppid=1 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:32.777000 audit[3387]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7740a620 a2=3 a3=0 items=0 ppid=1 pid=3387 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:32.777000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:32.830905 kernel: audit: type=1327 audit(1696274552.777:1362): proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:32.831127 kernel: audit: type=1105 audit(1696274552.790:1363): pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.790000 audit[3387]: USER_START pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.849488 kernel: audit: type=1103 audit(1696274552.792:1364): pid=3389 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:32.792000 audit[3389]: CRED_ACQ pid=3389 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:33.439737 sshd[3387]: pam_unix(sshd:session): session closed for user core Oct 2 19:22:33.440000 audit[3387]: USER_END pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:33.442734 systemd[1]: sshd@27-10.200.8.4:22-10.200.12.6:39758.service: Deactivated successfully. Oct 2 19:22:33.443521 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:22:33.445186 systemd-logind[1293]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:22:33.446165 systemd-logind[1293]: Removed session 30. Oct 2 19:22:33.440000 audit[3387]: CRED_DISP pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:33.477492 kernel: audit: type=1106 audit(1696274553.440:1365): pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:33.477578 kernel: audit: type=1104 audit(1696274553.440:1366): pid=3387 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:33.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.4:22-10.200.12.6:39758 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:33.543270 systemd[1]: Started sshd@28-10.200.8.4:22-10.200.12.6:39770.service. Oct 2 19:22:33.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.4:22-10.200.12.6:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:34.161000 audit[3399]: USER_ACCT pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:34.162316 sshd[3399]: Accepted publickey for core from 10.200.12.6 port 39770 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:22:34.162000 audit[3399]: CRED_ACQ pid=3399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:34.162000 audit[3399]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff24ab1430 a2=3 a3=0 items=0 ppid=1 pid=3399 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:34.162000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:34.163698 sshd[3399]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:22:34.168298 systemd-logind[1293]: New session 31 of user core. Oct 2 19:22:34.169198 systemd[1]: Started session-31.scope. Oct 2 19:22:34.172000 audit[3399]: USER_START pid=3399 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:34.174000 audit[3401]: CRED_ACQ pid=3401 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:35.060927 kubelet[2459]: E1002 19:22:35.060896 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:35.122707 env[1309]: time="2023-10-02T19:22:35.119664658Z" level=info msg="StopPodSandbox for \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\"" Oct 2 19:22:35.122707 env[1309]: time="2023-10-02T19:22:35.119761158Z" level=info msg="Container to stop \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:22:35.122058 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361-shm.mount: Deactivated successfully. Oct 2 19:22:35.134000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:22:35.134714 systemd[1]: cri-containerd-0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361.scope: Deactivated successfully. Oct 2 19:22:35.138000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:22:35.159371 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361-rootfs.mount: Deactivated successfully. Oct 2 19:22:35.235407 env[1309]: time="2023-10-02T19:22:35.235345461Z" level=info msg="shim disconnected" id=0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361 Oct 2 19:22:35.235407 env[1309]: time="2023-10-02T19:22:35.235402661Z" level=warning msg="cleaning up after shim disconnected" id=0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361 namespace=k8s.io Oct 2 19:22:35.235407 env[1309]: time="2023-10-02T19:22:35.235413461Z" level=info msg="cleaning up dead shim" Oct 2 19:22:35.245655 env[1309]: time="2023-10-02T19:22:35.245543914Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3426 runtime=io.containerd.runc.v2\n" Oct 2 19:22:35.245974 env[1309]: time="2023-10-02T19:22:35.245905216Z" level=info msg="TearDown network for sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" successfully" Oct 2 19:22:35.245974 env[1309]: time="2023-10-02T19:22:35.245938816Z" level=info msg="StopPodSandbox for \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" returns successfully" Oct 2 19:22:35.445492 kubelet[2459]: I1002 19:22:35.445442 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-cgroup\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445544 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445577 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-lib-modules\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445610 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-clustermesh-secrets\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445636 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cni-path\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445669 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-config-path\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.445753 kubelet[2459]: I1002 19:22:35.445710 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qt5lq\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445740 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-net\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445768 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-bpf-maps\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445800 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-etc-cni-netd\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445835 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-run\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445868 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hostproc\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.447990 kubelet[2459]: I1002 19:22:35.445903 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-kernel\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.448336 kubelet[2459]: I1002 19:22:35.445937 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-xtables-lock\") pod \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\" (UID: \"873ae7ea-2b5d-4be7-98cf-98bc7eda05d3\") " Oct 2 19:22:35.448336 kubelet[2459]: I1002 19:22:35.446047 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448336 kubelet[2459]: I1002 19:22:35.446111 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448336 kubelet[2459]: I1002 19:22:35.446141 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448336 kubelet[2459]: I1002 19:22:35.446165 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448622 kubelet[2459]: I1002 19:22:35.446190 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448622 kubelet[2459]: I1002 19:22:35.446212 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hostproc" (OuterVolumeSpecName: "hostproc") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448622 kubelet[2459]: I1002 19:22:35.446237 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448622 kubelet[2459]: I1002 19:22:35.446292 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448622 kubelet[2459]: I1002 19:22:35.446316 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448909 kubelet[2459]: I1002 19:22:35.447272 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cni-path" (OuterVolumeSpecName: "cni-path") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:35.448909 kubelet[2459]: W1002 19:22:35.447472 2459 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:22:35.451032 kubelet[2459]: I1002 19:22:35.450708 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:22:35.458723 systemd[1]: var-lib-kubelet-pods-873ae7ea\x2d2b5d\x2d4be7\x2d98cf\x2d98bc7eda05d3-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:22:35.461764 kubelet[2459]: I1002 19:22:35.460281 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:22:35.461764 kubelet[2459]: I1002 19:22:35.460374 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq" (OuterVolumeSpecName: "kube-api-access-qt5lq") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "kube-api-access-qt5lq". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:22:35.458856 systemd[1]: var-lib-kubelet-pods-873ae7ea\x2d2b5d\x2d4be7\x2d98cf\x2d98bc7eda05d3-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqt5lq.mount: Deactivated successfully. Oct 2 19:22:35.461205 systemd[1]: var-lib-kubelet-pods-873ae7ea\x2d2b5d\x2d4be7\x2d98cf\x2d98bc7eda05d3-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:22:35.462417 kubelet[2459]: I1002 19:22:35.462380 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" (UID: "873ae7ea-2b5d-4be7-98cf-98bc7eda05d3"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:22:35.546646 kubelet[2459]: I1002 19:22:35.546608 2459 reconciler.go:399] "Volume detached for volume \"kube-api-access-qt5lq\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-kube-api-access-qt5lq\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546646 kubelet[2459]: I1002 19:22:35.546642 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-net\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546646 kubelet[2459]: I1002 19:22:35.546659 2459 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-bpf-maps\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546672 2459 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-etc-cni-netd\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546684 2459 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-run\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546695 2459 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hostproc\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546707 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546718 2459 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-xtables-lock\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546729 2459 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-hubble-tls\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546742 2459 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-lib-modules\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.546915 kubelet[2459]: I1002 19:22:35.546754 2459 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-clustermesh-secrets\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.547327 kubelet[2459]: I1002 19:22:35.546766 2459 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-cgroup\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.547327 kubelet[2459]: I1002 19:22:35.546778 2459 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cni-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.547327 kubelet[2459]: I1002 19:22:35.546790 2459 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3-cilium-config-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:35.704172 kubelet[2459]: I1002 19:22:35.704053 2459 scope.go:115] "RemoveContainer" containerID="049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca" Oct 2 19:22:35.707939 env[1309]: time="2023-10-02T19:22:35.707501524Z" level=info msg="RemoveContainer for \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\"" Oct 2 19:22:35.711112 systemd[1]: Removed slice kubepods-burstable-pod873ae7ea_2b5d_4be7_98cf_98bc7eda05d3.slice. Oct 2 19:22:35.720586 env[1309]: time="2023-10-02T19:22:35.720549392Z" level=info msg="RemoveContainer for \"049df1bd2522696c51fbbf02f7750d945d1841250fa8018cba6cc291d30375ca\" returns successfully" Oct 2 19:22:35.735199 kubelet[2459]: I1002 19:22:35.735166 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:22:35.735349 kubelet[2459]: E1002 19:22:35.735233 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: E1002 19:22:35.735246 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: E1002 19:22:35.735254 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: E1002 19:22:35.735262 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: I1002 19:22:35.735289 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: I1002 19:22:35.735299 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: I1002 19:22:35.735307 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: I1002 19:22:35.735315 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: I1002 19:22:35.735325 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735349 kubelet[2459]: E1002 19:22:35.735349 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735733 kubelet[2459]: E1002 19:22:35.735358 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.735733 kubelet[2459]: I1002 19:22:35.735381 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="873ae7ea-2b5d-4be7-98cf-98bc7eda05d3" containerName="mount-cgroup" Oct 2 19:22:35.741381 systemd[1]: Created slice kubepods-burstable-podbdabd4a1_16b6_448e_b470_77cf8a8daf2c.slice. Oct 2 19:22:35.849986 kubelet[2459]: I1002 19:22:35.849866 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sdvxm\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-kube-api-access-sdvxm\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.849986 kubelet[2459]: I1002 19:22:35.849996 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-config-path\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850036 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-xtables-lock\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850069 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-clustermesh-secrets\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850100 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cni-path\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850131 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hubble-tls\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850162 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-cgroup\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850255 kubelet[2459]: I1002 19:22:35.850195 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-etc-cni-netd\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850231 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-lib-modules\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850264 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hostproc\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850301 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-net\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850340 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-kernel\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850376 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-run\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:35.850588 kubelet[2459]: I1002 19:22:35.850421 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-bpf-maps\") pod \"cilium-crjls\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " pod="kube-system/cilium-crjls" Oct 2 19:22:36.047495 env[1309]: time="2023-10-02T19:22:36.046974995Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-crjls,Uid:bdabd4a1-16b6-448e-b470-77cf8a8daf2c,Namespace:kube-system,Attempt:0,}" Oct 2 19:22:36.082626 env[1309]: time="2023-10-02T19:22:36.082557780Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:36.083005 env[1309]: time="2023-10-02T19:22:36.082593981Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:36.083005 env[1309]: time="2023-10-02T19:22:36.082606981Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:36.083005 env[1309]: time="2023-10-02T19:22:36.082743081Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca pid=3453 runtime=io.containerd.runc.v2 Oct 2 19:22:36.095994 systemd[1]: Started cri-containerd-a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca.scope. Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.107000 audit: BPF prog-id=132 op=LOAD Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3453 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:36.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135646664313764646539623730316234343736373234373966363438 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=3453 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:36.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135646664313764646539623730316234343736373234373966363438 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit: BPF prog-id=133 op=LOAD Oct 2 19:22:36.108000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000384720 items=0 ppid=3453 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:36.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135646664313764646539623730316234343736373234373966363438 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit: BPF prog-id=134 op=LOAD Oct 2 19:22:36.108000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000384768 items=0 ppid=3453 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:36.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135646664313764646539623730316234343736373234373966363438 Oct 2 19:22:36.108000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:22:36.108000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { perfmon } for pid=3464 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit[3464]: AVC avc: denied { bpf } for pid=3464 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:36.108000 audit: BPF prog-id=135 op=LOAD Oct 2 19:22:36.108000 audit[3464]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000384b78 items=0 ppid=3453 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:36.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135646664313764646539623730316234343736373234373966363438 Oct 2 19:22:36.131466 env[1309]: time="2023-10-02T19:22:36.131428335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-crjls,Uid:bdabd4a1-16b6-448e-b470-77cf8a8daf2c,Namespace:kube-system,Attempt:0,} returns sandbox id \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\"" Oct 2 19:22:36.138319 env[1309]: time="2023-10-02T19:22:36.138281371Z" level=info msg="CreateContainer within sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:22:36.164689 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount156869806.mount: Deactivated successfully. Oct 2 19:22:36.176463 env[1309]: time="2023-10-02T19:22:36.176419470Z" level=info msg="CreateContainer within sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\"" Oct 2 19:22:36.177145 env[1309]: time="2023-10-02T19:22:36.177019773Z" level=info msg="StartContainer for \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\"" Oct 2 19:22:36.196875 systemd[1]: Started cri-containerd-cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab.scope. Oct 2 19:22:36.210893 systemd[1]: cri-containerd-cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab.scope: Deactivated successfully. Oct 2 19:22:36.275485 env[1309]: time="2023-10-02T19:22:36.275406586Z" level=info msg="shim disconnected" id=cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab Oct 2 19:22:36.275730 env[1309]: time="2023-10-02T19:22:36.275488286Z" level=warning msg="cleaning up after shim disconnected" id=cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab namespace=k8s.io Oct 2 19:22:36.275730 env[1309]: time="2023-10-02T19:22:36.275502286Z" level=info msg="cleaning up dead shim" Oct 2 19:22:36.284540 env[1309]: time="2023-10-02T19:22:36.284495633Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3514 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:22:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:22:36.284799 env[1309]: time="2023-10-02T19:22:36.284742135Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:22:36.285068 env[1309]: time="2023-10-02T19:22:36.285019436Z" level=error msg="Failed to pipe stderr of container \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\"" error="reading from a closed fifo" Oct 2 19:22:36.288074 env[1309]: time="2023-10-02T19:22:36.288019052Z" level=error msg="Failed to pipe stdout of container \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\"" error="reading from a closed fifo" Oct 2 19:22:36.293130 env[1309]: time="2023-10-02T19:22:36.293086978Z" level=error msg="StartContainer for \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:22:36.293331 kubelet[2459]: E1002 19:22:36.293307 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab" Oct 2 19:22:36.294074 kubelet[2459]: E1002 19:22:36.293450 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:22:36.294074 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:22:36.294074 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:22:36.294074 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-sdvxm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-crjls_kube-system(bdabd4a1-16b6-448e-b470-77cf8a8daf2c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:22:36.294393 kubelet[2459]: E1002 19:22:36.293501 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-crjls" podUID=bdabd4a1-16b6-448e-b470-77cf8a8daf2c Oct 2 19:22:36.417000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:36.417000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001b649e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:36.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:36.428000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:36.428000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:36.428000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c001b64a20 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:36.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:36.428000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0018789e0 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:36.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:36.429000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:22:36.429000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001b64b60 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:22:36.429000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:22:36.491684 env[1309]: time="2023-10-02T19:22:36.491641213Z" level=info msg="StopContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" with timeout 30 (s)" Oct 2 19:22:36.492097 env[1309]: time="2023-10-02T19:22:36.492058916Z" level=info msg="Stop container \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" with signal terminated" Oct 2 19:22:36.503133 systemd[1]: cri-containerd-d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce.scope: Deactivated successfully. Oct 2 19:22:36.502000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:22:36.506000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:22:36.541323 env[1309]: time="2023-10-02T19:22:36.541271472Z" level=info msg="shim disconnected" id=d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce Oct 2 19:22:36.541323 env[1309]: time="2023-10-02T19:22:36.541321472Z" level=warning msg="cleaning up after shim disconnected" id=d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce namespace=k8s.io Oct 2 19:22:36.541600 env[1309]: time="2023-10-02T19:22:36.541332972Z" level=info msg="cleaning up dead shim" Oct 2 19:22:36.549484 env[1309]: time="2023-10-02T19:22:36.549446115Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3547 runtime=io.containerd.runc.v2\n" Oct 2 19:22:36.553910 env[1309]: time="2023-10-02T19:22:36.553876738Z" level=info msg="StopContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" returns successfully" Oct 2 19:22:36.554522 env[1309]: time="2023-10-02T19:22:36.554494141Z" level=info msg="StopPodSandbox for \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\"" Oct 2 19:22:36.554694 env[1309]: time="2023-10-02T19:22:36.554666142Z" level=info msg="Container to stop \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:22:36.561706 systemd[1]: cri-containerd-2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425.scope: Deactivated successfully. Oct 2 19:22:36.561000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:22:36.565000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:22:36.599778 env[1309]: time="2023-10-02T19:22:36.599729677Z" level=info msg="shim disconnected" id=2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425 Oct 2 19:22:36.600017 env[1309]: time="2023-10-02T19:22:36.599933678Z" level=warning msg="cleaning up after shim disconnected" id=2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425 namespace=k8s.io Oct 2 19:22:36.600017 env[1309]: time="2023-10-02T19:22:36.599977678Z" level=info msg="cleaning up dead shim" Oct 2 19:22:36.607979 env[1309]: time="2023-10-02T19:22:36.607915320Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3579 runtime=io.containerd.runc.v2\n" Oct 2 19:22:36.608250 env[1309]: time="2023-10-02T19:22:36.608219521Z" level=info msg="TearDown network for sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" successfully" Oct 2 19:22:36.608348 env[1309]: time="2023-10-02T19:22:36.608248321Z" level=info msg="StopPodSandbox for \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" returns successfully" Oct 2 19:22:36.708028 kubelet[2459]: I1002 19:22:36.707849 2459 scope.go:115] "RemoveContainer" containerID="d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce" Oct 2 19:22:36.709812 env[1309]: time="2023-10-02T19:22:36.709772351Z" level=info msg="RemoveContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\"" Oct 2 19:22:36.711671 env[1309]: time="2023-10-02T19:22:36.711646560Z" level=info msg="StopPodSandbox for \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\"" Oct 2 19:22:36.711841 env[1309]: time="2023-10-02T19:22:36.711820661Z" level=info msg="Container to stop \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:22:36.722029 env[1309]: time="2023-10-02T19:22:36.721975914Z" level=info msg="RemoveContainer for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" returns successfully" Oct 2 19:22:36.722205 kubelet[2459]: I1002 19:22:36.722168 2459 scope.go:115] "RemoveContainer" containerID="d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce" Oct 2 19:22:36.722462 env[1309]: time="2023-10-02T19:22:36.722382416Z" level=error msg="ContainerStatus for \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\": not found" Oct 2 19:22:36.722610 kubelet[2459]: E1002 19:22:36.722595 2459 remote_runtime.go:625] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\": not found" containerID="d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce" Oct 2 19:22:36.722700 kubelet[2459]: I1002 19:22:36.722636 2459 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce} err="failed to get container status \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\": rpc error: code = NotFound desc = an error occurred when try to find container \"d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce\": not found" Oct 2 19:22:36.723000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:22:36.724165 systemd[1]: cri-containerd-a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca.scope: Deactivated successfully. Oct 2 19:22:36.727000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:22:36.755866 kubelet[2459]: I1002 19:22:36.755798 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2zrnf\" (UniqueName: \"kubernetes.io/projected/2c9d5332-763a-4c62-9d3e-aec311dcc32d-kube-api-access-2zrnf\") pod \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\" (UID: \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\") " Oct 2 19:22:36.756144 kubelet[2459]: I1002 19:22:36.755928 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2c9d5332-763a-4c62-9d3e-aec311dcc32d-cilium-config-path\") pod \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\" (UID: \"2c9d5332-763a-4c62-9d3e-aec311dcc32d\") " Oct 2 19:22:36.756245 kubelet[2459]: W1002 19:22:36.756202 2459 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/2c9d5332-763a-4c62-9d3e-aec311dcc32d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:22:36.758281 kubelet[2459]: I1002 19:22:36.758210 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2c9d5332-763a-4c62-9d3e-aec311dcc32d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "2c9d5332-763a-4c62-9d3e-aec311dcc32d" (UID: "2c9d5332-763a-4c62-9d3e-aec311dcc32d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:22:36.760940 kubelet[2459]: I1002 19:22:36.760913 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2c9d5332-763a-4c62-9d3e-aec311dcc32d-kube-api-access-2zrnf" (OuterVolumeSpecName: "kube-api-access-2zrnf") pod "2c9d5332-763a-4c62-9d3e-aec311dcc32d" (UID: "2c9d5332-763a-4c62-9d3e-aec311dcc32d"). InnerVolumeSpecName "kube-api-access-2zrnf". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:22:36.767546 env[1309]: time="2023-10-02T19:22:36.767495152Z" level=info msg="shim disconnected" id=a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca Oct 2 19:22:36.767687 env[1309]: time="2023-10-02T19:22:36.767546152Z" level=warning msg="cleaning up after shim disconnected" id=a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca namespace=k8s.io Oct 2 19:22:36.767687 env[1309]: time="2023-10-02T19:22:36.767558152Z" level=info msg="cleaning up dead shim" Oct 2 19:22:36.775386 env[1309]: time="2023-10-02T19:22:36.775351993Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3611 runtime=io.containerd.runc.v2\n" Oct 2 19:22:36.775674 env[1309]: time="2023-10-02T19:22:36.775644194Z" level=info msg="TearDown network for sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" successfully" Oct 2 19:22:36.775753 env[1309]: time="2023-10-02T19:22:36.775672494Z" level=info msg="StopPodSandbox for \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" returns successfully" Oct 2 19:22:36.856243 kubelet[2459]: I1002 19:22:36.856205 2459 reconciler.go:399] "Volume detached for volume \"kube-api-access-2zrnf\" (UniqueName: \"kubernetes.io/projected/2c9d5332-763a-4c62-9d3e-aec311dcc32d-kube-api-access-2zrnf\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:36.856243 kubelet[2459]: I1002 19:22:36.856242 2459 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2c9d5332-763a-4c62-9d3e-aec311dcc32d-cilium-config-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:36.950223 kubelet[2459]: I1002 19:22:36.950188 2459 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=873ae7ea-2b5d-4be7-98cf-98bc7eda05d3 path="/var/lib/kubelet/pods/873ae7ea-2b5d-4be7-98cf-98bc7eda05d3/volumes" Oct 2 19:22:36.955550 systemd[1]: Removed slice kubepods-besteffort-pod2c9d5332_763a_4c62_9d3e_aec311dcc32d.slice. Oct 2 19:22:36.957445 kubelet[2459]: I1002 19:22:36.957375 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-etc-cni-netd\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957550 kubelet[2459]: I1002 19:22:36.957452 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-lib-modules\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957550 kubelet[2459]: I1002 19:22:36.957474 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-run\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957550 kubelet[2459]: I1002 19:22:36.957505 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-clustermesh-secrets\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957550 kubelet[2459]: I1002 19:22:36.957533 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hostproc\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957560 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-config-path\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957589 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hubble-tls\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957616 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-bpf-maps\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957639 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-xtables-lock\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957664 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-kernel\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.957735 kubelet[2459]: I1002 19:22:36.957691 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cni-path\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.958002 kubelet[2459]: I1002 19:22:36.957717 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-cgroup\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.958002 kubelet[2459]: I1002 19:22:36.957747 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sdvxm\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-kube-api-access-sdvxm\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.958002 kubelet[2459]: I1002 19:22:36.957774 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-net\") pod \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\" (UID: \"bdabd4a1-16b6-448e-b470-77cf8a8daf2c\") " Oct 2 19:22:36.958002 kubelet[2459]: I1002 19:22:36.957821 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.958002 kubelet[2459]: I1002 19:22:36.957849 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.959886 kubelet[2459]: I1002 19:22:36.957872 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.959886 kubelet[2459]: I1002 19:22:36.957892 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.959886 kubelet[2459]: I1002 19:22:36.958200 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.959886 kubelet[2459]: I1002 19:22:36.958232 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hostproc" (OuterVolumeSpecName: "hostproc") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.959886 kubelet[2459]: W1002 19:22:36.958362 2459 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/bdabd4a1-16b6-448e-b470-77cf8a8daf2c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:22:36.960484 kubelet[2459]: I1002 19:22:36.960460 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:22:36.960694 kubelet[2459]: I1002 19:22:36.960671 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.960785 kubelet[2459]: I1002 19:22:36.960706 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cni-path" (OuterVolumeSpecName: "cni-path") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.960785 kubelet[2459]: I1002 19:22:36.960727 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.960785 kubelet[2459]: I1002 19:22:36.960748 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:22:36.964568 kubelet[2459]: I1002 19:22:36.964527 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:22:36.964848 kubelet[2459]: I1002 19:22:36.964823 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:22:36.966791 kubelet[2459]: I1002 19:22:36.966758 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-kube-api-access-sdvxm" (OuterVolumeSpecName: "kube-api-access-sdvxm") pod "bdabd4a1-16b6-448e-b470-77cf8a8daf2c" (UID: "bdabd4a1-16b6-448e-b470-77cf8a8daf2c"). InnerVolumeSpecName "kube-api-access-sdvxm". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:22:37.058498 kubelet[2459]: I1002 19:22:37.058456 2459 reconciler.go:399] "Volume detached for volume \"kube-api-access-sdvxm\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-kube-api-access-sdvxm\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058498 kubelet[2459]: I1002 19:22:37.058490 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-net\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058498 kubelet[2459]: I1002 19:22:37.058509 2459 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-etc-cni-netd\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058521 2459 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-lib-modules\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058537 2459 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-run\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058549 2459 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-clustermesh-secrets\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058559 2459 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hostproc\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058571 2459 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-config-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058581 2459 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-hubble-tls\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058593 2459 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-bpf-maps\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.058802 kubelet[2459]: I1002 19:22:37.058605 2459 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-xtables-lock\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.059191 kubelet[2459]: I1002 19:22:37.058617 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.059191 kubelet[2459]: I1002 19:22:37.058628 2459 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cni-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.059191 kubelet[2459]: I1002 19:22:37.058641 2459 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bdabd4a1-16b6-448e-b470-77cf8a8daf2c-cilium-cgroup\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:22:37.121345 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab-rootfs.mount: Deactivated successfully. Oct 2 19:22:37.121470 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca-rootfs.mount: Deactivated successfully. Oct 2 19:22:37.121543 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca-shm.mount: Deactivated successfully. Oct 2 19:22:37.121616 systemd[1]: var-lib-kubelet-pods-bdabd4a1\x2d16b6\x2d448e\x2db470\x2d77cf8a8daf2c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsdvxm.mount: Deactivated successfully. Oct 2 19:22:37.121692 systemd[1]: var-lib-kubelet-pods-bdabd4a1\x2d16b6\x2d448e\x2db470\x2d77cf8a8daf2c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:22:37.121768 systemd[1]: var-lib-kubelet-pods-bdabd4a1\x2d16b6\x2d448e\x2db470\x2d77cf8a8daf2c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:22:37.121849 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d21fb87a02e0c537b9680dc920ba95420d1065f8b5e285fe5f922a129a2545ce-rootfs.mount: Deactivated successfully. Oct 2 19:22:37.121922 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425-rootfs.mount: Deactivated successfully. Oct 2 19:22:37.122010 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425-shm.mount: Deactivated successfully. Oct 2 19:22:37.122087 systemd[1]: var-lib-kubelet-pods-2c9d5332\x2d763a\x2d4c62\x2d9d3e\x2daec311dcc32d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2zrnf.mount: Deactivated successfully. Oct 2 19:22:37.715467 kubelet[2459]: I1002 19:22:37.715425 2459 scope.go:115] "RemoveContainer" containerID="cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab" Oct 2 19:22:37.717309 env[1309]: time="2023-10-02T19:22:37.717251901Z" level=info msg="RemoveContainer for \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\"" Oct 2 19:22:37.721032 systemd[1]: Removed slice kubepods-burstable-podbdabd4a1_16b6_448e_b470_77cf8a8daf2c.slice. Oct 2 19:22:37.726593 env[1309]: time="2023-10-02T19:22:37.726555650Z" level=info msg="RemoveContainer for \"cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab\" returns successfully" Oct 2 19:22:38.547228 sshd[3399]: pam_unix(sshd:session): session closed for user core Oct 2 19:22:38.548000 audit[3399]: USER_END pid=3399 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:38.550918 systemd[1]: sshd@28-10.200.8.4:22-10.200.12.6:39770.service: Deactivated successfully. Oct 2 19:22:38.551802 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 19:22:38.553921 systemd-logind[1293]: Session 31 logged out. Waiting for processes to exit. Oct 2 19:22:38.554800 kernel: kauditd_printk_skb: 86 callbacks suppressed Oct 2 19:22:38.554879 kernel: audit: type=1106 audit(1696274558.548:1404): pid=3399 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:38.555452 systemd-logind[1293]: Removed session 31. Oct 2 19:22:38.548000 audit[3399]: CRED_DISP pid=3399 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:38.589499 kernel: audit: type=1104 audit(1696274558.548:1405): pid=3399 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:38.590146 kernel: audit: type=1131 audit(1696274558.550:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.4:22-10.200.12.6:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:38.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.4:22-10.200.12.6:39770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:38.655821 systemd[1]: Started sshd@29-10.200.8.4:22-10.200.12.6:37242.service. Oct 2 19:22:38.677073 kernel: audit: type=1130 audit(1696274558.655:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.4:22-10.200.12.6:37242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:38.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.4:22-10.200.12.6:37242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:22:38.950085 kubelet[2459]: I1002 19:22:38.950042 2459 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=2c9d5332-763a-4c62-9d3e-aec311dcc32d path="/var/lib/kubelet/pods/2c9d5332-763a-4c62-9d3e-aec311dcc32d/volumes" Oct 2 19:22:38.950702 kubelet[2459]: I1002 19:22:38.950674 2459 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=bdabd4a1-16b6-448e-b470-77cf8a8daf2c path="/var/lib/kubelet/pods/bdabd4a1-16b6-448e-b470-77cf8a8daf2c/volumes" Oct 2 19:22:39.288000 audit[3632]: USER_ACCT pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.307800 sshd[3632]: Accepted publickey for core from 10.200.12.6 port 37242 ssh2: RSA SHA256:gmG02UXHBKapD9vqiBZ3w7SUJvWJJQwqYxETXcCINW8 Oct 2 19:22:39.308191 kernel: audit: type=1101 audit(1696274559.288:1408): pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.308355 sshd[3632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:22:39.306000 audit[3632]: CRED_ACQ pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.313604 systemd[1]: Started session-32.scope. Oct 2 19:22:39.314903 systemd-logind[1293]: New session 32 of user core. Oct 2 19:22:39.333908 kernel: audit: type=1103 audit(1696274559.306:1409): pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.334009 kernel: audit: type=1006 audit(1696274559.306:1410): pid=3632 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 19:22:39.306000 audit[3632]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd32c1350 a2=3 a3=0 items=0 ppid=1 pid=3632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:39.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:39.350974 kernel: audit: type=1300 audit(1696274559.306:1410): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd32c1350 a2=3 a3=0 items=0 ppid=1 pid=3632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:39.351020 kernel: audit: type=1327 audit(1696274559.306:1410): proctitle=737368643A20636F7265205B707269765D Oct 2 19:22:39.318000 audit[3632]: USER_START pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.356034 kernel: audit: type=1105 audit(1696274559.318:1411): pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.318000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:22:39.380692 kubelet[2459]: W1002 19:22:39.380659 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbdabd4a1_16b6_448e_b470_77cf8a8daf2c.slice/cri-containerd-cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab.scope WatchSource:0}: container "cedb64b0f55367169e7a56d456148e93637bf6954610e9701cd9f47e05cce7ab" in namespace "k8s.io": not found Oct 2 19:22:40.062146 kubelet[2459]: E1002 19:22:40.062105 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:40.063399 kubelet[2459]: I1002 19:22:40.063364 2459 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:22:40.063546 kubelet[2459]: E1002 19:22:40.063427 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="bdabd4a1-16b6-448e-b470-77cf8a8daf2c" containerName="mount-cgroup" Oct 2 19:22:40.063546 kubelet[2459]: E1002 19:22:40.063440 2459 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="2c9d5332-763a-4c62-9d3e-aec311dcc32d" containerName="cilium-operator" Oct 2 19:22:40.063546 kubelet[2459]: I1002 19:22:40.063465 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="2c9d5332-763a-4c62-9d3e-aec311dcc32d" containerName="cilium-operator" Oct 2 19:22:40.063546 kubelet[2459]: I1002 19:22:40.063474 2459 memory_manager.go:345] "RemoveStaleState removing state" podUID="bdabd4a1-16b6-448e-b470-77cf8a8daf2c" containerName="mount-cgroup" Oct 2 19:22:40.069393 systemd[1]: Created slice kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice. Oct 2 19:22:40.085796 kubelet[2459]: I1002 19:22:40.085759 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-hubble-tls\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085813 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-hostproc\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085839 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-cilium-ipsec-secrets\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085864 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bs4t2\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-kube-api-access-bs4t2\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085889 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-net\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085913 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-etc-cni-netd\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.085990 kubelet[2459]: I1002 19:22:40.085939 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-xtables-lock\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.085987 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-bpf-maps\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.086021 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-cgroup\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.086048 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34305820-0336-4283-9b26-1dabde030a12-cilium-config-path\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.086076 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-kernel\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.086105 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-run\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086290 kubelet[2459]: I1002 19:22:40.086132 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cni-path\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086535 kubelet[2459]: I1002 19:22:40.086160 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-lib-modules\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.086535 kubelet[2459]: I1002 19:22:40.086189 2459 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-clustermesh-secrets\") pod \"cilium-cwz58\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " pod="kube-system/cilium-cwz58" Oct 2 19:22:40.375102 env[1309]: time="2023-10-02T19:22:40.375036538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-cwz58,Uid:34305820-0336-4283-9b26-1dabde030a12,Namespace:kube-system,Attempt:0,}" Oct 2 19:22:40.413620 env[1309]: time="2023-10-02T19:22:40.413562839Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:22:40.413829 env[1309]: time="2023-10-02T19:22:40.413801640Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:22:40.413949 env[1309]: time="2023-10-02T19:22:40.413925940Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:22:40.414321 env[1309]: time="2023-10-02T19:22:40.414266742Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3 pid=3651 runtime=io.containerd.runc.v2 Oct 2 19:22:40.428161 systemd[1]: Started cri-containerd-3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3.scope. Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit: BPF prog-id=136 op=LOAD Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=3651 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366626131613331313136393966316634653163666634343164653537 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=3651 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366626131613331313136393966316634653163666634343164653537 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit: BPF prog-id=137 op=LOAD Oct 2 19:22:40.438000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c00038c8b0 items=0 ppid=3651 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366626131613331313136393966316634653163666634343164653537 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit: BPF prog-id=138 op=LOAD Oct 2 19:22:40.438000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c00038c8f8 items=0 ppid=3651 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366626131613331313136393966316634653163666634343164653537 Oct 2 19:22:40.438000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:22:40.438000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { perfmon } for pid=3663 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit[3663]: AVC avc: denied { bpf } for pid=3663 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:22:40.438000 audit: BPF prog-id=139 op=LOAD Oct 2 19:22:40.438000 audit[3663]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c00038cd08 items=0 ppid=3651 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:22:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366626131613331313136393966316634653163666634343164653537 Oct 2 19:22:40.451767 env[1309]: time="2023-10-02T19:22:40.451731337Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-cwz58,Uid:34305820-0336-4283-9b26-1dabde030a12,Namespace:kube-system,Attempt:0,} returns sandbox id \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\"" Oct 2 19:22:40.454688 env[1309]: time="2023-10-02T19:22:40.454657652Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:22:40.487070 env[1309]: time="2023-10-02T19:22:40.487010821Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" Oct 2 19:22:40.489068 env[1309]: time="2023-10-02T19:22:40.487717924Z" level=info msg="StartContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" Oct 2 19:22:40.503828 systemd[1]: Started cri-containerd-6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16.scope. Oct 2 19:22:40.516433 systemd[1]: cri-containerd-6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16.scope: Deactivated successfully. Oct 2 19:22:40.588865 env[1309]: time="2023-10-02T19:22:40.588811450Z" level=info msg="shim disconnected" id=6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16 Oct 2 19:22:40.589148 env[1309]: time="2023-10-02T19:22:40.588880051Z" level=warning msg="cleaning up after shim disconnected" id=6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16 namespace=k8s.io Oct 2 19:22:40.589148 env[1309]: time="2023-10-02T19:22:40.588892751Z" level=info msg="cleaning up dead shim" Oct 2 19:22:40.597827 env[1309]: time="2023-10-02T19:22:40.597782797Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3710 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:22:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:22:40.600817 env[1309]: time="2023-10-02T19:22:40.598369900Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:22:40.601170 env[1309]: time="2023-10-02T19:22:40.601119614Z" level=error msg="Failed to pipe stdout of container \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" error="reading from a closed fifo" Oct 2 19:22:40.601342 env[1309]: time="2023-10-02T19:22:40.601287815Z" level=error msg="Failed to pipe stderr of container \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" error="reading from a closed fifo" Oct 2 19:22:40.605186 env[1309]: time="2023-10-02T19:22:40.605137535Z" level=error msg="StartContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:22:40.605406 kubelet[2459]: E1002 19:22:40.605371 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16" Oct 2 19:22:40.605550 kubelet[2459]: E1002 19:22:40.605512 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:22:40.605550 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:22:40.605550 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:22:40.605550 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bs4t2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:22:40.605785 kubelet[2459]: E1002 19:22:40.605569 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:40.739268 env[1309]: time="2023-10-02T19:22:40.731944195Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:22:40.767249 env[1309]: time="2023-10-02T19:22:40.767203978Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" Oct 2 19:22:40.767713 env[1309]: time="2023-10-02T19:22:40.767680481Z" level=info msg="StartContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" Oct 2 19:22:40.784061 systemd[1]: Started cri-containerd-20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579.scope. Oct 2 19:22:40.797260 systemd[1]: cri-containerd-20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579.scope: Deactivated successfully. Oct 2 19:22:40.815090 env[1309]: time="2023-10-02T19:22:40.815040127Z" level=info msg="shim disconnected" id=20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579 Oct 2 19:22:40.815288 env[1309]: time="2023-10-02T19:22:40.815094327Z" level=warning msg="cleaning up after shim disconnected" id=20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579 namespace=k8s.io Oct 2 19:22:40.815288 env[1309]: time="2023-10-02T19:22:40.815107027Z" level=info msg="cleaning up dead shim" Oct 2 19:22:40.822842 env[1309]: time="2023-10-02T19:22:40.822798667Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3747 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:22:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:22:40.823129 env[1309]: time="2023-10-02T19:22:40.823072969Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:22:40.824141 env[1309]: time="2023-10-02T19:22:40.824091574Z" level=error msg="Failed to pipe stdout of container \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" error="reading from a closed fifo" Oct 2 19:22:40.824222 env[1309]: time="2023-10-02T19:22:40.824176175Z" level=error msg="Failed to pipe stderr of container \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" error="reading from a closed fifo" Oct 2 19:22:40.828589 env[1309]: time="2023-10-02T19:22:40.828511997Z" level=error msg="StartContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:22:40.828814 kubelet[2459]: E1002 19:22:40.828794 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579" Oct 2 19:22:40.828936 kubelet[2459]: E1002 19:22:40.828918 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:22:40.828936 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:22:40.828936 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:22:40.828936 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bs4t2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:22:40.829172 kubelet[2459]: E1002 19:22:40.829003 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:41.731183 kubelet[2459]: I1002 19:22:41.731156 2459 scope.go:115] "RemoveContainer" containerID="6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16" Oct 2 19:22:41.731793 kubelet[2459]: I1002 19:22:41.731772 2459 scope.go:115] "RemoveContainer" containerID="6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16" Oct 2 19:22:41.733239 env[1309]: time="2023-10-02T19:22:41.733204601Z" level=info msg="RemoveContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" Oct 2 19:22:41.734090 env[1309]: time="2023-10-02T19:22:41.734059106Z" level=info msg="RemoveContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\"" Oct 2 19:22:41.734198 env[1309]: time="2023-10-02T19:22:41.734155406Z" level=error msg="RemoveContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\" failed" error="failed to set removing state for container \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\": container is already in removing state" Oct 2 19:22:41.734362 kubelet[2459]: E1002 19:22:41.734344 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\": container is already in removing state" containerID="6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16" Oct 2 19:22:41.734483 kubelet[2459]: E1002 19:22:41.734457 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16": container is already in removing state; Skipping pod "cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)" Oct 2 19:22:41.734729 kubelet[2459]: E1002 19:22:41.734716 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:41.744751 env[1309]: time="2023-10-02T19:22:41.744719861Z" level=info msg="RemoveContainer for \"6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16\" returns successfully" Oct 2 19:22:42.734740 kubelet[2459]: E1002 19:22:42.734691 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:43.695517 kubelet[2459]: W1002 19:22:43.695474 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice/cri-containerd-6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16.scope WatchSource:0}: container "6673d9f33d70847fd95bdaebf46d68d6b12569de02093ee557ce47c18ad35c16" in namespace "k8s.io": not found Oct 2 19:22:45.064547 kubelet[2459]: E1002 19:22:45.064511 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:46.802365 kubelet[2459]: W1002 19:22:46.802316 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice/cri-containerd-20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579.scope WatchSource:0}: task 20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579 not found: not found Oct 2 19:22:50.065739 kubelet[2459]: E1002 19:22:50.065697 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:54.950611 env[1309]: time="2023-10-02T19:22:54.950529483Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:22:54.979174 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3005819996.mount: Deactivated successfully. Oct 2 19:22:54.992324 env[1309]: time="2023-10-02T19:22:54.992219698Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" Oct 2 19:22:54.993380 env[1309]: time="2023-10-02T19:22:54.993348804Z" level=info msg="StartContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" Oct 2 19:22:55.018719 systemd[1]: Started cri-containerd-884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d.scope. Oct 2 19:22:55.029945 systemd[1]: cri-containerd-884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d.scope: Deactivated successfully. Oct 2 19:22:55.060578 env[1309]: time="2023-10-02T19:22:55.060525451Z" level=info msg="shim disconnected" id=884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d Oct 2 19:22:55.060578 env[1309]: time="2023-10-02T19:22:55.060578651Z" level=warning msg="cleaning up after shim disconnected" id=884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d namespace=k8s.io Oct 2 19:22:55.060893 env[1309]: time="2023-10-02T19:22:55.060589851Z" level=info msg="cleaning up dead shim" Oct 2 19:22:55.067017 kubelet[2459]: E1002 19:22:55.066964 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:22:55.069042 env[1309]: time="2023-10-02T19:22:55.069002295Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:22:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3786 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:22:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:22:55.069311 env[1309]: time="2023-10-02T19:22:55.069250696Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:22:55.069655 env[1309]: time="2023-10-02T19:22:55.069612698Z" level=error msg="Failed to pipe stdout of container \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" error="reading from a closed fifo" Oct 2 19:22:55.073019 env[1309]: time="2023-10-02T19:22:55.072937215Z" level=error msg="Failed to pipe stderr of container \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" error="reading from a closed fifo" Oct 2 19:22:55.077328 env[1309]: time="2023-10-02T19:22:55.077258838Z" level=error msg="StartContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:22:55.077480 kubelet[2459]: E1002 19:22:55.077460 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d" Oct 2 19:22:55.077597 kubelet[2459]: E1002 19:22:55.077580 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:22:55.077597 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:22:55.077597 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:22:55.077597 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bs4t2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:22:55.077814 kubelet[2459]: E1002 19:22:55.077641 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:55.758937 kubelet[2459]: I1002 19:22:55.758909 2459 scope.go:115] "RemoveContainer" containerID="20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579" Oct 2 19:22:55.759284 kubelet[2459]: I1002 19:22:55.759260 2459 scope.go:115] "RemoveContainer" containerID="20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579" Oct 2 19:22:55.760475 env[1309]: time="2023-10-02T19:22:55.760435465Z" level=info msg="RemoveContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" Oct 2 19:22:55.761387 env[1309]: time="2023-10-02T19:22:55.761360170Z" level=info msg="RemoveContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\"" Oct 2 19:22:55.761520 env[1309]: time="2023-10-02T19:22:55.761451271Z" level=error msg="RemoveContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\" failed" error="failed to set removing state for container \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\": container is already in removing state" Oct 2 19:22:55.761689 kubelet[2459]: E1002 19:22:55.761645 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\": container is already in removing state" containerID="20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579" Oct 2 19:22:55.761689 kubelet[2459]: E1002 19:22:55.761685 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579": container is already in removing state; Skipping pod "cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)" Oct 2 19:22:55.762051 kubelet[2459]: E1002 19:22:55.762029 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:22:55.770305 env[1309]: time="2023-10-02T19:22:55.770268716Z" level=info msg="RemoveContainer for \"20b9450d1c6c32a496c55cb1d4bd1b93f1ee3015c89f20620846cae8d62ad579\" returns successfully" Oct 2 19:22:55.976895 systemd[1]: run-containerd-runc-k8s.io-884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d-runc.ubRahO.mount: Deactivated successfully. Oct 2 19:22:55.977404 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d-rootfs.mount: Deactivated successfully. Oct 2 19:22:58.166278 kubelet[2459]: W1002 19:22:58.166225 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice/cri-containerd-884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d.scope WatchSource:0}: task 884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d not found: not found Oct 2 19:23:00.068734 kubelet[2459]: E1002 19:23:00.068654 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:05.069558 kubelet[2459]: E1002 19:23:05.069520 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:09.947688 kubelet[2459]: E1002 19:23:09.947317 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:23:10.070951 kubelet[2459]: E1002 19:23:10.070918 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:15.072228 kubelet[2459]: E1002 19:23:15.072187 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:19.031000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:19.037930 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:23:19.038044 kernel: audit: type=1400 audit(1696274599.031:1431): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:19.031000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:19.069876 kernel: audit: type=1400 audit(1696274599.031:1432): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:19.069968 kernel: audit: type=1300 audit(1696274599.031:1431): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001137710 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:19.031000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c001137710 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:19.095989 kernel: audit: type=1327 audit(1696274599.031:1431): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:19.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:19.031000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0001f1320 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:19.128572 kernel: audit: type=1300 audit(1696274599.031:1432): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0001f1320 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:19.128682 kernel: audit: type=1327 audit(1696274599.031:1432): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:19.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:20.073399 kubelet[2459]: E1002 19:23:20.073353 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:20.959000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:20.959000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:20.991141 kernel: audit: type=1400 audit(1696274600.959:1434): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:20.991287 kernel: audit: type=1400 audit(1696274600.959:1433): avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:20.991316 kernel: audit: type=1300 audit(1696274600.959:1434): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00db6d800 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:20.959000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00db6d800 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:20.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:21.031994 kernel: audit: type=1327 audit(1696274600.959:1434): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:20.959000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c001a97660 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:20.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:20.975000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7136 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:20.975000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00db6d8c0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:20.975000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:21.001000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:21.001000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001a97720 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:21.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:21.001000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:21.001000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00dd01ce0 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:21.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:21.002000 audit[2330]: AVC avc: denied { watch } for pid=2330 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7140 scontext=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:21.002000 audit[2330]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00dd01e30 a2=fc6 a3=0 items=0 ppid=2140 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c536,c745 key=(null) Oct 2 19:23:21.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E34002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Oct 2 19:23:22.949987 env[1309]: time="2023-10-02T19:23:22.949553627Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:23:22.978280 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2108496684.mount: Deactivated successfully. Oct 2 19:23:22.991128 env[1309]: time="2023-10-02T19:23:22.991008439Z" level=info msg="CreateContainer within sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\"" Oct 2 19:23:22.992166 env[1309]: time="2023-10-02T19:23:22.992130645Z" level=info msg="StartContainer for \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\"" Oct 2 19:23:23.012973 systemd[1]: Started cri-containerd-f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547.scope. Oct 2 19:23:23.028161 systemd[1]: cri-containerd-f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547.scope: Deactivated successfully. Oct 2 19:23:23.080160 env[1309]: time="2023-10-02T19:23:23.080097894Z" level=info msg="shim disconnected" id=f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547 Oct 2 19:23:23.080160 env[1309]: time="2023-10-02T19:23:23.080159495Z" level=warning msg="cleaning up after shim disconnected" id=f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547 namespace=k8s.io Oct 2 19:23:23.080160 env[1309]: time="2023-10-02T19:23:23.080170995Z" level=info msg="cleaning up dead shim" Oct 2 19:23:23.088559 env[1309]: time="2023-10-02T19:23:23.088510837Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:23:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3825 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:23:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:23:23.088824 env[1309]: time="2023-10-02T19:23:23.088769939Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:23:23.091065 env[1309]: time="2023-10-02T19:23:23.091021450Z" level=error msg="Failed to pipe stdout of container \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\"" error="reading from a closed fifo" Oct 2 19:23:23.091189 env[1309]: time="2023-10-02T19:23:23.091020350Z" level=error msg="Failed to pipe stderr of container \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\"" error="reading from a closed fifo" Oct 2 19:23:23.096896 env[1309]: time="2023-10-02T19:23:23.096850480Z" level=error msg="StartContainer for \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:23:23.097140 kubelet[2459]: E1002 19:23:23.097114 2459 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547" Oct 2 19:23:23.097511 kubelet[2459]: E1002 19:23:23.097253 2459 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:23:23.097511 kubelet[2459]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:23:23.097511 kubelet[2459]: rm /hostbin/cilium-mount Oct 2 19:23:23.097511 kubelet[2459]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bs4t2,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:23:23.097720 kubelet[2459]: E1002 19:23:23.097298 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:23:23.816725 kubelet[2459]: I1002 19:23:23.816676 2459 scope.go:115] "RemoveContainer" containerID="884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d" Oct 2 19:23:23.817280 kubelet[2459]: I1002 19:23:23.817193 2459 scope.go:115] "RemoveContainer" containerID="884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d" Oct 2 19:23:23.819326 env[1309]: time="2023-10-02T19:23:23.819282074Z" level=info msg="RemoveContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" Oct 2 19:23:23.819544 env[1309]: time="2023-10-02T19:23:23.819514375Z" level=info msg="RemoveContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\"" Oct 2 19:23:23.819808 env[1309]: time="2023-10-02T19:23:23.819768476Z" level=error msg="RemoveContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\" failed" error="failed to set removing state for container \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\": container is already in removing state" Oct 2 19:23:23.820734 kubelet[2459]: E1002 19:23:23.820116 2459 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\": container is already in removing state" containerID="884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d" Oct 2 19:23:23.820734 kubelet[2459]: E1002 19:23:23.820228 2459 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d": container is already in removing state; Skipping pod "cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)" Oct 2 19:23:23.820734 kubelet[2459]: E1002 19:23:23.820685 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:23:23.839356 env[1309]: time="2023-10-02T19:23:23.839311976Z" level=info msg="RemoveContainer for \"884669def627d382f5bbf75f4a8ebd75dd2a193c47a7228b169b5f6e31cb681d\" returns successfully" Oct 2 19:23:23.971320 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547-rootfs.mount: Deactivated successfully. Oct 2 19:23:24.888943 env[1309]: time="2023-10-02T19:23:24.888899641Z" level=info msg="StopPodSandbox for \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\"" Oct 2 19:23:24.889343 env[1309]: time="2023-10-02T19:23:24.888997242Z" level=info msg="TearDown network for sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" successfully" Oct 2 19:23:24.889343 env[1309]: time="2023-10-02T19:23:24.889037142Z" level=info msg="StopPodSandbox for \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" returns successfully" Oct 2 19:23:24.889733 env[1309]: time="2023-10-02T19:23:24.889694245Z" level=info msg="RemovePodSandbox for \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\"" Oct 2 19:23:24.889851 env[1309]: time="2023-10-02T19:23:24.889728645Z" level=info msg="Forcibly stopping sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\"" Oct 2 19:23:24.889851 env[1309]: time="2023-10-02T19:23:24.889809046Z" level=info msg="TearDown network for sandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" successfully" Oct 2 19:23:24.901985 env[1309]: time="2023-10-02T19:23:24.901722907Z" level=info msg="RemovePodSandbox \"2086d662cb847ad2eaa5f5f3ec8842b23665ad0ef099c0a74f93ded77e954425\" returns successfully" Oct 2 19:23:24.902494 env[1309]: time="2023-10-02T19:23:24.902464011Z" level=info msg="StopPodSandbox for \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\"" Oct 2 19:23:24.902588 env[1309]: time="2023-10-02T19:23:24.902550211Z" level=info msg="TearDown network for sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" successfully" Oct 2 19:23:24.902639 env[1309]: time="2023-10-02T19:23:24.902590111Z" level=info msg="StopPodSandbox for \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" returns successfully" Oct 2 19:23:24.902882 env[1309]: time="2023-10-02T19:23:24.902852112Z" level=info msg="RemovePodSandbox for \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\"" Oct 2 19:23:24.902984 env[1309]: time="2023-10-02T19:23:24.902886613Z" level=info msg="Forcibly stopping sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\"" Oct 2 19:23:24.902984 env[1309]: time="2023-10-02T19:23:24.902974013Z" level=info msg="TearDown network for sandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" successfully" Oct 2 19:23:24.911984 env[1309]: time="2023-10-02T19:23:24.911864159Z" level=info msg="RemovePodSandbox \"0c0e731e89cb4db0ef1e2417412780d74d1930dfd3d79c4cc3b9c9fdccd46361\" returns successfully" Oct 2 19:23:24.912478 env[1309]: time="2023-10-02T19:23:24.912311961Z" level=info msg="StopPodSandbox for \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\"" Oct 2 19:23:24.912478 env[1309]: time="2023-10-02T19:23:24.912389861Z" level=info msg="TearDown network for sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" successfully" Oct 2 19:23:24.912478 env[1309]: time="2023-10-02T19:23:24.912428861Z" level=info msg="StopPodSandbox for \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" returns successfully" Oct 2 19:23:24.912972 env[1309]: time="2023-10-02T19:23:24.912735063Z" level=info msg="RemovePodSandbox for \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\"" Oct 2 19:23:24.913058 env[1309]: time="2023-10-02T19:23:24.912978064Z" level=info msg="Forcibly stopping sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\"" Oct 2 19:23:24.913105 env[1309]: time="2023-10-02T19:23:24.913079265Z" level=info msg="TearDown network for sandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" successfully" Oct 2 19:23:24.923639 env[1309]: time="2023-10-02T19:23:24.923605519Z" level=info msg="RemovePodSandbox \"a5dfd17dde9b701b447672479f648d864a7fde134a56d7a15587e22520d383ca\" returns successfully" Oct 2 19:23:25.075218 kubelet[2459]: E1002 19:23:25.075186 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:26.185551 kubelet[2459]: W1002 19:23:26.185481 2459 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice/cri-containerd-f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547.scope WatchSource:0}: task f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547 not found: not found Oct 2 19:23:30.077298 kubelet[2459]: E1002 19:23:30.077250 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:35.078654 kubelet[2459]: E1002 19:23:35.078614 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:36.418000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.423365 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:23:36.423489 kernel: audit: type=1400 audit(1696274616.418:1439): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.418000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1100 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.460014 kernel: audit: type=1300 audit(1696274616.418:1439): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1100 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.460124 kernel: audit: type=1327 audit(1696274616.418:1439): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.418000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.479983 kernel: audit: type=1400 audit(1696274616.428:1440): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.428000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.428000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1140 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.491989 kernel: audit: type=1300 audit(1696274616.428:1440): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1140 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.529554 kernel: audit: type=1327 audit(1696274616.428:1440): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.529635 kernel: audit: type=1400 audit(1696274616.428:1441): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.428000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.428000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1280 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.569564 kernel: audit: type=1300 audit(1696274616.428:1441): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000bf1280 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.569640 kernel: audit: type=1327 audit(1696274616.428:1441): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:36.428000 audit[2282]: AVC avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.602498 kernel: audit: type=1400 audit(1696274616.428:1442): avc: denied { watch } for pid=2282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6863 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:23:36.428000 audit[2282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000cc0020 a2=fc6 a3=0 items=0 ppid=2155 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c198 key=(null) Oct 2 19:23:36.428000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:23:37.947282 kubelet[2459]: E1002 19:23:37.947236 2459 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-cwz58_kube-system(34305820-0336-4283-9b26-1dabde030a12)\"" pod="kube-system/cilium-cwz58" podUID=34305820-0336-4283-9b26-1dabde030a12 Oct 2 19:23:40.080016 kubelet[2459]: E1002 19:23:40.079982 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:23:41.293614 env[1309]: time="2023-10-02T19:23:41.293561507Z" level=info msg="StopPodSandbox for \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\"" Oct 2 19:23:41.294103 env[1309]: time="2023-10-02T19:23:41.293647707Z" level=info msg="Container to stop \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:23:41.297942 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3-shm.mount: Deactivated successfully. Oct 2 19:23:41.318167 systemd[1]: cri-containerd-3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3.scope: Deactivated successfully. Oct 2 19:23:41.317000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:23:41.321000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:23:41.345344 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3-rootfs.mount: Deactivated successfully. Oct 2 19:23:41.390820 env[1309]: time="2023-10-02T19:23:41.390765902Z" level=info msg="shim disconnected" id=3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3 Oct 2 19:23:41.391154 env[1309]: time="2023-10-02T19:23:41.391124303Z" level=warning msg="cleaning up after shim disconnected" id=3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3 namespace=k8s.io Oct 2 19:23:41.391154 env[1309]: time="2023-10-02T19:23:41.391147404Z" level=info msg="cleaning up dead shim" Oct 2 19:23:41.399364 env[1309]: time="2023-10-02T19:23:41.399330445Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:23:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3862 runtime=io.containerd.runc.v2\n" Oct 2 19:23:41.399657 env[1309]: time="2023-10-02T19:23:41.399624447Z" level=info msg="TearDown network for sandbox \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" successfully" Oct 2 19:23:41.399745 env[1309]: time="2023-10-02T19:23:41.399655447Z" level=info msg="StopPodSandbox for \"3fba1a3111699f1f4e1cff441de5785b52ee2f4cf6e08e40f33fd3604259cae3\" returns successfully" Oct 2 19:23:41.440796 sshd[3632]: pam_unix(sshd:session): session closed for user core Oct 2 19:23:41.441000 audit[3632]: USER_END pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:23:41.443943 systemd[1]: sshd@29-10.200.8.4:22-10.200.12.6:37242.service: Deactivated successfully. Oct 2 19:23:41.444972 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 19:23:41.448375 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:23:41.448574 kernel: audit: type=1106 audit(1696274621.441:1445): pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:23:41.447089 systemd-logind[1293]: Session 32 logged out. Waiting for processes to exit. Oct 2 19:23:41.449866 systemd-logind[1293]: Removed session 32. Oct 2 19:23:41.441000 audit[3632]: CRED_DISP pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:23:41.480579 kernel: audit: type=1104 audit(1696274621.441:1446): pid=3632 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:23:41.480640 kernel: audit: type=1131 audit(1696274621.441:1447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.4:22-10.200.12.6:37242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:41.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.4:22-10.200.12.6:37242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:23:41.529108 kubelet[2459]: I1002 19:23:41.529063 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-kernel\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529108 kubelet[2459]: I1002 19:23:41.529115 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-lib-modules\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529140 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-etc-cni-netd\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529169 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-hubble-tls\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529192 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-xtables-lock\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529224 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bs4t2\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-kube-api-access-bs4t2\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529252 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-cgroup\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.529856 kubelet[2459]: I1002 19:23:41.529281 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34305820-0336-4283-9b26-1dabde030a12-cilium-config-path\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529309 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-clustermesh-secrets\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529334 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-bpf-maps\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529357 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cni-path\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529393 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-cilium-ipsec-secrets\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529656 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-run\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530241 kubelet[2459]: I1002 19:23:41.529699 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-hostproc\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530532 kubelet[2459]: I1002 19:23:41.529723 2459 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-net\") pod \"34305820-0336-4283-9b26-1dabde030a12\" (UID: \"34305820-0336-4283-9b26-1dabde030a12\") " Oct 2 19:23:41.530532 kubelet[2459]: I1002 19:23:41.529789 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.530532 kubelet[2459]: I1002 19:23:41.529819 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.530532 kubelet[2459]: I1002 19:23:41.529841 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.530532 kubelet[2459]: I1002 19:23:41.529859 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.532881 kubelet[2459]: I1002 19:23:41.530877 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.532881 kubelet[2459]: I1002 19:23:41.530932 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cni-path" (OuterVolumeSpecName: "cni-path") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.532881 kubelet[2459]: I1002 19:23:41.531319 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.532881 kubelet[2459]: I1002 19:23:41.531724 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.532881 kubelet[2459]: I1002 19:23:41.531755 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-hostproc" (OuterVolumeSpecName: "hostproc") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.533173 kubelet[2459]: I1002 19:23:41.531921 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:23:41.533173 kubelet[2459]: W1002 19:23:41.532125 2459 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/34305820-0336-4283-9b26-1dabde030a12/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:23:41.535230 systemd[1]: var-lib-kubelet-pods-34305820\x2d0336\x2d4283\x2d9b26\x2d1dabde030a12-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:23:41.536708 kubelet[2459]: I1002 19:23:41.536678 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:23:41.537709 kubelet[2459]: I1002 19:23:41.537678 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/34305820-0336-4283-9b26-1dabde030a12-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:23:41.541503 systemd[1]: var-lib-kubelet-pods-34305820\x2d0336\x2d4283\x2d9b26\x2d1dabde030a12-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:23:41.542254 kubelet[2459]: I1002 19:23:41.542231 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:23:41.544823 systemd[1]: var-lib-kubelet-pods-34305820\x2d0336\x2d4283\x2d9b26\x2d1dabde030a12-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbs4t2.mount: Deactivated successfully. Oct 2 19:23:41.547996 kubelet[2459]: I1002 19:23:41.547947 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-kube-api-access-bs4t2" (OuterVolumeSpecName: "kube-api-access-bs4t2") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "kube-api-access-bs4t2". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:23:41.548087 kubelet[2459]: I1002 19:23:41.548004 2459 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "34305820-0336-4283-9b26-1dabde030a12" (UID: "34305820-0336-4283-9b26-1dabde030a12"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:23:41.630438 kubelet[2459]: I1002 19:23:41.630357 2459 reconciler.go:399] "Volume detached for volume \"kube-api-access-bs4t2\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-kube-api-access-bs4t2\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630438 kubelet[2459]: I1002 19:23:41.630439 2459 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-cgroup\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630485 2459 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/34305820-0336-4283-9b26-1dabde030a12-cilium-config-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630557 2459 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-clustermesh-secrets\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630574 2459 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-bpf-maps\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630589 2459 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cni-path\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630605 2459 reconciler.go:399] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/34305820-0336-4283-9b26-1dabde030a12-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630622 2459 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-cilium-run\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630637 2459 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-hostproc\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.630746 kubelet[2459]: I1002 19:23:41.630655 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-net\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.631120 kubelet[2459]: I1002 19:23:41.630671 2459 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-lib-modules\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.631120 kubelet[2459]: I1002 19:23:41.630689 2459 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-etc-cni-netd\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.631120 kubelet[2459]: I1002 19:23:41.630706 2459 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.631120 kubelet[2459]: I1002 19:23:41.630724 2459 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/34305820-0336-4283-9b26-1dabde030a12-hubble-tls\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.631120 kubelet[2459]: I1002 19:23:41.630743 2459 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/34305820-0336-4283-9b26-1dabde030a12-xtables-lock\") on node \"ci-3510.3.0-a-f1fdbe70e6\" DevicePath \"\"" Oct 2 19:23:41.853148 kubelet[2459]: I1002 19:23:41.853121 2459 scope.go:115] "RemoveContainer" containerID="f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547" Oct 2 19:23:41.854188 env[1309]: time="2023-10-02T19:23:41.854142460Z" level=info msg="RemoveContainer for \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\"" Oct 2 19:23:41.858447 systemd[1]: Removed slice kubepods-burstable-pod34305820_0336_4283_9b26_1dabde030a12.slice. Oct 2 19:23:41.868923 env[1309]: time="2023-10-02T19:23:41.868795535Z" level=info msg="RemoveContainer for \"f3f6152476ce563a7f1d86f677b363c641fb3ecf0bcc3a8559166caa93821547\" returns successfully" Oct 2 19:23:42.297675 systemd[1]: var-lib-kubelet-pods-34305820\x2d0336\x2d4283\x2d9b26\x2d1dabde030a12-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:23:42.950075 kubelet[2459]: I1002 19:23:42.950050 2459 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=34305820-0336-4283-9b26-1dabde030a12 path="/var/lib/kubelet/pods/34305820-0336-4283-9b26-1dabde030a12/volumes" Oct 2 19:23:45.081517 kubelet[2459]: E1002 19:23:45.081487 2459 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"