Oct 2 19:34:20.023254 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:34:20.023286 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:20.023300 kernel: BIOS-provided physical RAM map: Oct 2 19:34:20.023311 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:34:20.023320 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:34:20.023330 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:34:20.023345 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:34:20.023361 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:34:20.023372 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:34:20.023383 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:34:20.023393 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:34:20.023404 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:34:20.023414 kernel: NX (Execute Disable) protection: active Oct 2 19:34:20.023425 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:34:20.023446 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 19:34:20.023458 kernel: random: crng init done Oct 2 19:34:20.023470 kernel: SMBIOS 3.1.0 present. Oct 2 19:34:20.023481 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:34:20.023493 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:34:20.023504 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:34:20.023516 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:34:20.023527 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:34:20.023542 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:34:20.023553 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:34:20.023565 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:34:20.023576 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:34:20.023589 kernel: tsc: Detected 2593.907 MHz processor Oct 2 19:34:20.023601 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:34:20.023614 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:34:20.023625 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:34:20.023637 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:34:20.023649 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:34:20.023663 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:34:20.023675 kernel: Using GB pages for direct mapping Oct 2 19:34:20.023715 kernel: Secure boot disabled Oct 2 19:34:20.023726 kernel: ACPI: Early table checksum verification disabled Oct 2 19:34:20.023736 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:34:20.023746 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023756 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023764 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:34:20.023776 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:34:20.023783 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023791 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023801 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023810 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023817 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023826 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023833 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:20.023842 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:34:20.023850 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:34:20.023856 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:34:20.023863 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:34:20.023870 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:34:20.023878 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:34:20.023889 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:34:20.023896 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:34:20.023902 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:34:20.023909 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:34:20.023916 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:34:20.023925 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:34:20.023933 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:34:20.023940 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:34:20.023947 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:34:20.023956 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:34:20.023962 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:34:20.023969 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:34:20.023977 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:34:20.023986 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:34:20.023993 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:34:20.024000 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:34:20.024007 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:34:20.024017 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:34:20.024026 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:34:20.024033 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:34:20.024041 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:34:20.024049 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:34:20.024057 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:34:20.024063 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:34:20.024072 kernel: Zone ranges: Oct 2 19:34:20.024080 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:34:20.024087 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:34:20.024096 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:34:20.024106 kernel: Movable zone start for each node Oct 2 19:34:20.024113 kernel: Early memory node ranges Oct 2 19:34:20.024120 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:34:20.024126 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:34:20.024137 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:34:20.024144 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:34:20.024150 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:34:20.024160 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:34:20.024169 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:34:20.024176 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:34:20.024183 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:34:20.024193 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:34:20.024200 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:34:20.024207 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:34:20.024214 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:34:20.024223 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:34:20.024230 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:34:20.024239 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:34:20.024246 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:34:20.024253 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:34:20.024260 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:34:20.024266 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:34:20.024275 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:34:20.024283 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:34:20.024290 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:34:20.024296 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:34:20.024309 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:34:20.024316 kernel: Policy zone: Normal Oct 2 19:34:20.024323 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:20.024330 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:34:20.024337 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:34:20.024347 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:34:20.024354 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:34:20.024361 kernel: Memory: 8073736K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 313464K reserved, 0K cma-reserved) Oct 2 19:34:20.024372 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:34:20.024380 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:34:20.024394 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:34:20.024405 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:34:20.024415 kernel: rcu: RCU event tracing is enabled. Oct 2 19:34:20.024423 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:34:20.024433 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:34:20.024440 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:34:20.024451 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:34:20.024458 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:34:20.024469 kernel: Using NULL legacy PIC Oct 2 19:34:20.024478 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:34:20.024488 kernel: Console: colour dummy device 80x25 Oct 2 19:34:20.024497 kernel: printk: console [tty1] enabled Oct 2 19:34:20.024507 kernel: printk: console [ttyS0] enabled Oct 2 19:34:20.024514 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:34:20.024523 kernel: ACPI: Core revision 20210730 Oct 2 19:34:20.024532 kernel: Failed to register legacy timer interrupt Oct 2 19:34:20.024541 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:34:20.024548 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:34:20.024559 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593907) Oct 2 19:34:20.024570 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:34:20.024577 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:34:20.024584 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:34:20.024592 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:34:20.024602 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:34:20.024612 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:34:20.024620 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:34:20.024631 kernel: RETBleed: Vulnerable Oct 2 19:34:20.024638 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:34:20.024645 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:34:20.024652 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:34:20.024662 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:34:20.024669 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:34:20.024676 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:34:20.024694 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:34:20.024704 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:34:20.024711 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:34:20.024723 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:34:20.024730 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:34:20.024737 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:34:20.024744 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:34:20.024751 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:34:20.024758 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:34:20.024765 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:34:20.024775 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:34:20.024784 kernel: LSM: Security Framework initializing Oct 2 19:34:20.024791 kernel: SELinux: Initializing. Oct 2 19:34:20.024800 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:34:20.024810 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:34:20.024818 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:34:20.024825 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:34:20.024834 kernel: signal: max sigframe size: 3632 Oct 2 19:34:20.024843 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:34:20.024850 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:34:20.024859 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:34:20.024868 kernel: x86: Booting SMP configuration: Oct 2 19:34:20.024875 kernel: .... node #0, CPUs: #1 Oct 2 19:34:20.024884 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:34:20.024892 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:34:20.024902 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:34:20.024909 kernel: smpboot: Max logical packages: 1 Oct 2 19:34:20.024917 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:34:20.024927 kernel: devtmpfs: initialized Oct 2 19:34:20.024934 kernel: x86/mm: Memory block size: 128MB Oct 2 19:34:20.024942 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:34:20.024954 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:34:20.024961 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:34:20.024970 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:34:20.024979 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:34:20.024987 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:34:20.024996 kernel: audit: type=2000 audit(1696275259.023:1): state=initialized audit_enabled=0 res=1 Oct 2 19:34:20.025005 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:34:20.025014 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:34:20.025024 kernel: cpuidle: using governor menu Oct 2 19:34:20.025033 kernel: ACPI: bus type PCI registered Oct 2 19:34:20.025043 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:34:20.025053 kernel: dca service started, version 1.12.1 Oct 2 19:34:20.025061 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:34:20.025068 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:34:20.025079 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:34:20.025086 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:34:20.025094 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:34:20.025104 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:34:20.025113 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:34:20.025122 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:34:20.025131 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:34:20.025138 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:34:20.025146 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:34:20.025156 kernel: ACPI: Interpreter enabled Oct 2 19:34:20.025163 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:34:20.025171 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:34:20.025181 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:34:20.025191 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:34:20.025200 kernel: iommu: Default domain type: Translated Oct 2 19:34:20.025208 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:34:20.025215 kernel: vgaarb: loaded Oct 2 19:34:20.025225 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:34:20.025233 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:34:20.025240 kernel: PTP clock support registered Oct 2 19:34:20.025248 kernel: Registered efivars operations Oct 2 19:34:20.025258 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:34:20.025265 kernel: PCI: System does not support PCI Oct 2 19:34:20.025276 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:34:20.025284 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:34:20.025291 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:34:20.025301 kernel: pnp: PnP ACPI init Oct 2 19:34:20.025309 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:34:20.025316 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:34:20.025326 kernel: NET: Registered PF_INET protocol family Oct 2 19:34:20.025334 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:34:20.025343 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:34:20.025354 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:34:20.025361 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:34:20.025369 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:34:20.025376 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:34:20.025386 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:34:20.025394 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:34:20.025401 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:34:20.025410 kernel: NET: Registered PF_XDP protocol family Oct 2 19:34:20.025421 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:34:20.025428 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:34:20.025439 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:34:20.025447 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:34:20.025457 kernel: Initialise system trusted keyrings Oct 2 19:34:20.025465 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:34:20.025475 kernel: Key type asymmetric registered Oct 2 19:34:20.025483 kernel: Asymmetric key parser 'x509' registered Oct 2 19:34:20.025492 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:34:20.025503 kernel: io scheduler mq-deadline registered Oct 2 19:34:20.025513 kernel: io scheduler kyber registered Oct 2 19:34:20.025521 kernel: io scheduler bfq registered Oct 2 19:34:20.025528 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:34:20.025538 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:34:20.025546 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:34:20.025553 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:34:20.025563 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:34:20.025697 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:34:20.025795 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:34:19 UTC (1696275259) Oct 2 19:34:20.025897 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:34:20.025914 kernel: fail to initialize ptp_kvm Oct 2 19:34:20.025927 kernel: intel_pstate: CPU model not supported Oct 2 19:34:20.025940 kernel: efifb: probing for efifb Oct 2 19:34:20.025953 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:34:20.025967 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:34:20.025980 kernel: efifb: scrolling: redraw Oct 2 19:34:20.025996 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:34:20.026010 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:34:20.026023 kernel: fb0: EFI VGA frame buffer device Oct 2 19:34:20.026038 kernel: pstore: Registered efi as persistent store backend Oct 2 19:34:20.026051 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:34:20.026065 kernel: Segment Routing with IPv6 Oct 2 19:34:20.026080 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:34:20.026094 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:34:20.026108 kernel: Key type dns_resolver registered Oct 2 19:34:20.026126 kernel: IPI shorthand broadcast: enabled Oct 2 19:34:20.026140 kernel: sched_clock: Marking stable (784412000, 23134900)->(1007502300, -199955400) Oct 2 19:34:20.026153 kernel: registered taskstats version 1 Oct 2 19:34:20.026167 kernel: Loading compiled-in X.509 certificates Oct 2 19:34:20.026181 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:34:20.026194 kernel: Key type .fscrypt registered Oct 2 19:34:20.026208 kernel: Key type fscrypt-provisioning registered Oct 2 19:34:20.026224 kernel: pstore: Using crash dump compression: deflate Oct 2 19:34:20.026241 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:34:20.026256 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:34:20.026271 kernel: ima: No architecture policies found Oct 2 19:34:20.026286 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:34:20.026300 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:34:20.026312 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:34:20.026324 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:34:20.026337 kernel: Run /init as init process Oct 2 19:34:20.026349 kernel: with arguments: Oct 2 19:34:20.026361 kernel: /init Oct 2 19:34:20.026377 kernel: with environment: Oct 2 19:34:20.026390 kernel: HOME=/ Oct 2 19:34:20.026401 kernel: TERM=linux Oct 2 19:34:20.026414 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:34:20.026429 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:34:20.026446 systemd[1]: Detected virtualization microsoft. Oct 2 19:34:20.026461 systemd[1]: Detected architecture x86-64. Oct 2 19:34:20.026477 systemd[1]: Running in initrd. Oct 2 19:34:20.026491 systemd[1]: No hostname configured, using default hostname. Oct 2 19:34:20.026504 systemd[1]: Hostname set to . Oct 2 19:34:20.026519 systemd[1]: Initializing machine ID from random generator. Oct 2 19:34:20.026533 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:34:20.026546 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:34:20.026560 systemd[1]: Reached target cryptsetup.target. Oct 2 19:34:20.026574 systemd[1]: Reached target paths.target. Oct 2 19:34:20.026588 systemd[1]: Reached target slices.target. Oct 2 19:34:20.026604 systemd[1]: Reached target swap.target. Oct 2 19:34:20.026618 systemd[1]: Reached target timers.target. Oct 2 19:34:20.026633 systemd[1]: Listening on iscsid.socket. Oct 2 19:34:20.026647 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:34:20.026661 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:34:20.026675 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:34:20.026706 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:34:20.026720 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:34:20.026730 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:34:20.026741 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:34:20.026751 systemd[1]: Reached target sockets.target. Oct 2 19:34:20.026759 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:34:20.026767 systemd[1]: Finished network-cleanup.service. Oct 2 19:34:20.026778 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:34:20.026786 systemd[1]: Starting systemd-journald.service... Oct 2 19:34:20.026793 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:34:20.026806 systemd[1]: Starting systemd-resolved.service... Oct 2 19:34:20.026820 systemd-journald[183]: Journal started Oct 2 19:34:20.026870 systemd-journald[183]: Runtime Journal (/run/log/journal/0eecf40b9b8f4902bc2587a0b3dd2429) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:34:20.036702 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:34:20.049709 systemd[1]: Started systemd-journald.service. Oct 2 19:34:20.051743 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:34:20.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.059555 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:34:20.071425 kernel: audit: type=1130 audit(1696275260.057:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.059562 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:34:20.059593 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:34:20.106065 kernel: audit: type=1130 audit(1696275260.077:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.062153 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:34:20.063373 systemd[1]: Started systemd-resolved.service. Oct 2 19:34:20.078756 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:34:20.110523 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:34:20.138756 kernel: audit: type=1130 audit(1696275260.109:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.154509 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:34:20.154526 kernel: audit: type=1130 audit(1696275260.140:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.141185 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:34:20.183097 kernel: audit: type=1130 audit(1696275260.142:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.183131 kernel: Bridge firewalling registered Oct 2 19:34:20.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.143761 systemd[1]: Reached target nss-lookup.target. Oct 2 19:34:20.154238 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:34:20.185137 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:34:20.191987 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:34:20.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.217781 kernel: audit: type=1130 audit(1696275260.203:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.202575 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:34:20.227836 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:34:20.245412 kernel: audit: type=1130 audit(1696275260.229:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.231108 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:34:20.256699 kernel: SCSI subsystem initialized Oct 2 19:34:20.260273 dracut-cmdline[201]: dracut-dracut-053 Oct 2 19:34:20.264143 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:20.299316 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:34:20.299368 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:34:20.304783 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:34:20.308731 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:34:20.311741 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:34:20.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.326731 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:34:20.333574 kernel: audit: type=1130 audit(1696275260.313:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.338227 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:34:20.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.356707 kernel: audit: type=1130 audit(1696275260.339:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.360701 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:34:20.374716 kernel: iscsi: registered transport (tcp) Oct 2 19:34:20.398659 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:34:20.398719 kernel: QLogic iSCSI HBA Driver Oct 2 19:34:20.428013 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:34:20.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.431564 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:34:20.484713 kernel: raid6: avx512x4 gen() 18383 MB/s Oct 2 19:34:20.504702 kernel: raid6: avx512x4 xor() 8593 MB/s Oct 2 19:34:20.524697 kernel: raid6: avx512x2 gen() 18454 MB/s Oct 2 19:34:20.544702 kernel: raid6: avx512x2 xor() 29761 MB/s Oct 2 19:34:20.564699 kernel: raid6: avx512x1 gen() 18493 MB/s Oct 2 19:34:20.584700 kernel: raid6: avx512x1 xor() 26625 MB/s Oct 2 19:34:20.605699 kernel: raid6: avx2x4 gen() 18276 MB/s Oct 2 19:34:20.625699 kernel: raid6: avx2x4 xor() 7824 MB/s Oct 2 19:34:20.645696 kernel: raid6: avx2x2 gen() 18452 MB/s Oct 2 19:34:20.666701 kernel: raid6: avx2x2 xor() 22193 MB/s Oct 2 19:34:20.686697 kernel: raid6: avx2x1 gen() 13850 MB/s Oct 2 19:34:20.706697 kernel: raid6: avx2x1 xor() 19275 MB/s Oct 2 19:34:20.726701 kernel: raid6: sse2x4 gen() 11623 MB/s Oct 2 19:34:20.746698 kernel: raid6: sse2x4 xor() 7220 MB/s Oct 2 19:34:20.766697 kernel: raid6: sse2x2 gen() 12541 MB/s Oct 2 19:34:20.787701 kernel: raid6: sse2x2 xor() 7469 MB/s Oct 2 19:34:20.807697 kernel: raid6: sse2x1 gen() 11191 MB/s Oct 2 19:34:20.831504 kernel: raid6: sse2x1 xor() 5811 MB/s Oct 2 19:34:20.831526 kernel: raid6: using algorithm avx512x1 gen() 18493 MB/s Oct 2 19:34:20.831545 kernel: raid6: .... xor() 26625 MB/s, rmw enabled Oct 2 19:34:20.839195 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:34:20.855709 kernel: xor: automatically using best checksumming function avx Oct 2 19:34:20.950712 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:34:20.958773 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:34:20.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.962000 audit: BPF prog-id=7 op=LOAD Oct 2 19:34:20.962000 audit: BPF prog-id=8 op=LOAD Oct 2 19:34:20.963901 systemd[1]: Starting systemd-udevd.service... Oct 2 19:34:20.977931 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:34:20.982505 systemd[1]: Started systemd-udevd.service. Oct 2 19:34:20.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.991778 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:34:21.004630 dracut-pre-trigger[402]: rd.md=0: removing MD RAID activation Oct 2 19:34:21.033473 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:34:21.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:21.036464 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:34:21.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:21.073474 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:34:21.126704 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:34:21.152880 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:34:21.152927 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:34:21.159976 kernel: AES CTR mode by8 optimization enabled Oct 2 19:34:21.168705 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:34:21.190198 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:34:21.190238 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:34:21.197709 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:34:21.209626 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:34:21.209662 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:34:21.218702 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:34:21.223706 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:34:21.234485 kernel: scsi host0: storvsc_host_t Oct 2 19:34:21.234712 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:34:21.234742 kernel: scsi host1: storvsc_host_t Oct 2 19:34:21.243703 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:34:21.267075 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:34:21.267280 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:34:21.267407 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:34:21.270734 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:34:21.270890 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:34:21.281702 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:21.285700 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:34:21.293259 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:34:21.293422 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:34:21.294705 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:34:21.413845 kernel: hv_netvsc 000d3a65-520b-000d-3a65-520b000d3a65 eth0: VF slot 1 added Oct 2 19:34:21.427787 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:34:21.427826 kernel: hv_pci 391457d6-c66c-46c5-92fb-3ca0dd29a9c2: PCI VMBus probing: Using version 0x10004 Oct 2 19:34:21.440348 kernel: hv_pci 391457d6-c66c-46c5-92fb-3ca0dd29a9c2: PCI host bridge to bus c66c:00 Oct 2 19:34:21.440503 kernel: pci_bus c66c:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:34:21.440627 kernel: pci_bus c66c:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:34:21.452089 kernel: pci c66c:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:34:21.459768 kernel: pci c66c:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:34:21.476953 kernel: pci c66c:00:02.0: enabling Extended Tags Oct 2 19:34:21.499732 kernel: pci c66c:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at c66c:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:34:21.509205 kernel: pci_bus c66c:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:34:21.509366 kernel: pci c66c:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:34:21.609709 kernel: mlx5_core c66c:00:02.0: firmware version: 14.30.1224 Oct 2 19:34:21.768708 kernel: mlx5_core c66c:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:34:21.839832 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:34:21.915100 kernel: mlx5_core c66c:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:34:21.915325 kernel: mlx5_core c66c:00:02.0: mlx5e_tc_post_act_init:40:(pid 189): firmware level support is missing Oct 2 19:34:21.927348 kernel: hv_netvsc 000d3a65-520b-000d-3a65-520b000d3a65 eth0: VF registering: eth1 Oct 2 19:34:21.927510 kernel: mlx5_core c66c:00:02.0 eth1: joined to eth0 Oct 2 19:34:21.939702 kernel: mlx5_core c66c:00:02.0 enP50796s1: renamed from eth1 Oct 2 19:34:21.960707 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (432) Oct 2 19:34:21.973326 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:34:22.034111 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:34:22.041585 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:34:22.048171 systemd[1]: Starting disk-uuid.service... Oct 2 19:34:22.097200 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:34:23.068714 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:23.070323 disk-uuid[543]: The operation has completed successfully. Oct 2 19:34:23.139020 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:34:23.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.139123 systemd[1]: Finished disk-uuid.service. Oct 2 19:34:23.150434 systemd[1]: Starting verity-setup.service... Oct 2 19:34:23.190711 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:34:23.444300 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:34:23.449243 systemd[1]: Finished verity-setup.service. Oct 2 19:34:23.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.454099 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:34:23.536481 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:34:23.534653 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:34:23.536634 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:34:23.537326 systemd[1]: Starting ignition-setup.service... Oct 2 19:34:23.545122 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:34:23.569270 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:23.569315 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:23.569339 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:23.619645 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:34:23.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.624000 audit: BPF prog-id=9 op=LOAD Oct 2 19:34:23.625914 systemd[1]: Starting systemd-networkd.service... Oct 2 19:34:23.633224 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:34:23.654533 systemd-networkd[822]: lo: Link UP Oct 2 19:34:23.654544 systemd-networkd[822]: lo: Gained carrier Oct 2 19:34:23.657932 systemd-networkd[822]: Enumeration completed Oct 2 19:34:23.658283 systemd[1]: Started systemd-networkd.service. Oct 2 19:34:23.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.658839 systemd-networkd[822]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:34:23.663386 systemd[1]: Reached target network.target. Oct 2 19:34:23.670704 systemd[1]: Starting iscsiuio.service... Oct 2 19:34:23.682546 systemd[1]: Started iscsiuio.service. Oct 2 19:34:23.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.687065 systemd[1]: Starting iscsid.service... Oct 2 19:34:23.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.693319 systemd[1]: Started iscsid.service. Oct 2 19:34:23.700246 iscsid[828]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:34:23.700246 iscsid[828]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:34:23.700246 iscsid[828]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:34:23.700246 iscsid[828]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:34:23.700246 iscsid[828]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:34:23.700246 iscsid[828]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:34:23.700246 iscsid[828]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:34:23.739536 kernel: mlx5_core c66c:00:02.0 enP50796s1: Link up Oct 2 19:34:23.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.698340 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:34:23.712503 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:34:23.729959 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:34:23.732352 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:34:23.738420 systemd[1]: Reached target remote-fs.target. Oct 2 19:34:23.754328 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:34:23.764339 systemd[1]: Finished ignition-setup.service. Oct 2 19:34:23.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.769387 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:34:23.773944 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:34:23.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:23.804626 kernel: hv_netvsc 000d3a65-520b-000d-3a65-520b000d3a65 eth0: Data path switched to VF: enP50796s1 Oct 2 19:34:23.804866 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:34:23.805014 systemd-networkd[822]: enP50796s1: Link UP Oct 2 19:34:23.805147 systemd-networkd[822]: eth0: Link UP Oct 2 19:34:23.805348 systemd-networkd[822]: eth0: Gained carrier Oct 2 19:34:23.811453 systemd-networkd[822]: enP50796s1: Gained carrier Oct 2 19:34:23.836754 systemd-networkd[822]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:34:25.233917 systemd-networkd[822]: eth0: Gained IPv6LL Oct 2 19:34:26.850455 ignition[843]: Ignition 2.14.0 Oct 2 19:34:26.850473 ignition[843]: Stage: fetch-offline Oct 2 19:34:26.850574 ignition[843]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:26.850625 ignition[843]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:26.968413 ignition[843]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:26.971494 ignition[843]: parsed url from cmdline: "" Oct 2 19:34:26.972611 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:34:26.990532 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:34:26.990574 kernel: audit: type=1130 audit(1696275266.978:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.971505 ignition[843]: no config URL provided Oct 2 19:34:26.979434 systemd[1]: Starting ignition-fetch.service... Oct 2 19:34:26.971517 ignition[843]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:34:26.971529 ignition[843]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:34:26.971536 ignition[843]: failed to fetch config: resource requires networking Oct 2 19:34:26.971857 ignition[843]: Ignition finished successfully Oct 2 19:34:26.987642 ignition[849]: Ignition 2.14.0 Oct 2 19:34:26.987649 ignition[849]: Stage: fetch Oct 2 19:34:26.987768 ignition[849]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:26.987795 ignition[849]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:26.993109 ignition[849]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:26.993345 ignition[849]: parsed url from cmdline: "" Oct 2 19:34:26.993349 ignition[849]: no config URL provided Oct 2 19:34:26.993354 ignition[849]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:34:26.993365 ignition[849]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:34:26.993412 ignition[849]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:34:27.013459 ignition[849]: GET result: OK Oct 2 19:34:27.013473 ignition[849]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 19:34:27.142975 ignition[849]: opening config device: "/dev/sr0" Oct 2 19:34:27.143408 ignition[849]: getting drive status for "/dev/sr0" Oct 2 19:34:27.143480 ignition[849]: drive status: OK Oct 2 19:34:27.143519 ignition[849]: mounting config device Oct 2 19:34:27.143551 ignition[849]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure835369450" Oct 2 19:34:27.171633 ignition[849]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure835369450" Oct 2 19:34:27.175053 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 19:34:27.172778 ignition[849]: checking for config drive Oct 2 19:34:27.173124 ignition[849]: reading config Oct 2 19:34:27.173449 ignition[849]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure835369450" Oct 2 19:34:27.176582 ignition[849]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure835369450" Oct 2 19:34:27.176606 ignition[849]: config has been read from custom data Oct 2 19:34:27.176706 ignition[849]: parsing config with SHA512: 0d3fcd9c0a2f8479e3e3a5cffefed604695a8926f8bbde8c4fc7f353e422ed8883aa99dd9d2a8b9ed7452a1b5731723b6382d5fa44394ee200805a1ab4cce655 Oct 2 19:34:27.199580 unknown[849]: fetched base config from "system" Oct 2 19:34:27.199594 unknown[849]: fetched base config from "system" Oct 2 19:34:27.200194 ignition[849]: fetch: fetch complete Oct 2 19:34:27.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.199602 unknown[849]: fetched user config from "azure" Oct 2 19:34:27.224754 kernel: audit: type=1130 audit(1696275267.206:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.200199 ignition[849]: fetch: fetch passed Oct 2 19:34:27.204003 systemd[1]: Finished ignition-fetch.service. Oct 2 19:34:27.200238 ignition[849]: Ignition finished successfully Oct 2 19:34:27.207641 systemd[1]: Starting ignition-kargs.service... Oct 2 19:34:27.240141 ignition[857]: Ignition 2.14.0 Oct 2 19:34:27.240152 ignition[857]: Stage: kargs Oct 2 19:34:27.240277 ignition[857]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:27.240304 ignition[857]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:27.247001 systemd[1]: Finished ignition-kargs.service. Oct 2 19:34:27.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.242999 ignition[857]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:27.267516 kernel: audit: type=1130 audit(1696275267.248:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.249945 systemd[1]: Starting ignition-disks.service... Oct 2 19:34:27.245643 ignition[857]: kargs: kargs passed Oct 2 19:34:27.245695 ignition[857]: Ignition finished successfully Oct 2 19:34:27.270759 ignition[863]: Ignition 2.14.0 Oct 2 19:34:27.270765 ignition[863]: Stage: disks Oct 2 19:34:27.270862 ignition[863]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:27.270880 ignition[863]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:27.279900 systemd[1]: Finished ignition-disks.service. Oct 2 19:34:27.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.273899 ignition[863]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:27.302360 kernel: audit: type=1130 audit(1696275267.281:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.282705 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:34:27.277533 ignition[863]: disks: disks passed Oct 2 19:34:27.297549 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:34:27.277577 ignition[863]: Ignition finished successfully Oct 2 19:34:27.302355 systemd[1]: Reached target local-fs.target. Oct 2 19:34:27.304335 systemd[1]: Reached target sysinit.target. Oct 2 19:34:27.308783 systemd[1]: Reached target basic.target. Oct 2 19:34:27.312516 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:34:27.396084 systemd-fsck[871]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:34:27.401180 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:34:27.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.406595 systemd[1]: Mounting sysroot.mount... Oct 2 19:34:27.420485 kernel: audit: type=1130 audit(1696275267.405:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.433701 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:34:27.434447 systemd[1]: Mounted sysroot.mount. Oct 2 19:34:27.436333 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:34:27.474142 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:34:27.476796 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:34:27.484399 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:34:27.484443 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:34:27.493822 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:34:27.529772 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:34:27.536037 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:34:27.551703 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (881) Oct 2 19:34:27.557696 initrd-setup-root[886]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:34:27.568213 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:27.568233 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:27.568244 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:27.571246 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:34:27.584193 initrd-setup-root[912]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:34:27.605672 initrd-setup-root[920]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:34:27.612268 initrd-setup-root[928]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:34:28.054015 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:34:28.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.077075 kernel: audit: type=1130 audit(1696275268.056:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.070288 systemd[1]: Starting ignition-mount.service... Oct 2 19:34:28.073675 systemd[1]: Starting sysroot-boot.service... Oct 2 19:34:28.099878 ignition[947]: INFO : Ignition 2.14.0 Oct 2 19:34:28.102333 ignition[947]: INFO : Stage: mount Oct 2 19:34:28.104258 ignition[947]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:28.104258 ignition[947]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:28.113879 ignition[947]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:28.113879 ignition[947]: INFO : mount: mount passed Oct 2 19:34:28.113879 ignition[947]: INFO : Ignition finished successfully Oct 2 19:34:28.148246 kernel: audit: type=1130 audit(1696275268.119:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.148279 kernel: audit: type=1130 audit(1696275268.136:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:28.114582 systemd[1]: Finished ignition-mount.service. Oct 2 19:34:28.132270 systemd[1]: Finished sysroot-boot.service. Oct 2 19:34:28.172740 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:34:28.172832 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:34:29.025321 coreos-metadata[880]: Oct 02 19:34:29.025 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:34:29.041504 coreos-metadata[880]: Oct 02 19:34:29.041 INFO Fetch successful Oct 2 19:34:29.074568 coreos-metadata[880]: Oct 02 19:34:29.074 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:34:29.090417 coreos-metadata[880]: Oct 02 19:34:29.090 INFO Fetch successful Oct 2 19:34:29.111888 coreos-metadata[880]: Oct 02 19:34:29.111 INFO wrote hostname ci-3510.3.0-a-8abed2f532 to /sysroot/etc/hostname Oct 2 19:34:29.118047 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:34:29.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:29.121404 systemd[1]: Starting ignition-files.service... Oct 2 19:34:29.138811 kernel: audit: type=1130 audit(1696275269.120:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:29.144611 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:34:29.165772 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (959) Oct 2 19:34:29.165810 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:29.165824 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:29.173415 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:29.177882 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:34:29.191737 ignition[978]: INFO : Ignition 2.14.0 Oct 2 19:34:29.191737 ignition[978]: INFO : Stage: files Oct 2 19:34:29.195710 ignition[978]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:29.195710 ignition[978]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:29.209545 ignition[978]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:29.225485 ignition[978]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:34:29.228641 ignition[978]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:34:29.228641 ignition[978]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:34:29.260973 ignition[978]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:34:29.265044 ignition[978]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:34:29.280236 unknown[978]: wrote ssh authorized keys file for user: core Oct 2 19:34:29.282935 ignition[978]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:34:29.286829 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:34:29.291717 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:34:30.057485 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:34:30.680004 ignition[978]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:34:30.689120 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:34:30.689120 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:34:30.689120 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:34:31.121039 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:34:31.211102 ignition[978]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:34:31.219266 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:34:31.219266 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:34:31.219266 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:34:31.437428 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:34:33.365889 ignition[978]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:34:33.374150 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:34:33.374150 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:34:33.374150 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:34:33.501539 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:34:37.681349 ignition[978]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:34:37.690340 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:34:37.690340 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:34:37.690340 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:34:37.872994 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:34:39.953353 ignition[978]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:34:39.962075 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:34:39.962075 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:34:39.962075 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:34:39.962075 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:34:39.962075 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:34:40.082330 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:34:40.210298 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:34:40.210298 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:34:40.219842 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:34:40.219842 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:34:40.234237 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:34:40.234237 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:34:40.234237 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:34:40.234237 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1636903371" Oct 2 19:34:40.234237 ignition[978]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1636903371": device or resource busy Oct 2 19:34:40.234237 ignition[978]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1636903371", trying btrfs: device or resource busy Oct 2 19:34:40.234237 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1636903371" Oct 2 19:34:40.272573 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (983) Oct 2 19:34:40.248657 systemd[1]: mnt-oem1636903371.mount: Deactivated successfully. Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1636903371" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem1636903371" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem1636903371" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1502380572" Oct 2 19:34:40.275406 ignition[978]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1502380572": device or resource busy Oct 2 19:34:40.275406 ignition[978]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1502380572", trying btrfs: device or resource busy Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1502380572" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1502380572" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem1502380572" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem1502380572" Oct 2 19:34:40.275406 ignition[978]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:34:40.275406 ignition[978]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:34:40.275406 ignition[978]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:34:40.330139 kernel: audit: type=1130 audit(1696275280.282:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.268154 systemd[1]: mnt-oem1502380572.mount: Deactivated successfully. Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1d): [started] setting preset to enabled for "waagent.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: op(1d): [finished] setting preset to enabled for "waagent.service" Oct 2 19:34:40.330584 ignition[978]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:34:40.330584 ignition[978]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:34:40.330584 ignition[978]: INFO : files: files passed Oct 2 19:34:40.495245 kernel: audit: type=1130 audit(1696275280.330:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.495293 kernel: audit: type=1131 audit(1696275280.330:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.495309 kernel: audit: type=1130 audit(1696275280.454:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.495324 kernel: audit: type=1130 audit(1696275280.495:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.276088 systemd[1]: Finished ignition-files.service. Oct 2 19:34:40.527357 kernel: audit: type=1131 audit(1696275280.495:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.527446 ignition[978]: INFO : Ignition finished successfully Oct 2 19:34:40.296158 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:34:40.537523 initrd-setup-root-after-ignition[1003]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:34:40.314602 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:34:40.321753 systemd[1]: Starting ignition-quench.service... Oct 2 19:34:40.331262 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:34:40.331351 systemd[1]: Finished ignition-quench.service. Oct 2 19:34:40.448447 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:34:40.469131 systemd[1]: Reached target ignition-complete.target. Oct 2 19:34:40.473236 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:34:40.491996 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:34:40.492090 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:34:40.495612 systemd[1]: Reached target initrd-fs.target. Oct 2 19:34:40.520537 systemd[1]: Reached target initrd.target. Oct 2 19:34:40.524681 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:34:40.525463 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:34:40.574929 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:34:40.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.592756 kernel: audit: type=1130 audit(1696275280.577:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.590520 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:34:40.600585 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:34:40.604958 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:34:40.607582 systemd[1]: Stopped target timers.target. Oct 2 19:34:40.611534 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:34:40.633696 kernel: audit: type=1131 audit(1696275280.615:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.611634 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:34:40.615566 systemd[1]: Stopped target initrd.target. Oct 2 19:34:40.627714 systemd[1]: Stopped target basic.target. Oct 2 19:34:40.633854 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:34:40.638036 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:34:40.642341 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:34:40.647598 systemd[1]: Stopped target remote-fs.target. Oct 2 19:34:40.657871 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:34:40.662155 systemd[1]: Stopped target sysinit.target. Oct 2 19:34:40.666259 systemd[1]: Stopped target local-fs.target. Oct 2 19:34:40.670458 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:34:40.674792 systemd[1]: Stopped target swap.target. Oct 2 19:34:40.676730 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:34:40.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.676843 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:34:40.701346 kernel: audit: type=1131 audit(1696275280.680:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.681086 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:34:40.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.697314 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:34:40.722203 kernel: audit: type=1131 audit(1696275280.701:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.697424 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:34:40.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.701544 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:34:40.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.701678 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:34:40.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.752280 iscsid[828]: iscsid shutting down. Oct 2 19:34:40.716865 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:34:40.756951 ignition[1016]: INFO : Ignition 2.14.0 Oct 2 19:34:40.756951 ignition[1016]: INFO : Stage: umount Oct 2 19:34:40.756951 ignition[1016]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:40.756951 ignition[1016]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:40.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.716958 systemd[1]: Stopped ignition-files.service. Oct 2 19:34:40.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.787887 ignition[1016]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:40.787887 ignition[1016]: INFO : umount: umount passed Oct 2 19:34:40.787887 ignition[1016]: INFO : Ignition finished successfully Oct 2 19:34:40.722377 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:34:40.722506 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:34:40.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.730259 systemd[1]: Stopping ignition-mount.service... Oct 2 19:34:40.735140 systemd[1]: Stopping iscsid.service... Oct 2 19:34:40.740464 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:34:40.742392 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:34:40.742579 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:34:40.745335 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:34:40.745482 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:34:40.749973 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:34:40.750080 systemd[1]: Stopped iscsid.service. Oct 2 19:34:40.761123 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:34:40.761206 systemd[1]: Stopped ignition-mount.service. Oct 2 19:34:40.764484 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:34:40.764576 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:34:40.769813 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:34:40.769859 systemd[1]: Stopped ignition-disks.service. Oct 2 19:34:40.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.777327 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:34:40.777377 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:34:40.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.779507 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:34:40.779553 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:34:40.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.868000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:34:40.781775 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:34:40.781819 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:34:40.784117 systemd[1]: Stopped target paths.target. Oct 2 19:34:40.787833 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:34:40.794723 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:34:40.798623 systemd[1]: Stopped target slices.target. Oct 2 19:34:40.800629 systemd[1]: Stopped target sockets.target. Oct 2 19:34:40.802743 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:34:40.802787 systemd[1]: Closed iscsid.socket. Oct 2 19:34:40.807121 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:34:40.807173 systemd[1]: Stopped ignition-setup.service. Oct 2 19:34:40.814365 systemd[1]: Stopping iscsiuio.service... Oct 2 19:34:40.825103 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:34:40.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.825545 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:34:40.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.825638 systemd[1]: Stopped iscsiuio.service. Oct 2 19:34:40.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.825989 systemd[1]: Stopped target network.target. Oct 2 19:34:40.826337 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:34:40.826367 systemd[1]: Closed iscsiuio.socket. Oct 2 19:34:40.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.826869 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:34:40.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.827267 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:34:40.855641 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:34:40.857300 systemd-networkd[822]: eth0: DHCPv6 lease lost Oct 2 19:34:40.858275 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:34:40.861470 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:34:40.861827 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:34:40.869146 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:34:40.869189 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:34:40.872443 systemd[1]: Stopping network-cleanup.service... Oct 2 19:34:40.881819 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:34:40.881878 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:34:40.934000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:34:40.882341 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:34:40.882380 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:34:40.888970 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:34:40.889012 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:34:40.907275 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:34:40.910116 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:34:40.910202 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:34:40.914575 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:34:40.914953 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:34:40.919157 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:34:40.919199 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:34:40.922740 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:34:40.922782 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:34:40.927246 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:34:40.927293 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:34:40.931006 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:34:40.931051 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:34:40.935025 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:34:40.935079 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:34:41.004791 kernel: hv_netvsc 000d3a65-520b-000d-3a65-520b000d3a65 eth0: Data path switched from VF: enP50796s1 Oct 2 19:34:41.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.004895 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:34:41.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.004968 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:34:41.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.012356 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:34:41.014786 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:34:41.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.014853 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:34:41.029000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.017634 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:34:41.017716 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:34:41.025028 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:34:41.025078 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:34:41.039172 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:34:41.041936 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:34:41.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.046864 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:34:41.049281 systemd[1]: Stopped network-cleanup.service. Oct 2 19:34:41.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:41.053892 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:34:41.059000 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:34:41.069855 systemd[1]: Switching root. Oct 2 19:34:41.096675 systemd-journald[183]: Journal stopped Oct 2 19:34:55.045367 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 19:34:55.045394 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:34:55.045406 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:34:55.045417 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:34:55.045425 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:34:55.045436 kernel: SELinux: policy capability open_perms=1 Oct 2 19:34:55.045447 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:34:55.045458 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:34:55.045466 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:34:55.045477 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:34:55.045485 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:34:55.045494 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:34:55.045505 systemd[1]: Successfully loaded SELinux policy in 308.819ms. Oct 2 19:34:55.045519 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 46.644ms. Oct 2 19:34:55.045532 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:34:55.045545 systemd[1]: Detected virtualization microsoft. Oct 2 19:34:55.045555 systemd[1]: Detected architecture x86-64. Oct 2 19:34:55.045565 systemd[1]: Detected first boot. Oct 2 19:34:55.045577 systemd[1]: Hostname set to . Oct 2 19:34:55.045588 systemd[1]: Initializing machine ID from random generator. Oct 2 19:34:55.045600 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:34:55.045610 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:34:55.045621 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:34:55.045633 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:34:55.045644 kernel: kauditd_printk_skb: 42 callbacks suppressed Oct 2 19:34:55.045653 kernel: audit: type=1334 audit(1696275294.491:90): prog-id=12 op=LOAD Oct 2 19:34:55.045666 kernel: audit: type=1334 audit(1696275294.491:91): prog-id=3 op=UNLOAD Oct 2 19:34:55.045676 kernel: audit: type=1334 audit(1696275294.496:92): prog-id=13 op=LOAD Oct 2 19:34:55.045726 kernel: audit: type=1334 audit(1696275294.501:93): prog-id=14 op=LOAD Oct 2 19:34:55.045735 kernel: audit: type=1334 audit(1696275294.501:94): prog-id=4 op=UNLOAD Oct 2 19:34:55.045745 kernel: audit: type=1334 audit(1696275294.501:95): prog-id=5 op=UNLOAD Oct 2 19:34:55.045755 kernel: audit: type=1334 audit(1696275294.506:96): prog-id=15 op=LOAD Oct 2 19:34:55.045764 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:34:55.045777 kernel: audit: type=1334 audit(1696275294.506:97): prog-id=12 op=UNLOAD Oct 2 19:34:55.045788 kernel: audit: type=1334 audit(1696275294.511:98): prog-id=16 op=LOAD Oct 2 19:34:55.045799 kernel: audit: type=1334 audit(1696275294.516:99): prog-id=17 op=LOAD Oct 2 19:34:55.045810 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:34:55.045820 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:34:55.045836 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:34:55.045854 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:34:55.045878 systemd[1]: Created slice system-getty.slice. Oct 2 19:34:55.045900 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:34:55.045923 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:34:55.045942 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:34:55.045959 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:34:55.045978 systemd[1]: Created slice user.slice. Oct 2 19:34:55.045997 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:34:55.046017 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:34:55.046034 systemd[1]: Set up automount boot.automount. Oct 2 19:34:55.046053 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:34:55.046078 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:34:55.046097 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:34:55.046115 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:34:55.046132 systemd[1]: Reached target integritysetup.target. Oct 2 19:34:55.046152 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:34:55.046174 systemd[1]: Reached target remote-fs.target. Oct 2 19:34:55.046191 systemd[1]: Reached target slices.target. Oct 2 19:34:55.046215 systemd[1]: Reached target swap.target. Oct 2 19:34:55.046232 systemd[1]: Reached target torcx.target. Oct 2 19:34:55.046250 systemd[1]: Reached target veritysetup.target. Oct 2 19:34:55.046268 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:34:55.046286 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:34:55.046306 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:34:55.046330 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:34:55.046349 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:34:55.046368 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:34:55.046386 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:34:55.046407 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:34:55.046428 systemd[1]: Mounting media.mount... Oct 2 19:34:55.046447 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:34:55.046466 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:34:55.046489 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:34:55.046506 systemd[1]: Mounting tmp.mount... Oct 2 19:34:55.046526 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:34:55.046545 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:34:55.046567 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:34:55.046594 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:34:55.046612 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:34:55.046630 systemd[1]: Starting modprobe@drm.service... Oct 2 19:34:55.046650 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:34:55.046671 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:34:55.046699 systemd[1]: Starting modprobe@loop.service... Oct 2 19:34:55.046715 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:34:55.046737 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:34:55.046752 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:34:55.046770 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:34:55.046786 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:34:55.046800 systemd[1]: Stopped systemd-journald.service. Oct 2 19:34:55.046813 kernel: loop: module loaded Oct 2 19:34:55.046837 systemd[1]: Starting systemd-journald.service... Oct 2 19:34:55.046852 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:34:55.046867 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:34:55.046879 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:34:55.049137 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:34:55.049157 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:34:55.049175 systemd[1]: Stopped verity-setup.service. Oct 2 19:34:55.049194 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:34:55.049211 kernel: fuse: init (API version 7.34) Oct 2 19:34:55.049234 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:34:55.049253 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:34:55.049272 systemd[1]: Mounted media.mount. Oct 2 19:34:55.049288 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:34:55.049301 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:34:55.049314 systemd[1]: Mounted tmp.mount. Oct 2 19:34:55.049326 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:34:55.049337 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:34:55.049349 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:34:55.049362 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:34:55.049374 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:34:55.049390 systemd-journald[1143]: Journal started Oct 2 19:34:55.049436 systemd-journald[1143]: Runtime Journal (/run/log/journal/cab52f71bdee4bacb8b5f244b723320d) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:34:43.780000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:34:44.539000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:34:44.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:34:44.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:34:44.555000 audit: BPF prog-id=10 op=LOAD Oct 2 19:34:44.555000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:34:44.556000 audit: BPF prog-id=11 op=LOAD Oct 2 19:34:44.556000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:34:54.491000 audit: BPF prog-id=12 op=LOAD Oct 2 19:34:54.491000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:34:54.496000 audit: BPF prog-id=13 op=LOAD Oct 2 19:34:54.501000 audit: BPF prog-id=14 op=LOAD Oct 2 19:34:54.501000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:34:54.501000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:34:54.506000 audit: BPF prog-id=15 op=LOAD Oct 2 19:34:54.506000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:34:54.511000 audit: BPF prog-id=16 op=LOAD Oct 2 19:34:54.516000 audit: BPF prog-id=17 op=LOAD Oct 2 19:34:54.516000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:34:54.516000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:34:54.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.554000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:34:54.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.914000 audit: BPF prog-id=18 op=LOAD Oct 2 19:34:54.914000 audit: BPF prog-id=19 op=LOAD Oct 2 19:34:54.914000 audit: BPF prog-id=20 op=LOAD Oct 2 19:34:54.914000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:34:54.914000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:34:54.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.042000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:34:55.042000 audit[1143]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffd5d412910 a2=4000 a3=7ffd5d4129ac items=0 ppid=1 pid=1143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:55.042000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:34:55.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.048000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.490574 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:34:45.918113 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:34:54.517469 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:34:45.918513 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:34:45.918536 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:34:45.918572 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:34:45.918583 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:34:45.918649 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:34:45.918664 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:34:45.918923 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:34:45.918969 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:34:45.918983 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:34:45.919445 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:34:45.919495 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:34:45.919518 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:34:45.919535 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:34:45.919554 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:34:45.919570 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:34:53.268246 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:53.268496 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:53.268649 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:53.268856 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:53.268904 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:34:53.268956 /usr/lib/systemd/system-generators/torcx-generator[1050]: time="2023-10-02T19:34:53Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:34:55.055493 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:34:55.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.065180 systemd[1]: Started systemd-journald.service. Oct 2 19:34:55.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.068102 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:34:55.068299 systemd[1]: Finished modprobe@drm.service. Oct 2 19:34:55.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.070929 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:34:55.071068 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:34:55.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.073868 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:34:55.074069 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:34:55.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.076636 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:34:55.076811 systemd[1]: Finished modprobe@loop.service. Oct 2 19:34:55.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.079601 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:34:55.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.083870 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:34:55.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.086725 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:34:55.089525 systemd[1]: Reached target network-pre.target. Oct 2 19:34:55.093421 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:34:55.096876 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:34:55.101421 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:34:55.116912 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:34:55.120259 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:34:55.122645 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:34:55.123821 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:34:55.125838 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:34:55.126899 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:34:55.131127 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:34:55.136424 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:34:55.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.138975 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:34:55.141440 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:34:55.145890 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:34:55.154461 udevadm[1173]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:34:55.159059 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:34:55.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.161677 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:34:55.177676 systemd-journald[1143]: Time spent on flushing to /var/log/journal/cab52f71bdee4bacb8b5f244b723320d is 24.731ms for 1182 entries. Oct 2 19:34:55.177676 systemd-journald[1143]: System Journal (/var/log/journal/cab52f71bdee4bacb8b5f244b723320d) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:34:55.258248 systemd-journald[1143]: Received client request to flush runtime journal. Oct 2 19:34:55.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.206591 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:34:55.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.259263 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:34:55.640590 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:34:55.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.644503 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:34:56.003209 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:34:56.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:56.478425 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:34:56.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:56.480000 audit: BPF prog-id=21 op=LOAD Oct 2 19:34:56.480000 audit: BPF prog-id=22 op=LOAD Oct 2 19:34:56.480000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:34:56.480000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:34:56.482376 systemd[1]: Starting systemd-udevd.service... Oct 2 19:34:56.499210 systemd-udevd[1178]: Using default interface naming scheme 'v252'. Oct 2 19:34:57.467759 systemd[1]: Started systemd-udevd.service. Oct 2 19:34:57.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.471000 audit: BPF prog-id=23 op=LOAD Oct 2 19:34:57.475344 systemd[1]: Starting systemd-networkd.service... Oct 2 19:34:57.512771 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:34:57.559000 audit[1199]: AVC avc: denied { confidentiality } for pid=1199 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:34:57.567714 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:34:57.583834 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:34:57.583906 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:34:57.591699 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:34:57.600700 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:34:57.600766 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:34:57.611000 audit: BPF prog-id=24 op=LOAD Oct 2 19:34:57.611000 audit: BPF prog-id=25 op=LOAD Oct 2 19:34:57.611000 audit: BPF prog-id=26 op=LOAD Oct 2 19:34:57.613312 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:34:57.559000 audit[1199]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55d858984930 a1=f884 a2=7f7522541bc5 a3=5 items=10 ppid=1178 pid=1199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.559000 audit: CWD cwd="/" Oct 2 19:34:57.559000 audit: PATH item=0 name=(null) inode=14804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=1 name=(null) inode=14805 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=2 name=(null) inode=14804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=3 name=(null) inode=14806 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=4 name=(null) inode=14804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=5 name=(null) inode=14807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=6 name=(null) inode=14804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=7 name=(null) inode=14808 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=8 name=(null) inode=14804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PATH item=9 name=(null) inode=14809 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:57.559000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:34:57.642704 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:34:57.648703 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:34:57.653595 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:34:57.656758 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:34:57.667447 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:34:57.667495 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:34:57.667515 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:34:58.031328 systemd[1]: Started systemd-userdbd.service. Oct 2 19:34:58.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.252741 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:34:58.260751 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1182) Oct 2 19:34:58.325478 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:34:58.331057 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:34:58.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.335057 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:34:58.389356 systemd-networkd[1188]: lo: Link UP Oct 2 19:34:58.389366 systemd-networkd[1188]: lo: Gained carrier Oct 2 19:34:58.389960 systemd-networkd[1188]: Enumeration completed Oct 2 19:34:58.390074 systemd[1]: Started systemd-networkd.service. Oct 2 19:34:58.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.394451 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:34:58.428576 systemd-networkd[1188]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:34:58.463734 kernel: mlx5_core c66c:00:02.0 enP50796s1: Link up Oct 2 19:34:58.501733 kernel: hv_netvsc 000d3a65-520b-000d-3a65-520b000d3a65 eth0: Data path switched to VF: enP50796s1 Oct 2 19:34:58.502706 systemd-networkd[1188]: enP50796s1: Link UP Oct 2 19:34:58.502870 systemd-networkd[1188]: eth0: Link UP Oct 2 19:34:58.502882 systemd-networkd[1188]: eth0: Gained carrier Oct 2 19:34:58.507987 systemd-networkd[1188]: enP50796s1: Gained carrier Oct 2 19:34:58.537837 systemd-networkd[1188]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:34:58.653766 lvm[1255]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:34:58.679660 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:34:58.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.682427 systemd[1]: Reached target cryptsetup.target. Oct 2 19:34:58.685764 systemd[1]: Starting lvm2-activation.service... Oct 2 19:34:58.691432 lvm[1257]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:34:58.715531 systemd[1]: Finished lvm2-activation.service. Oct 2 19:34:58.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.718440 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:34:58.720882 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:34:58.720918 systemd[1]: Reached target local-fs.target. Oct 2 19:34:58.723333 systemd[1]: Reached target machines.target. Oct 2 19:34:58.726853 systemd[1]: Starting ldconfig.service... Oct 2 19:34:58.744672 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:34:58.744752 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:34:58.745799 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:34:58.749008 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:34:58.752798 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:34:58.756258 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:34:58.756358 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:34:58.757416 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:34:58.784614 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:34:58.791107 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:34:58.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:58.800447 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:34:58.834578 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1259 (bootctl) Oct 2 19:34:58.836225 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:34:58.915317 systemd-tmpfiles[1262]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:34:59.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:59.656357 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:34:59.657245 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:35:00.067913 systemd-networkd[1188]: eth0: Gained IPv6LL Oct 2 19:35:00.073643 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:35:00.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.079497 kernel: kauditd_printk_skb: 74 callbacks suppressed Oct 2 19:35:00.079571 kernel: audit: type=1130 audit(1696275300.075:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.274501 systemd-fsck[1267]: fsck.fat 4.2 (2021-01-31) Oct 2 19:35:00.274501 systemd-fsck[1267]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:35:00.276846 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:35:00.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.282135 systemd[1]: Mounting boot.mount... Oct 2 19:35:00.293829 kernel: audit: type=1130 audit(1696275300.279:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.300693 systemd[1]: Mounted boot.mount. Oct 2 19:35:00.314810 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:35:00.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.329764 kernel: audit: type=1130 audit(1696275300.315:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.544040 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:35:00.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.548405 systemd[1]: Starting audit-rules.service... Oct 2 19:35:00.558729 kernel: audit: type=1130 audit(1696275300.545:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.561671 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:35:00.565793 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:35:00.570548 systemd[1]: Starting systemd-resolved.service... Oct 2 19:35:00.574611 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:35:00.567000 audit: BPF prog-id=27 op=LOAD Oct 2 19:35:00.580746 kernel: audit: type=1334 audit(1696275300.567:163): prog-id=27 op=LOAD Oct 2 19:35:00.571000 audit: BPF prog-id=28 op=LOAD Oct 2 19:35:00.582017 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:35:00.584940 kernel: audit: type=1334 audit(1696275300.571:164): prog-id=28 op=LOAD Oct 2 19:35:00.606000 audit[1279]: SYSTEM_BOOT pid=1279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.609755 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:35:00.622886 kernel: audit: type=1127 audit(1696275300.606:165): pid=1279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.642584 kernel: audit: type=1130 audit(1696275300.624:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.661316 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:35:00.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.679741 kernel: audit: type=1130 audit(1696275300.663:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.664587 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:35:00.743884 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:35:00.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.746816 systemd[1]: Reached target time-set.target. Oct 2 19:35:00.762985 kernel: audit: type=1130 audit(1696275300.744:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.767286 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:35:00.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.797088 systemd-resolved[1276]: Positive Trust Anchors: Oct 2 19:35:00.797455 systemd-resolved[1276]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:35:00.797577 systemd-resolved[1276]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:35:00.871637 systemd-timesyncd[1277]: Contacted time server 162.159.200.123:123 (0.flatcar.pool.ntp.org). Oct 2 19:35:00.871836 systemd-timesyncd[1277]: Initial clock synchronization to Mon 2023-10-02 19:35:00.870729 UTC. Oct 2 19:35:00.918000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:35:00.918000 audit[1294]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc1343c320 a2=420 a3=0 items=0 ppid=1273 pid=1294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:00.918000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:35:00.921069 augenrules[1294]: No rules Oct 2 19:35:00.921946 systemd[1]: Finished audit-rules.service. Oct 2 19:35:00.956235 systemd-resolved[1276]: Using system hostname 'ci-3510.3.0-a-8abed2f532'. Oct 2 19:35:00.957851 systemd[1]: Started systemd-resolved.service. Oct 2 19:35:00.960114 systemd[1]: Reached target network.target. Oct 2 19:35:00.962216 systemd[1]: Reached target network-online.target. Oct 2 19:35:00.964745 systemd[1]: Reached target nss-lookup.target. Oct 2 19:35:07.043282 ldconfig[1258]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:35:07.055601 systemd[1]: Finished ldconfig.service. Oct 2 19:35:07.059233 systemd[1]: Starting systemd-update-done.service... Oct 2 19:35:07.082590 systemd[1]: Finished systemd-update-done.service. Oct 2 19:35:07.085095 systemd[1]: Reached target sysinit.target. Oct 2 19:35:07.087327 systemd[1]: Started motdgen.path. Oct 2 19:35:07.089178 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:35:07.092426 systemd[1]: Started logrotate.timer. Oct 2 19:35:07.094594 systemd[1]: Started mdadm.timer. Oct 2 19:35:07.096542 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:35:07.098756 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:35:07.098794 systemd[1]: Reached target paths.target. Oct 2 19:35:07.100801 systemd[1]: Reached target timers.target. Oct 2 19:35:07.102997 systemd[1]: Listening on dbus.socket. Oct 2 19:35:07.105728 systemd[1]: Starting docker.socket... Oct 2 19:35:07.125328 systemd[1]: Listening on sshd.socket. Oct 2 19:35:07.128117 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:35:07.128684 systemd[1]: Listening on docker.socket. Oct 2 19:35:07.131549 systemd[1]: Reached target sockets.target. Oct 2 19:35:07.133944 systemd[1]: Reached target basic.target. Oct 2 19:35:07.136166 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:35:07.136202 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:35:07.137234 systemd[1]: Starting containerd.service... Oct 2 19:35:07.140268 systemd[1]: Starting dbus.service... Oct 2 19:35:07.143188 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:35:07.146451 systemd[1]: Starting extend-filesystems.service... Oct 2 19:35:07.148663 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:35:07.149923 systemd[1]: Starting motdgen.service... Oct 2 19:35:07.153827 systemd[1]: Started nvidia.service. Oct 2 19:35:07.157066 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:35:07.160243 systemd[1]: Starting prepare-critools.service... Oct 2 19:35:07.163377 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:35:07.166618 systemd[1]: Starting sshd-keygen.service... Oct 2 19:35:07.172245 systemd[1]: Starting systemd-logind.service... Oct 2 19:35:07.174118 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:35:07.174205 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:35:07.174728 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:35:07.175552 systemd[1]: Starting update-engine.service... Oct 2 19:35:07.180015 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:35:07.197899 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:35:07.198126 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:35:07.221683 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:35:07.221930 systemd[1]: Finished motdgen.service. Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda1 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda2 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda3 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found usr Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda4 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda6 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda7 Oct 2 19:35:07.255289 extend-filesystems[1305]: Found sda9 Oct 2 19:35:07.255289 extend-filesystems[1305]: Checking size of /dev/sda9 Oct 2 19:35:07.282061 env[1331]: time="2023-10-02T19:35:07.282002029Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:35:07.301223 jq[1318]: true Oct 2 19:35:07.307975 jq[1304]: false Oct 2 19:35:07.309919 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:35:07.310118 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:35:07.324612 jq[1343]: true Oct 2 19:35:07.338224 tar[1322]: ./ Oct 2 19:35:07.338224 tar[1322]: ./macvlan Oct 2 19:35:07.340835 tar[1323]: crictl Oct 2 19:35:07.343043 systemd-logind[1315]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:35:07.343913 extend-filesystems[1305]: Old size kept for /dev/sda9 Oct 2 19:35:07.347854 extend-filesystems[1305]: Found sr0 Oct 2 19:35:07.346242 systemd-logind[1315]: New seat seat0. Oct 2 19:35:07.351025 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:35:07.359862 systemd[1]: Finished extend-filesystems.service. Oct 2 19:35:07.369741 env[1331]: time="2023-10-02T19:35:07.369146027Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:35:07.369741 env[1331]: time="2023-10-02T19:35:07.369318121Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.370727 env[1331]: time="2023-10-02T19:35:07.370672276Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:07.370807 env[1331]: time="2023-10-02T19:35:07.370711475Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.371012 env[1331]: time="2023-10-02T19:35:07.370982766Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:07.371070 env[1331]: time="2023-10-02T19:35:07.371013665Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.371070 env[1331]: time="2023-10-02T19:35:07.371031164Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:35:07.371070 env[1331]: time="2023-10-02T19:35:07.371045264Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.371183 env[1331]: time="2023-10-02T19:35:07.371139760Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.371407 env[1331]: time="2023-10-02T19:35:07.371379452Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:07.377192 env[1331]: time="2023-10-02T19:35:07.377158960Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:07.377261 env[1331]: time="2023-10-02T19:35:07.377191359Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:35:07.377311 env[1331]: time="2023-10-02T19:35:07.377261457Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:35:07.377311 env[1331]: time="2023-10-02T19:35:07.377278056Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:35:07.395807 env[1331]: time="2023-10-02T19:35:07.395775740Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:35:07.395890 env[1331]: time="2023-10-02T19:35:07.395815739Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:35:07.395890 env[1331]: time="2023-10-02T19:35:07.395834238Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:35:07.395971 env[1331]: time="2023-10-02T19:35:07.395886236Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.395971 env[1331]: time="2023-10-02T19:35:07.395907236Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.395971 env[1331]: time="2023-10-02T19:35:07.395964334Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.395985233Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.396004932Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.396022932Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.396042031Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.396059331Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396087 env[1331]: time="2023-10-02T19:35:07.396076830Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:35:07.396294 env[1331]: time="2023-10-02T19:35:07.396187326Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:35:07.396294 env[1331]: time="2023-10-02T19:35:07.396279623Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:35:07.396673 env[1331]: time="2023-10-02T19:35:07.396649511Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:35:07.396751 env[1331]: time="2023-10-02T19:35:07.396690409Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.396751 env[1331]: time="2023-10-02T19:35:07.396711309Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:35:07.396842 env[1331]: time="2023-10-02T19:35:07.396797406Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.396842 env[1331]: time="2023-10-02T19:35:07.396818205Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.396907 env[1331]: time="2023-10-02T19:35:07.396836405Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.396947 env[1331]: time="2023-10-02T19:35:07.396911002Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.396947 env[1331]: time="2023-10-02T19:35:07.396930101Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397015 env[1331]: time="2023-10-02T19:35:07.396947201Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397015 env[1331]: time="2023-10-02T19:35:07.396967400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397015 env[1331]: time="2023-10-02T19:35:07.396985400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397015 env[1331]: time="2023-10-02T19:35:07.397005699Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:35:07.397176 env[1331]: time="2023-10-02T19:35:07.397152894Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397224 env[1331]: time="2023-10-02T19:35:07.397185193Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397224 env[1331]: time="2023-10-02T19:35:07.397205792Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397305 env[1331]: time="2023-10-02T19:35:07.397222692Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:35:07.397305 env[1331]: time="2023-10-02T19:35:07.397243791Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:35:07.397305 env[1331]: time="2023-10-02T19:35:07.397260191Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:35:07.397305 env[1331]: time="2023-10-02T19:35:07.397284390Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:35:07.397442 env[1331]: time="2023-10-02T19:35:07.397325388Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:35:07.397647 env[1331]: time="2023-10-02T19:35:07.397580080Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.397663177Z" level=info msg="Connect containerd service" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.397705976Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.398452151Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.398736241Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.398786440Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.400237191Z" level=info msg="containerd successfully booted in 0.120622s" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.401153561Z" level=info msg="Start subscribing containerd event" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.401210759Z" level=info msg="Start recovering state" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.402602713Z" level=info msg="Start event monitor" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.402625012Z" level=info msg="Start snapshots syncer" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.402637711Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:35:07.433183 env[1331]: time="2023-10-02T19:35:07.402651911Z" level=info msg="Start streaming server" Oct 2 19:35:07.398896 systemd[1]: Started containerd.service. Oct 2 19:35:07.447982 dbus-daemon[1303]: [system] SELinux support is enabled Oct 2 19:35:07.460902 tar[1322]: ./static Oct 2 19:35:07.448140 systemd[1]: Started dbus.service. Oct 2 19:35:07.453072 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:35:07.453097 systemd[1]: Reached target system-config.target. Oct 2 19:35:07.457413 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:35:07.457433 systemd[1]: Reached target user-config.target. Oct 2 19:35:07.464544 systemd[1]: Started systemd-logind.service. Oct 2 19:35:07.467647 dbus-daemon[1303]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:35:07.479554 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:35:07.494686 tar[1322]: ./vlan Oct 2 19:35:07.539328 bash[1377]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:35:07.539640 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:35:07.576261 tar[1322]: ./portmap Oct 2 19:35:07.672454 tar[1322]: ./host-local Oct 2 19:35:07.753785 tar[1322]: ./vrf Oct 2 19:35:07.827813 tar[1322]: ./bridge Oct 2 19:35:07.923242 tar[1322]: ./tuning Oct 2 19:35:07.990065 tar[1322]: ./firewall Oct 2 19:35:08.077168 tar[1322]: ./host-device Oct 2 19:35:08.081743 update_engine[1317]: I1002 19:35:08.046748 1317 main.cc:92] Flatcar Update Engine starting Oct 2 19:35:08.134625 systemd[1]: Started update-engine.service. Oct 2 19:35:08.139834 systemd[1]: Started locksmithd.service. Oct 2 19:35:08.143689 update_engine[1317]: I1002 19:35:08.142895 1317 update_check_scheduler.cc:74] Next update check in 10m31s Oct 2 19:35:08.162464 tar[1322]: ./sbr Oct 2 19:35:08.179177 systemd[1]: Finished prepare-critools.service. Oct 2 19:35:08.212245 tar[1322]: ./loopback Oct 2 19:35:08.246668 tar[1322]: ./dhcp Oct 2 19:35:08.344733 tar[1322]: ./ptp Oct 2 19:35:08.386816 tar[1322]: ./ipvlan Oct 2 19:35:08.427591 tar[1322]: ./bandwidth Oct 2 19:35:08.517554 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:35:08.536741 sshd_keygen[1325]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:35:08.556664 systemd[1]: Finished sshd-keygen.service. Oct 2 19:35:08.561249 systemd[1]: Starting issuegen.service... Oct 2 19:35:08.565199 systemd[1]: Started waagent.service. Oct 2 19:35:08.569181 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:35:08.569372 systemd[1]: Finished issuegen.service. Oct 2 19:35:08.573252 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:35:08.592884 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:35:08.597076 systemd[1]: Started getty@tty1.service. Oct 2 19:35:08.601099 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:35:08.603792 systemd[1]: Reached target getty.target. Oct 2 19:35:08.606022 systemd[1]: Reached target multi-user.target. Oct 2 19:35:08.609805 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:35:08.619393 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:35:08.619559 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:35:08.622626 systemd[1]: Startup finished in 1.036s (firmware) + 28.527s (loader) + 946ms (kernel) + 23.432s (initrd) + 25.134s (userspace) = 1min 19.076s. Oct 2 19:35:09.071022 login[1426]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 19:35:09.071726 login[1425]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:35:09.095758 systemd[1]: Created slice user-500.slice. Oct 2 19:35:09.097174 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:35:09.099760 systemd-logind[1315]: New session 2 of user core. Oct 2 19:35:09.122362 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:35:09.124135 systemd[1]: Starting user@500.service... Oct 2 19:35:09.127664 (systemd)[1432]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:09.288277 systemd[1432]: Queued start job for default target default.target. Oct 2 19:35:09.288863 systemd[1432]: Reached target paths.target. Oct 2 19:35:09.288891 systemd[1432]: Reached target sockets.target. Oct 2 19:35:09.288907 systemd[1432]: Reached target timers.target. Oct 2 19:35:09.288921 systemd[1432]: Reached target basic.target. Oct 2 19:35:09.289040 systemd[1]: Started user@500.service. Oct 2 19:35:09.290215 systemd[1]: Started session-2.scope. Oct 2 19:35:09.290790 systemd[1432]: Reached target default.target. Oct 2 19:35:09.290961 systemd[1432]: Startup finished in 157ms. Oct 2 19:35:09.697763 locksmithd[1408]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:35:10.073257 login[1426]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:35:10.079139 systemd[1]: Started session-1.scope. Oct 2 19:35:10.079630 systemd-logind[1315]: New session 1 of user core. Oct 2 19:35:15.696474 waagent[1420]: 2023-10-02T19:35:15.696360Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:35:15.700942 waagent[1420]: 2023-10-02T19:35:15.700863Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:35:15.703608 waagent[1420]: 2023-10-02T19:35:15.703543Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:35:15.706349 waagent[1420]: 2023-10-02T19:35:15.706277Z INFO Daemon Daemon Run daemon Oct 2 19:35:15.708945 waagent[1420]: 2023-10-02T19:35:15.708886Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:35:15.721569 waagent[1420]: 2023-10-02T19:35:15.721455Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:35:15.729880 waagent[1420]: 2023-10-02T19:35:15.729779Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:35:15.735151 waagent[1420]: 2023-10-02T19:35:15.735088Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:35:15.737965 waagent[1420]: 2023-10-02T19:35:15.737905Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:35:15.741417 waagent[1420]: 2023-10-02T19:35:15.741355Z INFO Daemon Daemon Activate resource disk Oct 2 19:35:15.744122 waagent[1420]: 2023-10-02T19:35:15.744063Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:35:15.754578 waagent[1420]: 2023-10-02T19:35:15.754515Z INFO Daemon Daemon Found device: None Oct 2 19:35:15.757320 waagent[1420]: 2023-10-02T19:35:15.757258Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:35:15.761640 waagent[1420]: 2023-10-02T19:35:15.761582Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:35:15.768049 waagent[1420]: 2023-10-02T19:35:15.767987Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:35:15.771351 waagent[1420]: 2023-10-02T19:35:15.771290Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:35:15.781864 waagent[1420]: 2023-10-02T19:35:15.781739Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:35:15.790253 waagent[1420]: 2023-10-02T19:35:15.790146Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:35:15.795486 waagent[1420]: 2023-10-02T19:35:15.795419Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:35:15.798324 waagent[1420]: 2023-10-02T19:35:15.798264Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:35:15.847245 waagent[1420]: 2023-10-02T19:35:15.846491Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:35:15.944532 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:35:15.967763 waagent[1420]: 2023-10-02T19:35:15.967516Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:35:15.970871 waagent[1420]: 2023-10-02T19:35:15.970783Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:35:15.974311 waagent[1420]: 2023-10-02T19:35:15.974231Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:35:15.978019 waagent[1420]: 2023-10-02T19:35:15.977957Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:35:15.980910 waagent[1420]: 2023-10-02T19:35:15.980852Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:35:15.983833 waagent[1420]: 2023-10-02T19:35:15.983776Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:35:16.117673 waagent[1420]: 2023-10-02T19:35:16.117583Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:35:16.126334 waagent[1420]: 2023-10-02T19:35:16.118736Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:35:16.126334 waagent[1420]: 2023-10-02T19:35:16.119701Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:35:17.056684 waagent[1420]: 2023-10-02T19:35:17.056529Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:35:17.069709 waagent[1420]: 2023-10-02T19:35:17.069629Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:35:17.073100 waagent[1420]: 2023-10-02T19:35:17.073033Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:35:17.152628 waagent[1420]: 2023-10-02T19:35:17.152501Z INFO Daemon Daemon Found private key matching thumbprint 9D4810A6533E76406047BE5EB4076A6E51A0030B Oct 2 19:35:17.164168 waagent[1420]: 2023-10-02T19:35:17.153033Z INFO Daemon Daemon Certificate with thumbprint 088AD27EE4A219B04C1983FBE5ACC6D66BF24525 has no matching private key. Oct 2 19:35:17.164168 waagent[1420]: 2023-10-02T19:35:17.154281Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:35:17.210295 waagent[1420]: 2023-10-02T19:35:17.210201Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 291a5c31-7d18-4ff5-8d6f-d98d7b35bf9c New eTag: 9825235184148361276] Oct 2 19:35:17.218885 waagent[1420]: 2023-10-02T19:35:17.211340Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:35:17.221143 waagent[1420]: 2023-10-02T19:35:17.221085Z INFO Daemon Daemon Starting provisioning Oct 2 19:35:17.228166 waagent[1420]: 2023-10-02T19:35:17.221382Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:35:17.228166 waagent[1420]: 2023-10-02T19:35:17.222344Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-8abed2f532] Oct 2 19:35:17.242841 waagent[1420]: 2023-10-02T19:35:17.242734Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-8abed2f532] Oct 2 19:35:17.250877 waagent[1420]: 2023-10-02T19:35:17.243335Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:35:17.250877 waagent[1420]: 2023-10-02T19:35:17.244469Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:35:17.257454 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:35:17.257704 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:35:17.257803 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:35:17.258174 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:35:17.262869 systemd-networkd[1188]: eth0: DHCPv6 lease lost Oct 2 19:35:17.264602 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:35:17.264823 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:35:17.267337 systemd[1]: Starting systemd-networkd.service... Oct 2 19:35:17.296922 systemd-networkd[1477]: enP50796s1: Link UP Oct 2 19:35:17.296932 systemd-networkd[1477]: enP50796s1: Gained carrier Oct 2 19:35:17.298292 systemd-networkd[1477]: eth0: Link UP Oct 2 19:35:17.298301 systemd-networkd[1477]: eth0: Gained carrier Oct 2 19:35:17.298738 systemd-networkd[1477]: lo: Link UP Oct 2 19:35:17.298746 systemd-networkd[1477]: lo: Gained carrier Oct 2 19:35:17.299057 systemd-networkd[1477]: eth0: Gained IPv6LL Oct 2 19:35:17.299320 systemd-networkd[1477]: Enumeration completed Oct 2 19:35:17.305410 waagent[1420]: 2023-10-02T19:35:17.300688Z INFO Daemon Daemon Create user account if not exists Oct 2 19:35:17.299411 systemd[1]: Started systemd-networkd.service. Oct 2 19:35:17.304228 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:35:17.307799 waagent[1420]: 2023-10-02T19:35:17.306432Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:35:17.307799 waagent[1420]: 2023-10-02T19:35:17.306761Z INFO Daemon Daemon Configure sudoer Oct 2 19:35:17.308125 waagent[1420]: 2023-10-02T19:35:17.308069Z INFO Daemon Daemon Configure sshd Oct 2 19:35:17.309020 waagent[1420]: 2023-10-02T19:35:17.308968Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:35:17.312314 systemd-networkd[1477]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:35:17.355809 systemd-networkd[1477]: eth0: DHCPv4 address 10.200.8.19/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:35:17.358767 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:35:17.394476 waagent[1420]: 2023-10-02T19:35:17.394353Z INFO Daemon Daemon Decode custom data Oct 2 19:35:17.398999 waagent[1420]: 2023-10-02T19:35:17.395006Z INFO Daemon Daemon Save custom data Oct 2 19:35:18.661991 waagent[1420]: 2023-10-02T19:35:18.661890Z INFO Daemon Daemon Provisioning complete Oct 2 19:35:18.677275 waagent[1420]: 2023-10-02T19:35:18.677195Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:35:18.681264 waagent[1420]: 2023-10-02T19:35:18.681195Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:35:18.687244 waagent[1420]: 2023-10-02T19:35:18.687175Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:35:18.951318 waagent[1486]: 2023-10-02T19:35:18.951150Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:35:18.952056 waagent[1486]: 2023-10-02T19:35:18.951988Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:18.952204 waagent[1486]: 2023-10-02T19:35:18.952149Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:18.963295 waagent[1486]: 2023-10-02T19:35:18.963222Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:35:18.963448 waagent[1486]: 2023-10-02T19:35:18.963395Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:35:19.022478 waagent[1486]: 2023-10-02T19:35:19.022354Z INFO ExtHandler ExtHandler Found private key matching thumbprint 9D4810A6533E76406047BE5EB4076A6E51A0030B Oct 2 19:35:19.022735 waagent[1486]: 2023-10-02T19:35:19.022659Z INFO ExtHandler ExtHandler Certificate with thumbprint 088AD27EE4A219B04C1983FBE5ACC6D66BF24525 has no matching private key. Oct 2 19:35:19.022971 waagent[1486]: 2023-10-02T19:35:19.022919Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:35:19.036079 waagent[1486]: 2023-10-02T19:35:19.036029Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 813f03d1-f480-4151-b203-f93fd2ac6abc New eTag: 9825235184148361276] Oct 2 19:35:19.036631 waagent[1486]: 2023-10-02T19:35:19.036573Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:35:19.126633 waagent[1486]: 2023-10-02T19:35:19.126460Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:35:19.137728 waagent[1486]: 2023-10-02T19:35:19.137617Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1486 Oct 2 19:35:19.141163 waagent[1486]: 2023-10-02T19:35:19.141086Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:35:19.142411 waagent[1486]: 2023-10-02T19:35:19.142353Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:35:19.202194 waagent[1486]: 2023-10-02T19:35:19.202084Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:35:19.202531 waagent[1486]: 2023-10-02T19:35:19.202467Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:35:19.210342 waagent[1486]: 2023-10-02T19:35:19.210286Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:35:19.210872 waagent[1486]: 2023-10-02T19:35:19.210809Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:35:19.211903 waagent[1486]: 2023-10-02T19:35:19.211841Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:35:19.213139 waagent[1486]: 2023-10-02T19:35:19.213080Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:35:19.213967 waagent[1486]: 2023-10-02T19:35:19.213909Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:35:19.214120 waagent[1486]: 2023-10-02T19:35:19.214068Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:19.214664 waagent[1486]: 2023-10-02T19:35:19.214605Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:35:19.214878 waagent[1486]: 2023-10-02T19:35:19.214826Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:35:19.214989 waagent[1486]: 2023-10-02T19:35:19.214915Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:19.215310 waagent[1486]: 2023-10-02T19:35:19.215260Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:19.215423 waagent[1486]: 2023-10-02T19:35:19.215353Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:19.216031 waagent[1486]: 2023-10-02T19:35:19.215978Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:35:19.216473 waagent[1486]: 2023-10-02T19:35:19.216419Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:35:19.217007 waagent[1486]: 2023-10-02T19:35:19.216954Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:35:19.217539 waagent[1486]: 2023-10-02T19:35:19.217485Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:35:19.218068 waagent[1486]: 2023-10-02T19:35:19.218008Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:35:19.220151 waagent[1486]: 2023-10-02T19:35:19.220029Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:35:19.220151 waagent[1486]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:35:19.220151 waagent[1486]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:35:19.220151 waagent[1486]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:35:19.220151 waagent[1486]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:19.220151 waagent[1486]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:19.220151 waagent[1486]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:19.223024 waagent[1486]: 2023-10-02T19:35:19.222810Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:35:19.227644 waagent[1486]: 2023-10-02T19:35:19.227231Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:35:19.238279 waagent[1486]: 2023-10-02T19:35:19.238227Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:35:19.238880 waagent[1486]: 2023-10-02T19:35:19.238830Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:35:19.239665 waagent[1486]: 2023-10-02T19:35:19.239607Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:35:19.248337 waagent[1486]: 2023-10-02T19:35:19.248279Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1477' Oct 2 19:35:19.279669 waagent[1486]: 2023-10-02T19:35:19.279597Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:35:19.367028 waagent[1486]: 2023-10-02T19:35:19.366947Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:35:19.367028 waagent[1486]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:35:19.367028 waagent[1486]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:35:19.367028 waagent[1486]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:65:52:0b brd ff:ff:ff:ff:ff:ff Oct 2 19:35:19.367028 waagent[1486]: 3: enP50796s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:65:52:0b brd ff:ff:ff:ff:ff:ff\ altname enP50796p0s2 Oct 2 19:35:19.367028 waagent[1486]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:35:19.367028 waagent[1486]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:35:19.367028 waagent[1486]: 2: eth0 inet 10.200.8.19/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:35:19.367028 waagent[1486]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:35:19.367028 waagent[1486]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:35:19.367028 waagent[1486]: 2: eth0 inet6 fe80::20d:3aff:fe65:520b/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:35:19.585888 waagent[1486]: 2023-10-02T19:35:19.585808Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:35:19.591310 waagent[1486]: 2023-10-02T19:35:19.591230Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:35:19.591310 waagent[1486]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:19.591310 waagent[1486]: pkts bytes target prot opt in out source destination Oct 2 19:35:19.591310 waagent[1486]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:19.591310 waagent[1486]: pkts bytes target prot opt in out source destination Oct 2 19:35:19.591310 waagent[1486]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:19.591310 waagent[1486]: pkts bytes target prot opt in out source destination Oct 2 19:35:19.591310 waagent[1486]: 19 988 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:35:19.591310 waagent[1486]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:35:19.593194 waagent[1486]: 2023-10-02T19:35:19.593139Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:35:19.728485 waagent[1486]: 2023-10-02T19:35:19.728410Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:35:20.692087 waagent[1420]: 2023-10-02T19:35:20.691924Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:35:20.699318 waagent[1420]: 2023-10-02T19:35:20.699239Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:35:21.687695 waagent[1527]: 2023-10-02T19:35:21.687586Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:35:21.688427 waagent[1527]: 2023-10-02T19:35:21.688361Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:35:21.688570 waagent[1527]: 2023-10-02T19:35:21.688517Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:35:21.697929 waagent[1527]: 2023-10-02T19:35:21.697836Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:35:21.698324 waagent[1527]: 2023-10-02T19:35:21.698266Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:21.698483 waagent[1527]: 2023-10-02T19:35:21.698434Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:21.709648 waagent[1527]: 2023-10-02T19:35:21.709573Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:35:21.723825 waagent[1527]: 2023-10-02T19:35:21.723766Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:35:21.724693 waagent[1527]: 2023-10-02T19:35:21.724633Z INFO ExtHandler Oct 2 19:35:21.724859 waagent[1527]: 2023-10-02T19:35:21.724807Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 32fda6fb-1825-4be7-88b7-056bc69f04e9 eTag: 9825235184148361276 source: Fabric] Oct 2 19:35:21.725538 waagent[1527]: 2023-10-02T19:35:21.725479Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:35:21.726617 waagent[1527]: 2023-10-02T19:35:21.726556Z INFO ExtHandler Oct 2 19:35:21.726764 waagent[1527]: 2023-10-02T19:35:21.726699Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:35:21.733913 waagent[1527]: 2023-10-02T19:35:21.733860Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:35:21.734326 waagent[1527]: 2023-10-02T19:35:21.734278Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:35:21.753518 waagent[1527]: 2023-10-02T19:35:21.753458Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:35:21.815870 waagent[1527]: 2023-10-02T19:35:21.815753Z INFO ExtHandler Downloaded certificate {'thumbprint': '9D4810A6533E76406047BE5EB4076A6E51A0030B', 'hasPrivateKey': True} Oct 2 19:35:21.816789 waagent[1527]: 2023-10-02T19:35:21.816704Z INFO ExtHandler Downloaded certificate {'thumbprint': '088AD27EE4A219B04C1983FBE5ACC6D66BF24525', 'hasPrivateKey': False} Oct 2 19:35:21.817739 waagent[1527]: 2023-10-02T19:35:21.817668Z INFO ExtHandler Fetch goal state completed Oct 2 19:35:21.838368 waagent[1527]: 2023-10-02T19:35:21.838289Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1527 Oct 2 19:35:21.841603 waagent[1527]: 2023-10-02T19:35:21.841537Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:35:21.843089 waagent[1527]: 2023-10-02T19:35:21.843030Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:35:21.847983 waagent[1527]: 2023-10-02T19:35:21.847930Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:35:21.848348 waagent[1527]: 2023-10-02T19:35:21.848292Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:35:21.856030 waagent[1527]: 2023-10-02T19:35:21.855976Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:35:21.856480 waagent[1527]: 2023-10-02T19:35:21.856422Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:35:21.879550 waagent[1527]: 2023-10-02T19:35:21.879452Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:35:21.882224 waagent[1527]: 2023-10-02T19:35:21.882128Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:35:21.887500 waagent[1527]: 2023-10-02T19:35:21.887442Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:35:21.888898 waagent[1527]: 2023-10-02T19:35:21.888840Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:35:21.889465 waagent[1527]: 2023-10-02T19:35:21.889410Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:21.889879 waagent[1527]: 2023-10-02T19:35:21.889823Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:35:21.890286 waagent[1527]: 2023-10-02T19:35:21.890233Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:21.890761 waagent[1527]: 2023-10-02T19:35:21.890697Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:21.891295 waagent[1527]: 2023-10-02T19:35:21.891238Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:35:21.891597 waagent[1527]: 2023-10-02T19:35:21.891547Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:21.892131 waagent[1527]: 2023-10-02T19:35:21.892073Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:35:21.892418 waagent[1527]: 2023-10-02T19:35:21.892365Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:35:21.892418 waagent[1527]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:35:21.892418 waagent[1527]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:35:21.892418 waagent[1527]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:35:21.892418 waagent[1527]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:21.892418 waagent[1527]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:21.892418 waagent[1527]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:21.892698 waagent[1527]: 2023-10-02T19:35:21.892510Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:35:21.892698 waagent[1527]: 2023-10-02T19:35:21.892648Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:35:21.893681 waagent[1527]: 2023-10-02T19:35:21.893624Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:35:21.895872 waagent[1527]: 2023-10-02T19:35:21.895805Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:35:21.905954 waagent[1527]: 2023-10-02T19:35:21.905430Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:35:21.907269 waagent[1527]: 2023-10-02T19:35:21.906126Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:35:21.910151 waagent[1527]: 2023-10-02T19:35:21.910098Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:35:21.921744 waagent[1527]: 2023-10-02T19:35:21.921663Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:35:21.921744 waagent[1527]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:35:21.921744 waagent[1527]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:35:21.921744 waagent[1527]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:65:52:0b brd ff:ff:ff:ff:ff:ff Oct 2 19:35:21.921744 waagent[1527]: 3: enP50796s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:65:52:0b brd ff:ff:ff:ff:ff:ff\ altname enP50796p0s2 Oct 2 19:35:21.921744 waagent[1527]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:35:21.921744 waagent[1527]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:35:21.921744 waagent[1527]: 2: eth0 inet 10.200.8.19/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:35:21.921744 waagent[1527]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:35:21.921744 waagent[1527]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:35:21.921744 waagent[1527]: 2: eth0 inet6 fe80::20d:3aff:fe65:520b/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:35:21.931305 waagent[1527]: 2023-10-02T19:35:21.931227Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:35:21.975127 waagent[1527]: 2023-10-02T19:35:21.974999Z INFO ExtHandler ExtHandler Oct 2 19:35:21.979687 waagent[1527]: 2023-10-02T19:35:21.979537Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 8068c700-0b70-4cea-b551-52b98aa83969 correlation 73e75884-873a-446a-98f0-7ecc7867879e created: 2023-10-02T19:33:38.762161Z] Oct 2 19:35:21.981222 waagent[1527]: 2023-10-02T19:35:21.981153Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:35:21.985619 waagent[1527]: 2023-10-02T19:35:21.985561Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 10 ms] Oct 2 19:35:22.005244 waagent[1527]: 2023-10-02T19:35:22.005177Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:35:22.005244 waagent[1527]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:22.005244 waagent[1527]: pkts bytes target prot opt in out source destination Oct 2 19:35:22.005244 waagent[1527]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:22.005244 waagent[1527]: pkts bytes target prot opt in out source destination Oct 2 19:35:22.005244 waagent[1527]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:22.005244 waagent[1527]: pkts bytes target prot opt in out source destination Oct 2 19:35:22.005244 waagent[1527]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:35:22.005244 waagent[1527]: 169 19298 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:35:22.005244 waagent[1527]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:35:22.016945 waagent[1527]: 2023-10-02T19:35:22.016887Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:35:22.027149 waagent[1527]: 2023-10-02T19:35:22.027074Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: FB2563B6-3063-423A-ADAB-F1E74EBE349E;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:35:45.637918 systemd[1]: Created slice system-sshd.slice. Oct 2 19:35:45.639770 systemd[1]: Started sshd@0-10.200.8.19:22-10.200.12.6:44632.service. Oct 2 19:35:46.071867 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:35:46.472018 sshd[1566]: Accepted publickey for core from 10.200.12.6 port 44632 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:46.473611 sshd[1566]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:46.478468 systemd-logind[1315]: New session 3 of user core. Oct 2 19:35:46.479304 systemd[1]: Started session-3.scope. Oct 2 19:35:47.016247 systemd[1]: Started sshd@1-10.200.8.19:22-10.200.12.6:44634.service. Oct 2 19:35:47.648091 sshd[1571]: Accepted publickey for core from 10.200.12.6 port 44634 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:47.649666 sshd[1571]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:47.655055 systemd[1]: Started session-4.scope. Oct 2 19:35:47.655624 systemd-logind[1315]: New session 4 of user core. Oct 2 19:35:48.093785 sshd[1571]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:48.096817 systemd[1]: sshd@1-10.200.8.19:22-10.200.12.6:44634.service: Deactivated successfully. Oct 2 19:35:48.097651 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:35:48.098252 systemd-logind[1315]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:35:48.098988 systemd-logind[1315]: Removed session 4. Oct 2 19:35:48.199059 systemd[1]: Started sshd@2-10.200.8.19:22-10.200.12.6:41948.service. Oct 2 19:35:48.823253 sshd[1577]: Accepted publickey for core from 10.200.12.6 port 41948 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:48.824928 sshd[1577]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:48.830383 systemd-logind[1315]: New session 5 of user core. Oct 2 19:35:48.830986 systemd[1]: Started session-5.scope. Oct 2 19:35:49.262239 sshd[1577]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:49.265584 systemd[1]: sshd@2-10.200.8.19:22-10.200.12.6:41948.service: Deactivated successfully. Oct 2 19:35:49.266404 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:35:49.267012 systemd-logind[1315]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:35:49.267760 systemd-logind[1315]: Removed session 5. Oct 2 19:35:49.366564 systemd[1]: Started sshd@3-10.200.8.19:22-10.200.12.6:41964.service. Oct 2 19:35:49.985880 sshd[1583]: Accepted publickey for core from 10.200.12.6 port 41964 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:49.987494 sshd[1583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:49.992212 systemd[1]: Started session-6.scope. Oct 2 19:35:49.992644 systemd-logind[1315]: New session 6 of user core. Oct 2 19:35:50.444230 sshd[1583]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:50.447419 systemd[1]: sshd@3-10.200.8.19:22-10.200.12.6:41964.service: Deactivated successfully. Oct 2 19:35:50.448409 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:35:50.449218 systemd-logind[1315]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:35:50.450124 systemd-logind[1315]: Removed session 6. Oct 2 19:35:50.550179 systemd[1]: Started sshd@4-10.200.8.19:22-10.200.12.6:41974.service. Oct 2 19:35:51.179057 sshd[1589]: Accepted publickey for core from 10.200.12.6 port 41974 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:51.180667 sshd[1589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:51.186345 systemd[1]: Started session-7.scope. Oct 2 19:35:51.186910 systemd-logind[1315]: New session 7 of user core. Oct 2 19:35:51.822311 sudo[1592]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:35:51.822585 sudo[1592]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:51.844938 dbus-daemon[1303]: \xd0]\xfd\xf1\xc9U: received setenforce notice (enforcing=-1928001264) Oct 2 19:35:51.846762 sudo[1592]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:51.963551 sshd[1589]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:51.966936 systemd[1]: sshd@4-10.200.8.19:22-10.200.12.6:41974.service: Deactivated successfully. Oct 2 19:35:51.967815 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:35:51.968469 systemd-logind[1315]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:35:51.969285 systemd-logind[1315]: Removed session 7. Oct 2 19:35:52.068369 systemd[1]: Started sshd@5-10.200.8.19:22-10.200.12.6:41986.service. Oct 2 19:35:52.693661 sshd[1596]: Accepted publickey for core from 10.200.12.6 port 41986 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:52.695089 sshd[1596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:52.699777 systemd[1]: Started session-8.scope. Oct 2 19:35:52.700351 systemd-logind[1315]: New session 8 of user core. Oct 2 19:35:53.036949 sudo[1600]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:35:53.037208 sudo[1600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:53.040073 sudo[1600]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:53.044488 sudo[1599]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:35:53.044764 sudo[1599]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:53.053309 systemd[1]: Stopping audit-rules.service... Oct 2 19:35:53.054000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:35:53.057616 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:35:53.057677 kernel: audit: type=1305 audit(1696275353.054:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:35:53.057855 auditctl[1603]: No rules Oct 2 19:35:53.058250 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:35:53.054000 audit[1603]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffda67edc0 a2=420 a3=0 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:53.058406 systemd[1]: Stopped audit-rules.service. Oct 2 19:35:53.066425 systemd[1]: Starting audit-rules.service... Oct 2 19:35:53.081406 kernel: audit: type=1300 audit(1696275353.054:171): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffda67edc0 a2=420 a3=0 items=0 ppid=1 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:53.081482 kernel: audit: type=1327 audit(1696275353.054:171): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:35:53.054000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:35:53.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.088054 augenrules[1620]: No rules Oct 2 19:35:53.088801 systemd[1]: Finished audit-rules.service. Oct 2 19:35:53.089784 sudo[1599]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:53.097152 kernel: audit: type=1131 audit(1696275353.057:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.097217 kernel: audit: type=1130 audit(1696275353.085:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.108746 kernel: audit: type=1106 audit(1696275353.085:174): pid=1599 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.085000 audit[1599]: USER_END pid=1599 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.122172 kernel: audit: type=1104 audit(1696275353.085:175): pid=1599 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.085000 audit[1599]: CRED_DISP pid=1599 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.122285 update_engine[1317]: I1002 19:35:53.121636 1317 update_attempter.cc:505] Updating boot flags... Oct 2 19:35:53.192165 sshd[1596]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:53.195000 audit[1596]: USER_END pid=1596 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.199233 systemd[1]: sshd@5-10.200.8.19:22-10.200.12.6:41986.service: Deactivated successfully. Oct 2 19:35:53.202136 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:35:53.205696 systemd-logind[1315]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:35:53.206737 systemd-logind[1315]: Removed session 8. Oct 2 19:35:53.215797 kernel: audit: type=1106 audit(1696275353.195:176): pid=1596 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.195000 audit[1596]: CRED_DISP pid=1596 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.257141 kernel: audit: type=1104 audit(1696275353.195:177): pid=1596 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.257217 kernel: audit: type=1131 audit(1696275353.198:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.19:22-10.200.12.6:41986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.19:22-10.200.12.6:41986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.19:22-10.200.12.6:41988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.423827 systemd[1]: Started sshd@6-10.200.8.19:22-10.200.12.6:41988.service. Oct 2 19:35:54.251000 audit[1665]: USER_ACCT pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.252601 sshd[1665]: Accepted publickey for core from 10.200.12.6 port 41988 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:54.253000 audit[1665]: CRED_ACQ pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.253000 audit[1665]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedfe5c790 a2=3 a3=0 items=0 ppid=1 pid=1665 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:54.253000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:54.254221 sshd[1665]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:54.258783 systemd[1]: Started session-9.scope. Oct 2 19:35:54.259457 systemd-logind[1315]: New session 9 of user core. Oct 2 19:35:54.262000 audit[1665]: USER_START pid=1665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.264000 audit[1667]: CRED_ACQ pid=1667 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.593000 audit[1668]: USER_ACCT pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:54.593000 audit[1668]: CRED_REFR pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:54.593890 sudo[1668]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:35:54.594155 sudo[1668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:54.595000 audit[1668]: USER_START pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:55.525776 systemd[1]: Starting docker.service... Oct 2 19:35:55.564582 env[1683]: time="2023-10-02T19:35:55.564524009Z" level=info msg="Starting up" Oct 2 19:35:55.565627 env[1683]: time="2023-10-02T19:35:55.565590708Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:35:55.565627 env[1683]: time="2023-10-02T19:35:55.565610808Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:35:55.565798 env[1683]: time="2023-10-02T19:35:55.565630208Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:35:55.565798 env[1683]: time="2023-10-02T19:35:55.565642108Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:35:55.567325 env[1683]: time="2023-10-02T19:35:55.567298205Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:35:55.567325 env[1683]: time="2023-10-02T19:35:55.567317105Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:35:55.567435 env[1683]: time="2023-10-02T19:35:55.567333005Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:35:55.567435 env[1683]: time="2023-10-02T19:35:55.567343205Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:35:55.642970 env[1683]: time="2023-10-02T19:35:55.642925491Z" level=info msg="Loading containers: start." Oct 2 19:35:55.677000 audit[1709]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.677000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffef5fc4fb0 a2=0 a3=7ffef5fc4f9c items=0 ppid=1683 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.677000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:35:55.679000 audit[1711]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.679000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe5e3d98e0 a2=0 a3=7ffe5e3d98cc items=0 ppid=1683 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.679000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:35:55.681000 audit[1713]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.681000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffee29b8cf0 a2=0 a3=7ffee29b8cdc items=0 ppid=1683 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:35:55.683000 audit[1715]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.683000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd8a30b570 a2=0 a3=7ffd8a30b55c items=0 ppid=1683 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.683000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:35:55.685000 audit[1717]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.685000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc7ae91aa0 a2=0 a3=7ffc7ae91a8c items=0 ppid=1683 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:35:55.687000 audit[1719]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.687000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0c5cfad0 a2=0 a3=7ffc0c5cfabc items=0 ppid=1683 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.687000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:35:55.707000 audit[1721]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.707000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffda7ef2a40 a2=0 a3=7ffda7ef2a2c items=0 ppid=1683 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:35:55.709000 audit[1723]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.709000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeb03ea620 a2=0 a3=7ffeb03ea60c items=0 ppid=1683 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.709000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:35:55.711000 audit[1725]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.711000 audit[1725]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff8bd603a0 a2=0 a3=7fff8bd6038c items=0 ppid=1683 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.711000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:55.730000 audit[1729]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.730000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffa6feb2d0 a2=0 a3=7fffa6feb2bc items=0 ppid=1683 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.730000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:55.732000 audit[1730]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.732000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffee6974940 a2=0 a3=7ffee697492c items=0 ppid=1683 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.732000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:55.786742 kernel: Initializing XFRM netlink socket Oct 2 19:35:55.824777 env[1683]: time="2023-10-02T19:35:55.824743218Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:35:55.891000 audit[1737]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.891000 audit[1737]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc3a09cd80 a2=0 a3=7ffc3a09cd6c items=0 ppid=1683 pid=1737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.891000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:35:55.920000 audit[1740]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.920000 audit[1740]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffce1d5e890 a2=0 a3=7ffce1d5e87c items=0 ppid=1683 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:35:55.923000 audit[1743]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.923000 audit[1743]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe1b6d2c90 a2=0 a3=7ffe1b6d2c7c items=0 ppid=1683 pid=1743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.923000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:35:55.925000 audit[1745]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.925000 audit[1745]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd585b54a0 a2=0 a3=7ffd585b548c items=0 ppid=1683 pid=1745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.925000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:35:55.927000 audit[1747]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.927000 audit[1747]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdfe7997e0 a2=0 a3=7ffdfe7997cc items=0 ppid=1683 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.927000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:35:55.929000 audit[1749]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.929000 audit[1749]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff852bfde0 a2=0 a3=7fff852bfdcc items=0 ppid=1683 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:35:55.931000 audit[1751]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1751 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.931000 audit[1751]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc3f900180 a2=0 a3=7ffc3f90016c items=0 ppid=1683 pid=1751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:35:55.933000 audit[1753]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1753 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.933000 audit[1753]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc641e6f70 a2=0 a3=7ffc641e6f5c items=0 ppid=1683 pid=1753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:35:55.935000 audit[1755]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.935000 audit[1755]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffeb461c760 a2=0 a3=7ffeb461c74c items=0 ppid=1683 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.935000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:35:55.937000 audit[1757]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.937000 audit[1757]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffec800cd70 a2=0 a3=7ffec800cd5c items=0 ppid=1683 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.937000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:35:55.939000 audit[1759]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.939000 audit[1759]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf52bf810 a2=0 a3=7ffcf52bf7fc items=0 ppid=1683 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.939000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:35:55.940472 systemd-networkd[1477]: docker0: Link UP Oct 2 19:35:55.958000 audit[1763]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.958000 audit[1763]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffaed77190 a2=0 a3=7fffaed7717c items=0 ppid=1683 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.958000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:55.959000 audit[1764]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:55.959000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdaa711370 a2=0 a3=7ffdaa71135c items=0 ppid=1683 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:55.959000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:55.960266 env[1683]: time="2023-10-02T19:35:55.960226214Z" level=info msg="Loading containers: done." Oct 2 19:35:55.970705 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3379079270-merged.mount: Deactivated successfully. Oct 2 19:35:55.995423 env[1683]: time="2023-10-02T19:35:55.995379161Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:35:55.995636 env[1683]: time="2023-10-02T19:35:55.995611061Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:35:55.995765 env[1683]: time="2023-10-02T19:35:55.995745661Z" level=info msg="Daemon has completed initialization" Oct 2 19:35:56.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:56.030347 systemd[1]: Started docker.service. Oct 2 19:35:56.040884 env[1683]: time="2023-10-02T19:35:56.040832197Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:35:56.057055 systemd[1]: Reloading. Oct 2 19:35:56.125074 /usr/lib/systemd/system-generators/torcx-generator[1810]: time="2023-10-02T19:35:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:35:56.125113 /usr/lib/systemd/system-generators/torcx-generator[1810]: time="2023-10-02T19:35:56Z" level=info msg="torcx already run" Oct 2 19:35:56.216162 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:35:56.216183 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:35:56.234698 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.298000 audit: BPF prog-id=35 op=LOAD Oct 2 19:35:56.298000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.300000 audit: BPF prog-id=36 op=LOAD Oct 2 19:35:56.300000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit: BPF prog-id=37 op=LOAD Oct 2 19:35:56.302000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit: BPF prog-id=38 op=LOAD Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.303000 audit: BPF prog-id=39 op=LOAD Oct 2 19:35:56.303000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:35:56.303000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit: BPF prog-id=40 op=LOAD Oct 2 19:35:56.304000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit: BPF prog-id=41 op=LOAD Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.304000 audit: BPF prog-id=42 op=LOAD Oct 2 19:35:56.304000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:35:56.304000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.307000 audit: BPF prog-id=43 op=LOAD Oct 2 19:35:56.307000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit: BPF prog-id=44 op=LOAD Oct 2 19:35:56.308000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit: BPF prog-id=45 op=LOAD Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.308000 audit: BPF prog-id=46 op=LOAD Oct 2 19:35:56.308000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:35:56.309000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit: BPF prog-id=47 op=LOAD Oct 2 19:35:56.310000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.310000 audit: BPF prog-id=48 op=LOAD Oct 2 19:35:56.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:56.311000 audit: BPF prog-id=49 op=LOAD Oct 2 19:35:56.311000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:35:56.311000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:35:56.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:56.323530 systemd[1]: Started kubelet.service. Oct 2 19:35:56.399700 kubelet[1872]: E1002 19:35:56.399577 1872 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:35:56.404025 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:35:56.404180 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:35:56.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:00.471918 env[1331]: time="2023-10-02T19:36:00.471865608Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:36:01.285946 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2174152291.mount: Deactivated successfully. Oct 2 19:36:03.464839 env[1331]: time="2023-10-02T19:36:03.464781537Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:03.471619 env[1331]: time="2023-10-02T19:36:03.471580231Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:03.475272 env[1331]: time="2023-10-02T19:36:03.475239627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:03.479679 env[1331]: time="2023-10-02T19:36:03.479598723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:03.480528 env[1331]: time="2023-10-02T19:36:03.480500823Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:36:03.489837 env[1331]: time="2023-10-02T19:36:03.489812614Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:36:05.547897 env[1331]: time="2023-10-02T19:36:05.547843240Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:05.555735 env[1331]: time="2023-10-02T19:36:05.555677054Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:05.560337 env[1331]: time="2023-10-02T19:36:05.560301563Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:05.566072 env[1331]: time="2023-10-02T19:36:05.566040673Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:05.566683 env[1331]: time="2023-10-02T19:36:05.566650974Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:36:05.576703 env[1331]: time="2023-10-02T19:36:05.576674592Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:36:06.568708 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:36:06.569201 kernel: audit: type=1130 audit(1696275366.551:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.552167 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:36:06.552430 systemd[1]: Stopped kubelet.service. Oct 2 19:36:06.568219 systemd[1]: Started kubelet.service. Oct 2 19:36:06.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.598087 kernel: audit: type=1131 audit(1696275366.551:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.598192 kernel: audit: type=1130 audit(1696275366.567:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:06.654620 kubelet[1901]: E1002 19:36:06.654565 1901 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:36:06.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:06.659279 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:36:06.659438 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:36:06.675735 kernel: audit: type=1131 audit(1696275366.658:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:07.010157 env[1331]: time="2023-10-02T19:36:07.010020219Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:07.019221 env[1331]: time="2023-10-02T19:36:07.019183827Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:07.026954 env[1331]: time="2023-10-02T19:36:07.026920502Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:07.031216 env[1331]: time="2023-10-02T19:36:07.031138798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:07.031909 env[1331]: time="2023-10-02T19:36:07.031878314Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:36:07.042029 env[1331]: time="2023-10-02T19:36:07.041997744Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:36:08.284206 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2964572693.mount: Deactivated successfully. Oct 2 19:36:08.765083 env[1331]: time="2023-10-02T19:36:08.765030126Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.770919 env[1331]: time="2023-10-02T19:36:08.770877055Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.774971 env[1331]: time="2023-10-02T19:36:08.774932744Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.778069 env[1331]: time="2023-10-02T19:36:08.778032012Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.778507 env[1331]: time="2023-10-02T19:36:08.778475222Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:36:08.787841 env[1331]: time="2023-10-02T19:36:08.787814728Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:36:09.409625 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount575357654.mount: Deactivated successfully. Oct 2 19:36:09.438545 env[1331]: time="2023-10-02T19:36:09.438495405Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:09.448175 env[1331]: time="2023-10-02T19:36:09.448137811Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:09.451960 env[1331]: time="2023-10-02T19:36:09.451928393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:09.458618 env[1331]: time="2023-10-02T19:36:09.458587735Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:09.459047 env[1331]: time="2023-10-02T19:36:09.459016044Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:36:09.468474 env[1331]: time="2023-10-02T19:36:09.468447647Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:36:10.339932 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount663402001.mount: Deactivated successfully. Oct 2 19:36:14.498463 env[1331]: time="2023-10-02T19:36:14.498406681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:14.508814 env[1331]: time="2023-10-02T19:36:14.508769274Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:14.514041 env[1331]: time="2023-10-02T19:36:14.514003972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:14.519376 env[1331]: time="2023-10-02T19:36:14.519341172Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:14.519898 env[1331]: time="2023-10-02T19:36:14.519865681Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:36:14.530008 env[1331]: time="2023-10-02T19:36:14.529974870Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:36:15.191627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3173342229.mount: Deactivated successfully. Oct 2 19:36:15.822588 env[1331]: time="2023-10-02T19:36:15.822534288Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.829532 env[1331]: time="2023-10-02T19:36:15.829492614Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.833383 env[1331]: time="2023-10-02T19:36:15.833346584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.836326 env[1331]: time="2023-10-02T19:36:15.836295638Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.836795 env[1331]: time="2023-10-02T19:36:15.836764246Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:36:16.725426 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:36:16.725687 systemd[1]: Stopped kubelet.service. Oct 2 19:36:16.741316 kernel: audit: type=1130 audit(1696275376.724:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.727456 systemd[1]: Started kubelet.service. Oct 2 19:36:16.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.765906 kernel: audit: type=1131 audit(1696275376.725:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.782242 kernel: audit: type=1130 audit(1696275376.725:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:16.820567 kubelet[1980]: E1002 19:36:16.820520 1980 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:36:16.822988 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:36:16.823144 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:36:16.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:16.839811 kernel: audit: type=1131 audit(1696275376.822:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:17.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.868366 systemd[1]: Stopped kubelet.service. Oct 2 19:36:17.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.897086 kernel: audit: type=1130 audit(1696275377.867:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.897206 kernel: audit: type=1131 audit(1696275377.867:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.903218 systemd[1]: Reloading. Oct 2 19:36:17.982977 /usr/lib/systemd/system-generators/torcx-generator[2012]: time="2023-10-02T19:36:17Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:36:17.985828 /usr/lib/systemd/system-generators/torcx-generator[2012]: time="2023-10-02T19:36:17Z" level=info msg="torcx already run" Oct 2 19:36:18.063636 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:36:18.063656 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:36:18.081563 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161859 kernel: audit: type=1400 audit(1696275378.147:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175861 kernel: audit: type=1400 audit(1696275378.147:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202773 kernel: audit: type=1400 audit(1696275378.147:399): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202880 kernel: audit: type=1400 audit(1696275378.147:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit: BPF prog-id=50 op=LOAD Oct 2 19:36:18.161000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit: BPF prog-id=51 op=LOAD Oct 2 19:36:18.175000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit: BPF prog-id=52 op=LOAD Oct 2 19:36:18.189000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit: BPF prog-id=53 op=LOAD Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.202000 audit: BPF prog-id=54 op=LOAD Oct 2 19:36:18.202000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:36:18.202000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit: BPF prog-id=55 op=LOAD Oct 2 19:36:18.203000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit: BPF prog-id=56 op=LOAD Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.203000 audit: BPF prog-id=57 op=LOAD Oct 2 19:36:18.203000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:36:18.203000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.207000 audit: BPF prog-id=58 op=LOAD Oct 2 19:36:18.207000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit: BPF prog-id=59 op=LOAD Oct 2 19:36:18.208000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit: BPF prog-id=60 op=LOAD Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.209000 audit: BPF prog-id=61 op=LOAD Oct 2 19:36:18.209000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:36:18.209000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.210000 audit: BPF prog-id=62 op=LOAD Oct 2 19:36:18.210000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit: BPF prog-id=63 op=LOAD Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.211000 audit: BPF prog-id=64 op=LOAD Oct 2 19:36:18.211000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:36:18.211000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:36:18.227451 systemd[1]: Started kubelet.service. Oct 2 19:36:18.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:18.278376 kubelet[2074]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:18.278376 kubelet[2074]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:18.278857 kubelet[2074]: I1002 19:36:18.278414 2074 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:36:18.280003 kubelet[2074]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:18.280003 kubelet[2074]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:18.691239 kubelet[2074]: I1002 19:36:18.691184 2074 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:36:18.691239 kubelet[2074]: I1002 19:36:18.691232 2074 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:36:18.691780 kubelet[2074]: I1002 19:36:18.691759 2074 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:36:18.697386 kubelet[2074]: I1002 19:36:18.697362 2074 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:18.697870 kubelet[2074]: E1002 19:36:18.697852 2074 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.19:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.700327 kubelet[2074]: I1002 19:36:18.700308 2074 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:36:18.700572 kubelet[2074]: I1002 19:36:18.700557 2074 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:36:18.700663 kubelet[2074]: I1002 19:36:18.700647 2074 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:36:18.700803 kubelet[2074]: I1002 19:36:18.700677 2074 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:36:18.700803 kubelet[2074]: I1002 19:36:18.700725 2074 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:36:18.700903 kubelet[2074]: I1002 19:36:18.700840 2074 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:18.703694 kubelet[2074]: I1002 19:36:18.703674 2074 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:36:18.703694 kubelet[2074]: I1002 19:36:18.703696 2074 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:36:18.703845 kubelet[2074]: I1002 19:36:18.703733 2074 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:36:18.703845 kubelet[2074]: I1002 19:36:18.703751 2074 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:36:18.705133 kubelet[2074]: I1002 19:36:18.705118 2074 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:36:18.705489 kubelet[2074]: W1002 19:36:18.705475 2074 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:36:18.706016 kubelet[2074]: I1002 19:36:18.706000 2074 server.go:1186] "Started kubelet" Oct 2 19:36:18.706241 kubelet[2074]: W1002 19:36:18.706206 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8abed2f532&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.706340 kubelet[2074]: E1002 19:36:18.706330 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8abed2f532&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.707000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.707000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:18.707000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ffd7a0 a1=c000ae6690 a2=c000ffd770 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.707000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:18.707000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.707000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:18.707000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d20360 a1=c000ae66a8 a2=c000ffd830 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.707000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:18.708554 kubelet[2074]: I1002 19:36:18.708093 2074 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:36:18.708554 kubelet[2074]: I1002 19:36:18.708138 2074 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:36:18.708554 kubelet[2074]: I1002 19:36:18.708205 2074 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:36:18.710075 kubelet[2074]: W1002 19:36:18.710041 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.710196 kubelet[2074]: E1002 19:36:18.710182 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.710390 kubelet[2074]: E1002 19:36:18.710309 2074 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8abed2f532.178a61783d02d183", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8abed2f532", UID:"ci-3510.3.0-a-8abed2f532", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8abed2f532"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 36, 18, 705977731, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 36, 18, 705977731, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.19:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.19:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:36:18.710760 kubelet[2074]: E1002 19:36:18.710746 2074 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:36:18.710877 kubelet[2074]: E1002 19:36:18.710865 2074 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:36:18.712774 kubelet[2074]: I1002 19:36:18.712757 2074 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:36:18.713346 kubelet[2074]: I1002 19:36:18.713333 2074 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:36:18.714845 kubelet[2074]: I1002 19:36:18.714831 2074 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:36:18.715017 kubelet[2074]: I1002 19:36:18.715004 2074 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:36:18.715445 kubelet[2074]: W1002 19:36:18.715410 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.714000 audit[2085]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.714000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd666cb070 a2=0 a3=7ffd666cb05c items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.714000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:36:18.715815 kubelet[2074]: E1002 19:36:18.715802 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.716161 kubelet[2074]: E1002 19:36:18.716143 2074 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8abed2f532?timeout=10s": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.717000 audit[2086]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.717000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe22382870 a2=0 a3=7ffe2238285c items=0 ppid=2074 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.717000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:36:18.721000 audit[2088]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.721000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffee17d07f0 a2=0 a3=7ffee17d07dc items=0 ppid=2074 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.721000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:18.726000 audit[2090]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.726000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd26258c30 a2=0 a3=7ffd26258c1c items=0 ppid=2074 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:18.756000 audit[2096]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.756000 audit[2096]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcf8500c80 a2=0 a3=7ffcf8500c6c items=0 ppid=2074 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:36:18.758000 audit[2098]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.758000 audit[2098]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff9a0830b0 a2=0 a3=7fff9a08309c items=0 ppid=2074 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.758000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:36:18.794000 audit[2101]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.794000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe11010ea0 a2=0 a3=7ffe11010e8c items=0 ppid=2074 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.794000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:36:18.814000 audit[2104]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.814000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd15093430 a2=0 a3=7ffd1509341c items=0 ppid=2074 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.814000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:36:18.815000 audit[2105]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.815000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff4f0b6080 a2=0 a3=7fff4f0b606c items=0 ppid=2074 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.815000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:36:18.816000 audit[2106]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.816000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeed6d9e70 a2=0 a3=7ffeed6d9e5c items=0 ppid=2074 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.816000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:36:18.818000 audit[2108]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.818000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdaffe8a70 a2=0 a3=7ffdaffe8a5c items=0 ppid=2074 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.818000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:36:18.820000 audit[2110]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.820000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd32a365a0 a2=0 a3=7ffd32a3658c items=0 ppid=2074 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.820000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:36:18.822000 audit[2112]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.822000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffc025cccd0 a2=0 a3=7ffc025cccbc items=0 ppid=2074 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:36:18.825320 kubelet[2074]: I1002 19:36:18.825294 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:18.826125 kubelet[2074]: E1002 19:36:18.826102 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:18.826569 kubelet[2074]: I1002 19:36:18.826547 2074 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:36:18.826569 kubelet[2074]: I1002 19:36:18.826564 2074 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:36:18.826695 kubelet[2074]: I1002 19:36:18.826582 2074 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:18.826000 audit[2114]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.826000 audit[2114]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffdaa6d1830 a2=0 a3=7ffdaa6d181c items=0 ppid=2074 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:36:18.829000 audit[2116]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.829000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffd6cdf55e0 a2=0 a3=7ffd6cdf55cc items=0 ppid=2074 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:36:18.830604 kubelet[2074]: I1002 19:36:18.829933 2074 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:36:18.830000 audit[2117]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2117 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.830000 audit[2117]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff6b830450 a2=0 a3=7fff6b83043c items=0 ppid=2074 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:36:18.830000 audit[2118]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.830000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc095f0bf0 a2=0 a3=7ffc095f0bdc items=0 ppid=2074 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:36:18.831992 kubelet[2074]: I1002 19:36:18.831799 2074 policy_none.go:49] "None policy: Start" Oct 2 19:36:18.832000 audit[2119]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.832000 audit[2119]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdfcd53010 a2=0 a3=7ffdfcd52ffc items=0 ppid=2074 pid=2119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.832000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:36:18.832000 audit[2120]: NETFILTER_CFG table=nat:48 family=2 entries=1 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.832000 audit[2120]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe81d53110 a2=0 a3=7ffe81d530fc items=0 ppid=2074 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:36:18.834000 audit[2122]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:18.834000 audit[2122]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe7ab7160 a2=0 a3=7fffe7ab714c items=0 ppid=2074 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:36:18.834000 audit[2123]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_rule pid=2123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.834000 audit[2123]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcc4a16590 a2=0 a3=7ffcc4a1657c items=0 ppid=2074 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:36:18.836170 kubelet[2074]: I1002 19:36:18.836156 2074 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:36:18.836277 kubelet[2074]: I1002 19:36:18.836266 2074 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:36:18.835000 audit[2124]: NETFILTER_CFG table=filter:51 family=10 entries=2 op=nft_register_chain pid=2124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.835000 audit[2124]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7fffb060c500 a2=0 a3=7fffb060c4ec items=0 ppid=2074 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:36:18.838000 audit[2126]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=2126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.838000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd050da700 a2=0 a3=7ffd050da6ec items=0 ppid=2074 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:36:18.838000 audit[2127]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.838000 audit[2127]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdacd727a0 a2=0 a3=7ffdacd7278c items=0 ppid=2074 pid=2127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:36:18.839000 audit[2128]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_chain pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.839000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffba178390 a2=0 a3=7fffba17837c items=0 ppid=2074 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:36:18.843000 audit[2130]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.843000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd181091e0 a2=0 a3=7ffd181091cc items=0 ppid=2074 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:36:18.845862 systemd[1]: Created slice kubepods.slice. Oct 2 19:36:18.850317 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:36:18.850000 audit[2132]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=2132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.850000 audit[2132]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd067daa80 a2=0 a3=7ffd067daa6c items=0 ppid=2074 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:36:18.854372 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:36:18.855000 audit[2134]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.855000 audit[2134]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe576fa500 a2=0 a3=7ffe576fa4ec items=0 ppid=2074 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.855000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:36:18.857000 audit[2136]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.857000 audit[2136]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffce152b370 a2=0 a3=7ffce152b35c items=0 ppid=2074 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:36:18.860000 audit[2138]: NETFILTER_CFG table=nat:59 family=10 entries=1 op=nft_register_rule pid=2138 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.860000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffef3b97290 a2=0 a3=7ffef3b9727c items=0 ppid=2074 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:36:18.861886 kubelet[2074]: I1002 19:36:18.861860 2074 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:36:18.861886 kubelet[2074]: I1002 19:36:18.861883 2074 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:36:18.861987 kubelet[2074]: I1002 19:36:18.861902 2074 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:36:18.861987 kubelet[2074]: E1002 19:36:18.861969 2074 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:36:18.862000 audit[2139]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.862000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcff0c1ae0 a2=0 a3=7ffcff0c1acc items=0 ppid=2074 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:36:18.863000 audit[2140]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.863000 audit[2140]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0021f9e0 a2=0 a3=7ffc0021f9cc items=0 ppid=2074 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.863000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:36:18.864000 audit[2141]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:18.864000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc99734d60 a2=0 a3=7ffc99734d4c items=0 ppid=2074 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:36:18.865334 kubelet[2074]: W1002 19:36:18.865295 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.865470 kubelet[2074]: E1002 19:36:18.865448 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.865683 kubelet[2074]: I1002 19:36:18.865662 2074 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:36:18.864000 audit[2074]: AVC avc: denied { mac_admin } for pid=2074 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.864000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:18.864000 audit[2074]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cb8210 a1=c000edc480 a2=c000cb81e0 a3=25 items=0 ppid=1 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.864000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:18.865988 kubelet[2074]: I1002 19:36:18.865748 2074 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:36:18.865988 kubelet[2074]: I1002 19:36:18.865915 2074 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:36:18.867322 kubelet[2074]: E1002 19:36:18.867306 2074 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-8abed2f532\" not found" Oct 2 19:36:18.917560 kubelet[2074]: E1002 19:36:18.917508 2074 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8abed2f532?timeout=10s": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:18.964661 kubelet[2074]: I1002 19:36:18.962707 2074 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:18.966408 kubelet[2074]: I1002 19:36:18.966387 2074 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:18.967935 kubelet[2074]: I1002 19:36:18.967917 2074 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:18.969679 kubelet[2074]: I1002 19:36:18.969658 2074 status_manager.go:698] "Failed to get status for pod" podUID=a26f8e928ba8ac253792feadcf919c6a pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" err="Get \"https://10.200.8.19:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-8abed2f532\": dial tcp 10.200.8.19:6443: connect: connection refused" Oct 2 19:36:18.972172 kubelet[2074]: I1002 19:36:18.972140 2074 status_manager.go:698] "Failed to get status for pod" podUID=e54175176e79625e391725b01ec2d9ae pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" err="Get \"https://10.200.8.19:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-8abed2f532\": dial tcp 10.200.8.19:6443: connect: connection refused" Oct 2 19:36:18.975623 systemd[1]: Created slice kubepods-burstable-poda26f8e928ba8ac253792feadcf919c6a.slice. Oct 2 19:36:18.976409 kubelet[2074]: I1002 19:36:18.976182 2074 status_manager.go:698] "Failed to get status for pod" podUID=482f242316002850971c02e3435d9af7 pod="kube-system/kube-scheduler-ci-3510.3.0-a-8abed2f532" err="Get \"https://10.200.8.19:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-8abed2f532\": dial tcp 10.200.8.19:6443: connect: connection refused" Oct 2 19:36:18.983709 systemd[1]: Created slice kubepods-burstable-pode54175176e79625e391725b01ec2d9ae.slice. Oct 2 19:36:18.993432 systemd[1]: Created slice kubepods-burstable-pod482f242316002850971c02e3435d9af7.slice. Oct 2 19:36:19.016675 kubelet[2074]: I1002 19:36:19.016648 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/482f242316002850971c02e3435d9af7-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-8abed2f532\" (UID: \"482f242316002850971c02e3435d9af7\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.016829 kubelet[2074]: I1002 19:36:19.016698 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.016829 kubelet[2074]: I1002 19:36:19.016747 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.016829 kubelet[2074]: I1002 19:36:19.016793 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.016829 kubelet[2074]: I1002 19:36:19.016830 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.017033 kubelet[2074]: I1002 19:36:19.016866 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.017033 kubelet[2074]: I1002 19:36:19.016907 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.017033 kubelet[2074]: I1002 19:36:19.016947 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.017033 kubelet[2074]: I1002 19:36:19.016985 2074 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.028153 kubelet[2074]: I1002 19:36:19.028134 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.028508 kubelet[2074]: E1002 19:36:19.028483 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.282978 env[1331]: time="2023-10-02T19:36:19.282835669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-8abed2f532,Uid:a26f8e928ba8ac253792feadcf919c6a,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:19.287163 env[1331]: time="2023-10-02T19:36:19.286393827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-8abed2f532,Uid:e54175176e79625e391725b01ec2d9ae,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:19.296968 env[1331]: time="2023-10-02T19:36:19.296928599Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-8abed2f532,Uid:482f242316002850971c02e3435d9af7,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:19.320060 kubelet[2074]: E1002 19:36:19.319847 2074 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8abed2f532?timeout=10s": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:19.430767 kubelet[2074]: I1002 19:36:19.430739 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.431076 kubelet[2074]: E1002 19:36:19.431056 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:19.698886 kubelet[2074]: W1002 19:36:19.698829 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8abed2f532&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:19.698886 kubelet[2074]: E1002 19:36:19.698889 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.19:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8abed2f532&limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:19.717214 kubelet[2074]: W1002 19:36:19.717170 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:19.717214 kubelet[2074]: E1002 19:36:19.717216 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.19:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:19.771379 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount850902832.mount: Deactivated successfully. Oct 2 19:36:19.795580 env[1331]: time="2023-10-02T19:36:19.795537131Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.800245 env[1331]: time="2023-10-02T19:36:19.800205907Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.814565 env[1331]: time="2023-10-02T19:36:19.814524841Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.822196 env[1331]: time="2023-10-02T19:36:19.822159765Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.826554 env[1331]: time="2023-10-02T19:36:19.826518936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.831456 env[1331]: time="2023-10-02T19:36:19.831423416Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.833952 env[1331]: time="2023-10-02T19:36:19.833920057Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.839623 env[1331]: time="2023-10-02T19:36:19.839588449Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.846165 env[1331]: time="2023-10-02T19:36:19.846132156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.849928 env[1331]: time="2023-10-02T19:36:19.849897417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.869178 env[1331]: time="2023-10-02T19:36:19.869143831Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.945934 env[1331]: time="2023-10-02T19:36:19.945877083Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:19.969218 env[1331]: time="2023-10-02T19:36:19.969094761Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:19.969218 env[1331]: time="2023-10-02T19:36:19.969134662Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:19.969525 env[1331]: time="2023-10-02T19:36:19.969148162Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:19.969736 env[1331]: time="2023-10-02T19:36:19.969648670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9543f6d1ba7bacd9574609b8e8beb8f024df4874f69c7a1ce0acfa2ff049b61 pid=2150 runtime=io.containerd.runc.v2 Oct 2 19:36:19.993334 env[1331]: time="2023-10-02T19:36:19.993268956Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:19.993505 env[1331]: time="2023-10-02T19:36:19.993309656Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:19.993642 env[1331]: time="2023-10-02T19:36:19.993494859Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:19.993898 env[1331]: time="2023-10-02T19:36:19.993855365Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0d477c48f4f444b5d214475acbcf28c8b376bd100d3c86b58e46c68cc8b1a440 pid=2169 runtime=io.containerd.runc.v2 Oct 2 19:36:20.004587 systemd[1]: Started cri-containerd-a9543f6d1ba7bacd9574609b8e8beb8f024df4874f69c7a1ce0acfa2ff049b61.scope. Oct 2 19:36:20.026646 systemd[1]: Started cri-containerd-0d477c48f4f444b5d214475acbcf28c8b376bd100d3c86b58e46c68cc8b1a440.scope. Oct 2 19:36:20.032583 kubelet[2074]: W1002 19:36:20.032514 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:20.032702 kubelet[2074]: E1002 19:36:20.032595 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.19:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.034000 audit: BPF prog-id=65 op=LOAD Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353433663664316261376261636439353734363039623865386265 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353433663664316261376261636439353734363039623865386265 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit: BPF prog-id=66 op=LOAD Oct 2 19:36:20.035000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00037c950 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353433663664316261376261636439353734363039623865386265 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit: BPF prog-id=67 op=LOAD Oct 2 19:36:20.035000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00037c998 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353433663664316261376261636439353734363039623865386265 Oct 2 19:36:20.035000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:36:20.035000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.035000 audit: BPF prog-id=68 op=LOAD Oct 2 19:36:20.035000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00037cda8 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139353433663664316261376261636439353734363039623865386265 Oct 2 19:36:20.043062 env[1331]: time="2023-10-02T19:36:20.043005549Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:20.043204 env[1331]: time="2023-10-02T19:36:20.043179151Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:20.043301 env[1331]: time="2023-10-02T19:36:20.043279253Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:20.043531 env[1331]: time="2023-10-02T19:36:20.043499357Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/efd4ae3251c59767881c91ce66480e293d263c85b1775cc8e56fa4102f132dea pid=2211 runtime=io.containerd.runc.v2 Oct 2 19:36:20.064654 systemd[1]: Started cri-containerd-efd4ae3251c59767881c91ce66480e293d263c85b1775cc8e56fa4102f132dea.scope. Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit: BPF prog-id=69 op=LOAD Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2169 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064343737633438663466343434623564323134343735616362636632 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2169 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064343737633438663466343434623564323134343735616362636632 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit: BPF prog-id=70 op=LOAD Oct 2 19:36:20.076000 audit[2184]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388340 items=0 ppid=2169 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064343737633438663466343434623564323134343735616362636632 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.076000 audit: BPF prog-id=71 op=LOAD Oct 2 19:36:20.076000 audit[2184]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000388388 items=0 ppid=2169 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064343737633438663466343434623564323134343735616362636632 Oct 2 19:36:20.077000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:36:20.077000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { perfmon } for pid=2184 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit[2184]: AVC avc: denied { bpf } for pid=2184 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.077000 audit: BPF prog-id=72 op=LOAD Oct 2 19:36:20.077000 audit[2184]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388798 items=0 ppid=2169 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064343737633438663466343434623564323134343735616362636632 Oct 2 19:36:20.090923 kubelet[2074]: W1002 19:36:20.090868 2074 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:20.094597 kubelet[2074]: E1002 19:36:20.090936 2074 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.19:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:20.094709 env[1331]: time="2023-10-02T19:36:20.093102444Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-8abed2f532,Uid:482f242316002850971c02e3435d9af7,Namespace:kube-system,Attempt:0,} returns sandbox id \"a9543f6d1ba7bacd9574609b8e8beb8f024df4874f69c7a1ce0acfa2ff049b61\"" Oct 2 19:36:20.097637 env[1331]: time="2023-10-02T19:36:20.097596216Z" level=info msg="CreateContainer within sandbox \"a9543f6d1ba7bacd9574609b8e8beb8f024df4874f69c7a1ce0acfa2ff049b61\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.101000 audit: BPF prog-id=73 op=LOAD Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2211 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643461653332353163353937363738383163393163653636343830 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2211 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643461653332353163353937363738383163393163653636343830 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.102000 audit: BPF prog-id=74 op=LOAD Oct 2 19:36:20.102000 audit[2221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027f130 items=0 ppid=2211 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643461653332353163353937363738383163393163653636343830 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.103000 audit: BPF prog-id=75 op=LOAD Oct 2 19:36:20.103000 audit[2221]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027f178 items=0 ppid=2211 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643461653332353163353937363738383163393163653636343830 Oct 2 19:36:20.104000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:36:20.104000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { perfmon } for pid=2221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit[2221]: AVC avc: denied { bpf } for pid=2221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.104000 audit: BPF prog-id=76 op=LOAD Oct 2 19:36:20.104000 audit[2221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00027f588 items=0 ppid=2211 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566643461653332353163353937363738383163393163653636343830 Oct 2 19:36:20.120614 kubelet[2074]: E1002 19:36:20.120569 2074 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.8.19:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8abed2f532?timeout=10s": dial tcp 10.200.8.19:6443: connect: connection refused Oct 2 19:36:20.129834 env[1331]: time="2023-10-02T19:36:20.129799927Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-8abed2f532,Uid:a26f8e928ba8ac253792feadcf919c6a,Namespace:kube-system,Attempt:0,} returns sandbox id \"0d477c48f4f444b5d214475acbcf28c8b376bd100d3c86b58e46c68cc8b1a440\"" Oct 2 19:36:20.135215 env[1331]: time="2023-10-02T19:36:20.135179212Z" level=info msg="CreateContainer within sandbox \"0d477c48f4f444b5d214475acbcf28c8b376bd100d3c86b58e46c68cc8b1a440\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:36:20.146553 env[1331]: time="2023-10-02T19:36:20.146516292Z" level=info msg="CreateContainer within sandbox \"a9543f6d1ba7bacd9574609b8e8beb8f024df4874f69c7a1ce0acfa2ff049b61\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c003f352d12e7e796c86a494154881208d7bfdeca092178824153542e157b8b1\"" Oct 2 19:36:20.147047 env[1331]: time="2023-10-02T19:36:20.147021400Z" level=info msg="StartContainer for \"c003f352d12e7e796c86a494154881208d7bfdeca092178824153542e157b8b1\"" Oct 2 19:36:20.147860 env[1331]: time="2023-10-02T19:36:20.147830113Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-8abed2f532,Uid:e54175176e79625e391725b01ec2d9ae,Namespace:kube-system,Attempt:0,} returns sandbox id \"efd4ae3251c59767881c91ce66480e293d263c85b1775cc8e56fa4102f132dea\"" Oct 2 19:36:20.153531 env[1331]: time="2023-10-02T19:36:20.153496703Z" level=info msg="CreateContainer within sandbox \"efd4ae3251c59767881c91ce66480e293d263c85b1775cc8e56fa4102f132dea\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:36:20.165648 systemd[1]: Started cri-containerd-c003f352d12e7e796c86a494154881208d7bfdeca092178824153542e157b8b1.scope. Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.181000 audit: BPF prog-id=77 op=LOAD Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2150 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303366333532643132653765373936633836613439343135343838 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2150 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303366333532643132653765373936633836613439343135343838 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.182000 audit: BPF prog-id=78 op=LOAD Oct 2 19:36:20.182000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024390 items=0 ppid=2150 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303366333532643132653765373936633836613439343135343838 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.183000 audit: BPF prog-id=79 op=LOAD Oct 2 19:36:20.183000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000243d8 items=0 ppid=2150 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.183000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303366333532643132653765373936633836613439343135343838 Oct 2 19:36:20.184000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:36:20.184000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { perfmon } for pid=2274 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit[2274]: AVC avc: denied { bpf } for pid=2274 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.184000 audit: BPF prog-id=80 op=LOAD Oct 2 19:36:20.184000 audit[2274]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000247e8 items=0 ppid=2150 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330303366333532643132653765373936633836613439343135343838 Oct 2 19:36:20.195275 env[1331]: time="2023-10-02T19:36:20.195227066Z" level=info msg="CreateContainer within sandbox \"0d477c48f4f444b5d214475acbcf28c8b376bd100d3c86b58e46c68cc8b1a440\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e3d23ea5fd5a2bde27afeab1ed86f7aacaa3fba40ef60a4e9e328cdf17d087f0\"" Oct 2 19:36:20.195846 env[1331]: time="2023-10-02T19:36:20.195820375Z" level=info msg="StartContainer for \"e3d23ea5fd5a2bde27afeab1ed86f7aacaa3fba40ef60a4e9e328cdf17d087f0\"" Oct 2 19:36:20.205791 env[1331]: time="2023-10-02T19:36:20.205755433Z" level=info msg="CreateContainer within sandbox \"efd4ae3251c59767881c91ce66480e293d263c85b1775cc8e56fa4102f132dea\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"477cdf33f61a3276363edc80a1670d05bef7bde96cb63749c3297210e6a73a77\"" Oct 2 19:36:20.206419 env[1331]: time="2023-10-02T19:36:20.206397843Z" level=info msg="StartContainer for \"477cdf33f61a3276363edc80a1670d05bef7bde96cb63749c3297210e6a73a77\"" Oct 2 19:36:20.230892 systemd[1]: Started cri-containerd-e3d23ea5fd5a2bde27afeab1ed86f7aacaa3fba40ef60a4e9e328cdf17d087f0.scope. Oct 2 19:36:20.249055 kubelet[2074]: I1002 19:36:20.249026 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:20.249339 kubelet[2074]: E1002 19:36:20.249312 2074 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.19:6443/api/v1/nodes\": dial tcp 10.200.8.19:6443: connect: connection refused" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:20.249485 kubelet[2074]: E1002 19:36:20.248805 2074 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8abed2f532.178a61783d02d183", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8abed2f532", UID:"ci-3510.3.0-a-8abed2f532", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8abed2f532"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 36, 18, 705977731, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 36, 18, 705977731, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.19:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.19:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:36:20.257518 systemd[1]: Started cri-containerd-477cdf33f61a3276363edc80a1670d05bef7bde96cb63749c3297210e6a73a77.scope. Oct 2 19:36:20.259789 env[1331]: time="2023-10-02T19:36:20.259751991Z" level=info msg="StartContainer for \"c003f352d12e7e796c86a494154881208d7bfdeca092178824153542e157b8b1\" returns successfully" Oct 2 19:36:20.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit: BPF prog-id=81 op=LOAD Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2211 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437376364663333663631613332373633363365646338306131363730 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2211 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437376364663333663631613332373633363365646338306131363730 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit: BPF prog-id=82 op=LOAD Oct 2 19:36:20.275000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00035de60 items=0 ppid=2211 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437376364663333663631613332373633363365646338306131363730 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.275000 audit: BPF prog-id=83 op=LOAD Oct 2 19:36:20.275000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00035dea8 items=0 ppid=2211 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437376364663333663631613332373633363365646338306131363730 Oct 2 19:36:20.275000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:36:20.275000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.276000 audit: BPF prog-id=84 op=LOAD Oct 2 19:36:20.276000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ce2b8 items=0 ppid=2211 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437376364663333663631613332373633363365646338306131363730 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.284000 audit: BPF prog-id=85 op=LOAD Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2169 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533643233656135666435613262646532376166656162316564383666 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2169 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533643233656135666435613262646532376166656162316564383666 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit: BPF prog-id=86 op=LOAD Oct 2 19:36:20.285000 audit[2299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024ea0 items=0 ppid=2169 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533643233656135666435613262646532376166656162316564383666 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit: BPF prog-id=87 op=LOAD Oct 2 19:36:20.285000 audit[2299]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024ee8 items=0 ppid=2169 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533643233656135666435613262646532376166656162316564383666 Oct 2 19:36:20.285000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:36:20.285000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { perfmon } for pid=2299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit[2299]: AVC avc: denied { bpf } for pid=2299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.285000 audit: BPF prog-id=88 op=LOAD Oct 2 19:36:20.285000 audit[2299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000252f8 items=0 ppid=2169 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533643233656135666435613262646532376166656162316564383666 Oct 2 19:36:20.329087 env[1331]: time="2023-10-02T19:36:20.329045391Z" level=info msg="StartContainer for \"477cdf33f61a3276363edc80a1670d05bef7bde96cb63749c3297210e6a73a77\" returns successfully" Oct 2 19:36:20.354773 env[1331]: time="2023-10-02T19:36:20.354693198Z" level=info msg="StartContainer for \"e3d23ea5fd5a2bde27afeab1ed86f7aacaa3fba40ef60a4e9e328cdf17d087f0\" returns successfully" Oct 2 19:36:21.851441 kubelet[2074]: I1002 19:36:21.851411 2074 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:22.691010 kernel: kauditd_printk_skb: 622 callbacks suppressed Oct 2 19:36:22.691173 kernel: audit: type=1400 audit(1696275382.665:714): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.665000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.690000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.738156 kernel: audit: type=1400 audit(1696275382.690:715): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.738285 kernel: audit: type=1300 audit(1696275382.690:715): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001224040 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:22.690000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001224040 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:22.758089 kernel: audit: type=1327 audit(1696275382.690:715): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:22.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:22.665000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000302cf0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:22.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:22.804928 kernel: audit: type=1300 audit(1696275382.665:714): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000302cf0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:22.805079 kernel: audit: type=1327 audit(1696275382.665:714): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:22.982000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.003301 kernel: audit: type=1400 audit(1696275382.982:716): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.982000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c001018030 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:23.035894 kernel: audit: type=1300 audit(1696275382.982:716): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c001018030 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:22.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:22.982000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.111369 kernel: audit: type=1327 audit(1696275382.982:716): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:23.111486 kernel: audit: type=1400 audit(1696275382.982:717): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.982000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0041d8040 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:22.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:22.983000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:22.983000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c001018540 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:22.983000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:23.011000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.011000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00266df20 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:23.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:23.021000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.021000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c004231fe0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:23.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:23.021000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.021000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0028dc600 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:36:23.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:23.177540 kubelet[2074]: E1002 19:36:23.177478 2074 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-8abed2f532\" not found" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:23.258194 kubelet[2074]: I1002 19:36:23.258076 2074 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:23.713134 kubelet[2074]: I1002 19:36:23.713092 2074 apiserver.go:52] "Watching apiserver" Oct 2 19:36:23.715787 kubelet[2074]: I1002 19:36:23.715755 2074 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:36:23.744125 kubelet[2074]: I1002 19:36:23.744086 2074 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:36:25.818484 systemd[1]: Reloading. Oct 2 19:36:25.905244 /usr/lib/systemd/system-generators/torcx-generator[2401]: time="2023-10-02T19:36:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:36:25.905692 /usr/lib/systemd/system-generators/torcx-generator[2401]: time="2023-10-02T19:36:25Z" level=info msg="torcx already run" Oct 2 19:36:25.991540 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:36:25.991561 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:36:26.009480 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.087000 audit: BPF prog-id=89 op=LOAD Oct 2 19:36:26.087000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.090000 audit: BPF prog-id=90 op=LOAD Oct 2 19:36:26.090000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.092000 audit: BPF prog-id=91 op=LOAD Oct 2 19:36:26.092000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit: BPF prog-id=92 op=LOAD Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.093000 audit: BPF prog-id=93 op=LOAD Oct 2 19:36:26.093000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:36:26.093000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit: BPF prog-id=94 op=LOAD Oct 2 19:36:26.094000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit: BPF prog-id=95 op=LOAD Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.095000 audit: BPF prog-id=96 op=LOAD Oct 2 19:36:26.095000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:36:26.095000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.097000 audit: BPF prog-id=97 op=LOAD Oct 2 19:36:26.097000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.099000 audit: BPF prog-id=98 op=LOAD Oct 2 19:36:26.099000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.100000 audit: BPF prog-id=99 op=LOAD Oct 2 19:36:26.100000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit: BPF prog-id=100 op=LOAD Oct 2 19:36:26.101000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit: BPF prog-id=101 op=LOAD Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit: BPF prog-id=102 op=LOAD Oct 2 19:36:26.102000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:36:26.102000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.103000 audit: BPF prog-id=103 op=LOAD Oct 2 19:36:26.103000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit: BPF prog-id=104 op=LOAD Oct 2 19:36:26.104000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.104000 audit: BPF prog-id=105 op=LOAD Oct 2 19:36:26.104000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit: BPF prog-id=106 op=LOAD Oct 2 19:36:26.106000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit: BPF prog-id=107 op=LOAD Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.106000 audit: BPF prog-id=108 op=LOAD Oct 2 19:36:26.106000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:36:26.106000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.107000 audit: BPF prog-id=109 op=LOAD Oct 2 19:36:26.107000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:36:26.123127 kubelet[2074]: I1002 19:36:26.123093 2074 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:26.123485 systemd[1]: Stopping kubelet.service... Oct 2 19:36:26.146212 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:36:26.146433 systemd[1]: Stopped kubelet.service. Oct 2 19:36:26.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.148474 systemd[1]: Started kubelet.service. Oct 2 19:36:26.228129 kubelet[2465]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:26.228500 kubelet[2465]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:26.228787 kubelet[2465]: I1002 19:36:26.228753 2465 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:36:26.232445 kubelet[2465]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:26.232445 kubelet[2465]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:26.235763 kubelet[2465]: I1002 19:36:26.235738 2465 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:36:26.235763 kubelet[2465]: I1002 19:36:26.235758 2465 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:36:26.236014 kubelet[2465]: I1002 19:36:26.235994 2465 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:36:26.237233 kubelet[2465]: I1002 19:36:26.237211 2465 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:36:26.238112 kubelet[2465]: I1002 19:36:26.238087 2465 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:26.241796 kubelet[2465]: I1002 19:36:26.241778 2465 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:36:26.242021 kubelet[2465]: I1002 19:36:26.242007 2465 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:36:26.242107 kubelet[2465]: I1002 19:36:26.242094 2465 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:36:26.242258 kubelet[2465]: I1002 19:36:26.242122 2465 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:36:26.242258 kubelet[2465]: I1002 19:36:26.242136 2465 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:36:26.242258 kubelet[2465]: I1002 19:36:26.242175 2465 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:26.247095 kubelet[2465]: I1002 19:36:26.247079 2465 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:36:26.247095 kubelet[2465]: I1002 19:36:26.247098 2465 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:36:26.247235 kubelet[2465]: I1002 19:36:26.247122 2465 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:36:26.247235 kubelet[2465]: I1002 19:36:26.247138 2465 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:36:26.252295 kubelet[2465]: I1002 19:36:26.248123 2465 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:36:26.255000 audit[2477]: USER_ACCT pid=2477 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.255961 kubelet[2465]: I1002 19:36:26.255920 2465 server.go:1186] "Started kubelet" Oct 2 19:36:26.256873 sudo[2477]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:36:26.256000 audit[2477]: CRED_REFR pid=2477 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.257166 sudo[2477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:36:26.258000 audit[2477]: USER_START pid=2477 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.271000 audit[2465]: AVC avc: denied { mac_admin } for pid=2465 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.271000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:26.271000 audit[2465]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000db0570 a1=c000bffb90 a2=c000db0540 a3=25 items=0 ppid=1 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:26.271000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:26.271000 audit[2465]: AVC avc: denied { mac_admin } for pid=2465 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.271000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:26.271000 audit[2465]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c597a0 a1=c000bffba8 a2=c000db0600 a3=25 items=0 ppid=1 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:26.271000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:26.272860 kubelet[2465]: I1002 19:36:26.272393 2465 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:36:26.272860 kubelet[2465]: I1002 19:36:26.272458 2465 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:36:26.272860 kubelet[2465]: I1002 19:36:26.272506 2465 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:36:26.280805 kubelet[2465]: I1002 19:36:26.280783 2465 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:36:26.281630 kubelet[2465]: I1002 19:36:26.281610 2465 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:36:26.299925 kubelet[2465]: I1002 19:36:26.296827 2465 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:36:26.300311 kubelet[2465]: E1002 19:36:26.300292 2465 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:36:26.300423 kubelet[2465]: E1002 19:36:26.300412 2465 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:36:26.300633 kubelet[2465]: I1002 19:36:26.300613 2465 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:36:26.377779 kubelet[2465]: I1002 19:36:26.375394 2465 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:36:26.411504 kubelet[2465]: I1002 19:36:26.411483 2465 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.417549 kubelet[2465]: I1002 19:36:26.417532 2465 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:36:26.418460 kubelet[2465]: I1002 19:36:26.418436 2465 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:36:26.418749 kubelet[2465]: I1002 19:36:26.418732 2465 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:26.419648 kubelet[2465]: I1002 19:36:26.419633 2465 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:36:26.419914 kubelet[2465]: I1002 19:36:26.419903 2465 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:36:26.420014 kubelet[2465]: I1002 19:36:26.420006 2465 policy_none.go:49] "None policy: Start" Oct 2 19:36:26.427109 kubelet[2465]: I1002 19:36:26.427094 2465 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:36:26.427577 kubelet[2465]: I1002 19:36:26.427566 2465 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:36:26.428029 kubelet[2465]: I1002 19:36:26.428016 2465 state_mem.go:75] "Updated machine memory state" Oct 2 19:36:26.428312 kubelet[2465]: I1002 19:36:26.427491 2465 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.428458 kubelet[2465]: I1002 19:36:26.428447 2465 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.441306 kubelet[2465]: I1002 19:36:26.441290 2465 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:36:26.440000 audit[2465]: AVC avc: denied { mac_admin } for pid=2465 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:26.440000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:26.440000 audit[2465]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0013a61e0 a1=c001365080 a2=c0013a61b0 a3=25 items=0 ppid=1 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:26.440000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:26.441767 kubelet[2465]: I1002 19:36:26.441753 2465 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:36:26.442044 kubelet[2465]: I1002 19:36:26.442030 2465 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:36:26.486969 kubelet[2465]: I1002 19:36:26.486945 2465 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:36:26.487135 kubelet[2465]: I1002 19:36:26.487127 2465 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:36:26.487342 kubelet[2465]: I1002 19:36:26.487331 2465 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:36:26.487465 kubelet[2465]: E1002 19:36:26.487457 2465 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:36:26.588547 kubelet[2465]: I1002 19:36:26.588511 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:26.588832 kubelet[2465]: I1002 19:36:26.588817 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:26.589545 kubelet[2465]: I1002 19:36:26.589511 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:26.602341 kubelet[2465]: I1002 19:36:26.602320 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.602544 kubelet[2465]: I1002 19:36:26.602533 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.602662 kubelet[2465]: I1002 19:36:26.602652 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.602833 kubelet[2465]: I1002 19:36:26.602820 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.602943 kubelet[2465]: I1002 19:36:26.602936 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a26f8e928ba8ac253792feadcf919c6a-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" (UID: \"a26f8e928ba8ac253792feadcf919c6a\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.603206 kubelet[2465]: I1002 19:36:26.603194 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.603314 kubelet[2465]: I1002 19:36:26.603306 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.603434 kubelet[2465]: I1002 19:36:26.603426 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e54175176e79625e391725b01ec2d9ae-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-8abed2f532\" (UID: \"e54175176e79625e391725b01ec2d9ae\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.603533 kubelet[2465]: I1002 19:36:26.603525 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/482f242316002850971c02e3435d9af7-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-8abed2f532\" (UID: \"482f242316002850971c02e3435d9af7\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:26.928092 sudo[2477]: pam_unix(sudo:session): session closed for user root Oct 2 19:36:26.927000 audit[2477]: USER_END pid=2477 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:26.927000 audit[2477]: CRED_DISP pid=2477 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:27.248495 kubelet[2465]: I1002 19:36:27.248383 2465 apiserver.go:52] "Watching apiserver" Oct 2 19:36:27.501440 kubelet[2465]: I1002 19:36:27.501197 2465 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:36:27.508022 kubelet[2465]: I1002 19:36:27.507957 2465 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:36:27.856660 kubelet[2465]: E1002 19:36:27.856623 2465 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-8abed2f532\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" Oct 2 19:36:28.063242 kubelet[2465]: I1002 19:36:28.063209 2465 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-8abed2f532" podStartSLOduration=2.063144599 pod.CreationTimestamp="2023-10-02 19:36:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:28.062276888 +0000 UTC m=+1.909814043" watchObservedRunningTime="2023-10-02 19:36:28.063144599 +0000 UTC m=+1.910681754" Oct 2 19:36:28.134000 audit[1668]: USER_END pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.135574 sudo[1668]: pam_unix(sudo:session): session closed for user root Oct 2 19:36:28.139921 kernel: kauditd_printk_skb: 277 callbacks suppressed Oct 2 19:36:28.140010 kernel: audit: type=1106 audit(1696275388.134:976): pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.134000 audit[1668]: CRED_DISP pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.170978 kernel: audit: type=1104 audit(1696275388.134:977): pid=1668 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.244472 sshd[1665]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:28.249000 audit[1665]: USER_END pid=1665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:28.252422 systemd[1]: sshd@6-10.200.8.19:22-10.200.12.6:41988.service: Deactivated successfully. Oct 2 19:36:28.253305 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:36:28.253474 systemd[1]: session-9.scope: Consumed 3.198s CPU time. Oct 2 19:36:28.254820 systemd-logind[1315]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:36:28.255898 systemd-logind[1315]: Removed session 9. Oct 2 19:36:28.269755 kernel: audit: type=1106 audit(1696275388.249:978): pid=1665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:28.269836 kernel: audit: type=1104 audit(1696275388.250:979): pid=1665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:28.250000 audit[1665]: CRED_DISP pid=1665 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:28.286403 kernel: audit: type=1131 audit(1696275388.251:980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.19:22-10.200.12.6:41988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.19:22-10.200.12.6:41988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:28.453562 kubelet[2465]: I1002 19:36:28.452968 2465 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-8abed2f532" podStartSLOduration=2.452921727 pod.CreationTimestamp="2023-10-02 19:36:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:28.452738025 +0000 UTC m=+2.300275180" watchObservedRunningTime="2023-10-02 19:36:28.452921727 +0000 UTC m=+2.300458982" Oct 2 19:36:28.856348 kubelet[2465]: I1002 19:36:28.856314 2465 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8abed2f532" podStartSLOduration=2.85627693 pod.CreationTimestamp="2023-10-02 19:36:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:28.855839224 +0000 UTC m=+2.703376379" watchObservedRunningTime="2023-10-02 19:36:28.85627693 +0000 UTC m=+2.703814185" Oct 2 19:36:38.052000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7178 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:36:38.052000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fe54c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:38.091683 kernel: audit: type=1400 audit(1696275398.052:981): avc: denied { watch } for pid=2347 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7178 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:36:38.091817 kernel: audit: type=1300 audit(1696275398.052:981): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fe54c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:38.091854 kernel: audit: type=1327 audit(1696275398.052:981): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.192000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.194000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.227478 kernel: audit: type=1400 audit(1696275399.192:982): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.227602 kernel: audit: type=1400 audit(1696275399.194:983): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.227632 kernel: audit: type=1300 audit(1696275399.194:983): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfd940 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.194000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfd940 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.194000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.267704 kernel: audit: type=1327 audit(1696275399.194:983): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.194000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.285349 kernel: audit: type=1400 audit(1696275399.194:984): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.285426 kernel: audit: type=1300 audit(1696275399.194:984): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfd9c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.194000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfd9c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.306914 kernel: audit: type=1327 audit(1696275399.194:984): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.194000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfdc00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.192000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000d69ec0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:36:39.192000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:40.478296 kubelet[2465]: I1002 19:36:40.478262 2465 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:36:40.479013 env[1331]: time="2023-10-02T19:36:40.478968101Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:36:40.479361 kubelet[2465]: I1002 19:36:40.479215 2465 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:36:41.256178 kubelet[2465]: I1002 19:36:41.256144 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:41.262281 kubelet[2465]: I1002 19:36:41.262254 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:41.263742 systemd[1]: Created slice kubepods-besteffort-poddc0b39e8_5daf_4298_8cef_d783e51b8a55.slice. Oct 2 19:36:41.292703 systemd[1]: Created slice kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice. Oct 2 19:36:41.314046 kubelet[2465]: I1002 19:36:41.313999 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-net\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315043 kubelet[2465]: I1002 19:36:41.315022 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cni-path\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315257 kubelet[2465]: I1002 19:36:41.315242 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-lib-modules\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315420 kubelet[2465]: I1002 19:36:41.315409 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-run\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315549 kubelet[2465]: I1002 19:36:41.315540 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-xtables-lock\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315674 kubelet[2465]: I1002 19:36:41.315665 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7bee7a23-6783-4489-80ed-b5a4fec11c3e-clustermesh-secrets\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.315858 kubelet[2465]: I1002 19:36:41.315848 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hubble-tls\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.316071 kubelet[2465]: I1002 19:36:41.316057 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dc0b39e8-5daf-4298-8cef-d783e51b8a55-xtables-lock\") pod \"kube-proxy-mzk8f\" (UID: \"dc0b39e8-5daf-4298-8cef-d783e51b8a55\") " pod="kube-system/kube-proxy-mzk8f" Oct 2 19:36:41.316237 kubelet[2465]: I1002 19:36:41.316224 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dc0b39e8-5daf-4298-8cef-d783e51b8a55-lib-modules\") pod \"kube-proxy-mzk8f\" (UID: \"dc0b39e8-5daf-4298-8cef-d783e51b8a55\") " pod="kube-system/kube-proxy-mzk8f" Oct 2 19:36:41.316382 kubelet[2465]: I1002 19:36:41.316372 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxzhh\" (UniqueName: \"kubernetes.io/projected/dc0b39e8-5daf-4298-8cef-d783e51b8a55-kube-api-access-xxzhh\") pod \"kube-proxy-mzk8f\" (UID: \"dc0b39e8-5daf-4298-8cef-d783e51b8a55\") " pod="kube-system/kube-proxy-mzk8f" Oct 2 19:36:41.316514 kubelet[2465]: I1002 19:36:41.316505 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-config-path\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.316639 kubelet[2465]: I1002 19:36:41.316630 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-cgroup\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.316788 kubelet[2465]: I1002 19:36:41.316778 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-etc-cni-netd\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.316936 kubelet[2465]: I1002 19:36:41.316926 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-bpf-maps\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.317063 kubelet[2465]: I1002 19:36:41.317054 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hostproc\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.317193 kubelet[2465]: I1002 19:36:41.317183 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-kernel\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.317322 kubelet[2465]: I1002 19:36:41.317312 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k9chl\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-kube-api-access-k9chl\") pod \"cilium-hkhk6\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " pod="kube-system/cilium-hkhk6" Oct 2 19:36:41.317449 kubelet[2465]: I1002 19:36:41.317440 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/dc0b39e8-5daf-4298-8cef-d783e51b8a55-kube-proxy\") pod \"kube-proxy-mzk8f\" (UID: \"dc0b39e8-5daf-4298-8cef-d783e51b8a55\") " pod="kube-system/kube-proxy-mzk8f" Oct 2 19:36:41.480028 kubelet[2465]: I1002 19:36:41.479991 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:36:41.490156 systemd[1]: Created slice kubepods-besteffort-pod08e38a11_58c6_4dd6_a2f7_39524b093199.slice. Oct 2 19:36:41.520000 kubelet[2465]: I1002 19:36:41.519919 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/08e38a11-58c6-4dd6-a2f7-39524b093199-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-fp4cd\" (UID: \"08e38a11-58c6-4dd6-a2f7-39524b093199\") " pod="kube-system/cilium-operator-f59cbd8c6-fp4cd" Oct 2 19:36:41.520204 kubelet[2465]: I1002 19:36:41.520182 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sr94j\" (UniqueName: \"kubernetes.io/projected/08e38a11-58c6-4dd6-a2f7-39524b093199-kube-api-access-sr94j\") pod \"cilium-operator-f59cbd8c6-fp4cd\" (UID: \"08e38a11-58c6-4dd6-a2f7-39524b093199\") " pod="kube-system/cilium-operator-f59cbd8c6-fp4cd" Oct 2 19:36:41.590200 env[1331]: time="2023-10-02T19:36:41.589669171Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-mzk8f,Uid:dc0b39e8-5daf-4298-8cef-d783e51b8a55,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:41.599329 env[1331]: time="2023-10-02T19:36:41.599290362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hkhk6,Uid:7bee7a23-6783-4489-80ed-b5a4fec11c3e,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:41.638938 env[1331]: time="2023-10-02T19:36:41.635000898Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:41.638938 env[1331]: time="2023-10-02T19:36:41.635035998Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:41.638938 env[1331]: time="2023-10-02T19:36:41.635046798Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:41.638938 env[1331]: time="2023-10-02T19:36:41.635253100Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ce69934eb8c2ad9241f0ebfe397b8297666a443f0570fccf04c0ef9fc9a17c5b pid=2563 runtime=io.containerd.runc.v2 Oct 2 19:36:41.653189 env[1331]: time="2023-10-02T19:36:41.653125368Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:41.653633 env[1331]: time="2023-10-02T19:36:41.653517472Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:41.653804 env[1331]: time="2023-10-02T19:36:41.653778275Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:41.654071 env[1331]: time="2023-10-02T19:36:41.654037177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198 pid=2588 runtime=io.containerd.runc.v2 Oct 2 19:36:41.655444 systemd[1]: Started cri-containerd-ce69934eb8c2ad9241f0ebfe397b8297666a443f0570fccf04c0ef9fc9a17c5b.scope. Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.677000 audit: BPF prog-id=110 op=LOAD Oct 2 19:36:41.678000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.678000 audit[2574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2563 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363939333465623863326164393234316630656266653339376238 Oct 2 19:36:41.678000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.678000 audit[2574]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2563 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363939333465623863326164393234316630656266653339376238 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit: BPF prog-id=111 op=LOAD Oct 2 19:36:41.679000 audit[2574]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024420 items=0 ppid=2563 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363939333465623863326164393234316630656266653339376238 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.679000 audit: BPF prog-id=112 op=LOAD Oct 2 19:36:41.679000 audit[2574]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024468 items=0 ppid=2563 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363939333465623863326164393234316630656266653339376238 Oct 2 19:36:41.680000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:36:41.680000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.682246 systemd[1]: Started cri-containerd-08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198.scope. Oct 2 19:36:41.681000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.681000 audit: BPF prog-id=113 op=LOAD Oct 2 19:36:41.681000 audit[2574]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024878 items=0 ppid=2563 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.681000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365363939333465623863326164393234316630656266653339376238 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit: BPF prog-id=114 op=LOAD Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666563386365623463623766393662343739666662383965356132 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666563386365623463623766393662343739666662383965356132 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.703000 audit: BPF prog-id=115 op=LOAD Oct 2 19:36:41.703000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c0002b66f0 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666563386365623463623766393662343739666662383965356132 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit: BPF prog-id=116 op=LOAD Oct 2 19:36:41.704000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0002b6738 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666563386365623463623766393662343739666662383965356132 Oct 2 19:36:41.704000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:36:41.704000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { perfmon } for pid=2604 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit[2604]: AVC avc: denied { bpf } for pid=2604 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.704000 audit: BPF prog-id=117 op=LOAD Oct 2 19:36:41.704000 audit[2604]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0002b6b48 items=0 ppid=2588 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038666563386365623463623766393662343739666662383965356132 Oct 2 19:36:41.713170 env[1331]: time="2023-10-02T19:36:41.713129033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-mzk8f,Uid:dc0b39e8-5daf-4298-8cef-d783e51b8a55,Namespace:kube-system,Attempt:0,} returns sandbox id \"ce69934eb8c2ad9241f0ebfe397b8297666a443f0570fccf04c0ef9fc9a17c5b\"" Oct 2 19:36:41.723061 env[1331]: time="2023-10-02T19:36:41.723024226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hkhk6,Uid:7bee7a23-6783-4489-80ed-b5a4fec11c3e,Namespace:kube-system,Attempt:0,} returns sandbox id \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\"" Oct 2 19:36:41.723462 env[1331]: time="2023-10-02T19:36:41.723431130Z" level=info msg="CreateContainer within sandbox \"ce69934eb8c2ad9241f0ebfe397b8297666a443f0570fccf04c0ef9fc9a17c5b\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:36:41.726533 env[1331]: time="2023-10-02T19:36:41.726503859Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:36:41.777523 env[1331]: time="2023-10-02T19:36:41.773945906Z" level=info msg="CreateContainer within sandbox \"ce69934eb8c2ad9241f0ebfe397b8297666a443f0570fccf04c0ef9fc9a17c5b\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"b0a0cae95cece5b9c808226b7ce68979874e440165b1e8f4ea49fca224484ff8\"" Oct 2 19:36:41.777523 env[1331]: time="2023-10-02T19:36:41.776753032Z" level=info msg="StartContainer for \"b0a0cae95cece5b9c808226b7ce68979874e440165b1e8f4ea49fca224484ff8\"" Oct 2 19:36:41.800039 systemd[1]: Started cri-containerd-b0a0cae95cece5b9c808226b7ce68979874e440165b1e8f4ea49fca224484ff8.scope. Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2563 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230613063616539356365636535623963383038323236623763653638 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit: BPF prog-id=118 op=LOAD Oct 2 19:36:41.816000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000249ca0 items=0 ppid=2563 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230613063616539356365636535623963383038323236623763653638 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.816000 audit: BPF prog-id=119 op=LOAD Oct 2 19:36:41.816000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000249ce8 items=0 ppid=2563 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230613063616539356365636535623963383038323236623763653638 Oct 2 19:36:41.817000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:36:41.817000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:41.817000 audit: BPF prog-id=120 op=LOAD Oct 2 19:36:41.817000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000249d78 items=0 ppid=2563 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230613063616539356365636535623963383038323236623763653638 Oct 2 19:36:41.837298 env[1331]: time="2023-10-02T19:36:41.837252502Z" level=info msg="StartContainer for \"b0a0cae95cece5b9c808226b7ce68979874e440165b1e8f4ea49fca224484ff8\" returns successfully" Oct 2 19:36:41.886000 audit[2699]: NETFILTER_CFG table=mangle:63 family=2 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.886000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe18b3f270 a2=0 a3=7ffe18b3f25c items=0 ppid=2659 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:36:41.888000 audit[2700]: NETFILTER_CFG table=mangle:64 family=10 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:41.888000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb34af690 a2=0 a3=7fffb34af67c items=0 ppid=2659 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.888000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:36:41.889000 audit[2701]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.889000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe95c75ed0 a2=0 a3=7ffe95c75ebc items=0 ppid=2659 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:36:41.894000 audit[2702]: NETFILTER_CFG table=nat:66 family=10 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:41.894000 audit[2703]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_chain pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.894000 audit[2703]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeca66a030 a2=0 a3=7ffeca66a01c items=0 ppid=2659 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:36:41.894000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfedb9060 a2=0 a3=7ffcfedb904c items=0 ppid=2659 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.894000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:36:41.895000 audit[2704]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2704 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:41.895000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc546c5fb0 a2=0 a3=7ffc546c5f9c items=0 ppid=2659 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.895000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:36:41.988000 audit[2705]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_chain pid=2705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.988000 audit[2705]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd09d3f9c0 a2=0 a3=7ffd09d3f9ac items=0 ppid=2659 pid=2705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:36:41.991000 audit[2707]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.991000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdafa421c0 a2=0 a3=7ffdafa421ac items=0 ppid=2659 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:36:41.995000 audit[2710]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.995000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd43c0d4c0 a2=0 a3=7ffd43c0d4ac items=0 ppid=2659 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:36:41.996000 audit[2711]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.996000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd929e4430 a2=0 a3=7ffd929e441c items=0 ppid=2659 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.996000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:36:41.999000 audit[2713]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:41.999000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd984dd1a0 a2=0 a3=7ffd984dd18c items=0 ppid=2659 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:41.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:36:42.000000 audit[2714]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_chain pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.000000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe17b52fd0 a2=0 a3=7ffe17b52fbc items=0 ppid=2659 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.000000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:36:42.006000 audit[2716]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.006000 audit[2716]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe64fe4990 a2=0 a3=7ffe64fe497c items=0 ppid=2659 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:36:42.010000 audit[2719]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.010000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdac57db10 a2=0 a3=7ffdac57dafc items=0 ppid=2659 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.010000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:36:42.011000 audit[2720]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.011000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcdbefc330 a2=0 a3=7ffcdbefc31c items=0 ppid=2659 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:36:42.013000 audit[2722]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.013000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff87a6a6f0 a2=0 a3=7fff87a6a6dc items=0 ppid=2659 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.013000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:36:42.015000 audit[2723]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_chain pid=2723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.015000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff06412c40 a2=0 a3=7fff06412c2c items=0 ppid=2659 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.015000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:36:42.017000 audit[2725]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.017000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa5ceed00 a2=0 a3=7fffa5ceecec items=0 ppid=2659 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:42.021000 audit[2728]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.021000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd625a37d0 a2=0 a3=7ffd625a37bc items=0 ppid=2659 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.021000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:42.025000 audit[2731]: NETFILTER_CFG table=filter:82 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.025000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcdad81590 a2=0 a3=7ffcdad8157c items=0 ppid=2659 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.025000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:36:42.026000 audit[2732]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.026000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc4dec8590 a2=0 a3=7ffc4dec857c items=0 ppid=2659 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.026000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:36:42.029000 audit[2734]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.029000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffe7662c90 a2=0 a3=7fffe7662c7c items=0 ppid=2659 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.029000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:42.035000 audit[2737]: NETFILTER_CFG table=nat:85 family=2 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:42.035000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc42ab7180 a2=0 a3=7ffc42ab716c items=0 ppid=2659 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.035000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:42.087000 audit[2741]: NETFILTER_CFG table=filter:86 family=2 entries=6 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:36:42.087000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc26bdd110 a2=0 a3=7ffc26bdd0fc items=0 ppid=2659 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:42.095614 env[1331]: time="2023-10-02T19:36:42.095576313Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-fp4cd,Uid:08e38a11-58c6-4dd6-a2f7-39524b093199,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:42.138000 audit[2741]: NETFILTER_CFG table=nat:87 family=2 entries=17 op=nft_register_chain pid=2741 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:36:42.138000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc26bdd110 a2=0 a3=7ffc26bdd0fc items=0 ppid=2659 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:42.140506 env[1331]: time="2023-10-02T19:36:42.140444326Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:42.140647 env[1331]: time="2023-10-02T19:36:42.140482526Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:42.140647 env[1331]: time="2023-10-02T19:36:42.140496927Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:42.141405 env[1331]: time="2023-10-02T19:36:42.140687628Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480 pid=2753 runtime=io.containerd.runc.v2 Oct 2 19:36:42.143000 audit[2763]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2763 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.143000 audit[2763]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeb1a92150 a2=0 a3=7ffeb1a9213c items=0 ppid=2659 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.143000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:36:42.155418 systemd[1]: Started cri-containerd-a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480.scope. Oct 2 19:36:42.167000 audit[2776]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.167000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffccf3b4790 a2=0 a3=7ffccf3b477c items=0 ppid=2659 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:36:42.173000 audit[2786]: NETFILTER_CFG table=filter:90 family=10 entries=2 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.173000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc3f051770 a2=0 a3=7ffc3f05175c items=0 ppid=2659 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.173000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:36:42.175000 audit[2787]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.175000 audit[2787]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5357eb70 a2=0 a3=7ffe5357eb5c items=0 ppid=2659 pid=2787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.175000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:36:42.178000 audit[2789]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.178000 audit[2789]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc8526310 a2=0 a3=7ffcc85262fc items=0 ppid=2659 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.178000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.179000 audit: BPF prog-id=121 op=LOAD Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2753 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383532366439343238323430393865623761656363646366323362 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2753 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383532366439343238323430393865623761656363646366323362 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit: BPF prog-id=122 op=LOAD Oct 2 19:36:42.180000 audit[2762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001ac310 items=0 ppid=2753 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383532366439343238323430393865623761656363646366323362 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit: BPF prog-id=123 op=LOAD Oct 2 19:36:42.180000 audit[2762]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001ac358 items=0 ppid=2753 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383532366439343238323430393865623761656363646366323362 Oct 2 19:36:42.180000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:36:42.180000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { perfmon } for pid=2762 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit[2762]: AVC avc: denied { bpf } for pid=2762 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:42.180000 audit: BPF prog-id=124 op=LOAD Oct 2 19:36:42.180000 audit[2762]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001ac768 items=0 ppid=2753 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383532366439343238323430393865623761656363646366323362 Oct 2 19:36:42.183000 audit[2790]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.183000 audit[2790]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff95ab97b0 a2=0 a3=7fff95ab979c items=0 ppid=2659 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:36:42.187000 audit[2792]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.187000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc364c7390 a2=0 a3=7ffc364c737c items=0 ppid=2659 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:36:42.191000 audit[2795]: NETFILTER_CFG table=filter:95 family=10 entries=2 op=nft_register_chain pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.191000 audit[2795]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe32cf2710 a2=0 a3=7ffe32cf26fc items=0 ppid=2659 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.191000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:36:42.193000 audit[2796]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2796 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.193000 audit[2796]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe4acd09d0 a2=0 a3=7ffe4acd09bc items=0 ppid=2659 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:36:42.197000 audit[2798]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.197000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca777f7d0 a2=0 a3=7ffca777f7bc items=0 ppid=2659 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:36:42.198000 audit[2799]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_chain pid=2799 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.198000 audit[2799]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb8a0ba60 a2=0 a3=7fffb8a0ba4c items=0 ppid=2659 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:36:42.202000 audit[2801]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2801 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.202000 audit[2801]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe68d3d670 a2=0 a3=7ffe68d3d65c items=0 ppid=2659 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.202000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:42.207000 audit[2806]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.207000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffddf587c50 a2=0 a3=7ffddf587c3c items=0 ppid=2659 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:36:42.214000 audit[2814]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.214000 audit[2814]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe9c696960 a2=0 a3=7ffe9c69694c items=0 ppid=2659 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:36:42.216000 audit[2815]: NETFILTER_CFG table=nat:102 family=10 entries=1 op=nft_register_chain pid=2815 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.216000 audit[2815]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd77d84bd0 a2=0 a3=7ffd77d84bbc items=0 ppid=2659 pid=2815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.216000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:36:42.221399 env[1331]: time="2023-10-02T19:36:42.221358271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-fp4cd,Uid:08e38a11-58c6-4dd6-a2f7-39524b093199,Namespace:kube-system,Attempt:0,} returns sandbox id \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\"" Oct 2 19:36:42.221000 audit[2817]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2817 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.221000 audit[2817]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fffee875ab0 a2=0 a3=7fffee875a9c items=0 ppid=2659 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.221000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:42.227000 audit[2820]: NETFILTER_CFG table=nat:104 family=10 entries=2 op=nft_register_chain pid=2820 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:42.227000 audit[2820]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe373dbae0 a2=0 a3=7ffe373dbacc items=0 ppid=2659 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.227000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:42.232000 audit[2824]: NETFILTER_CFG table=filter:105 family=10 entries=3 op=nft_register_rule pid=2824 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:36:42.232000 audit[2824]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffdfed78f70 a2=0 a3=7ffdfed78f5c items=0 ppid=2659 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.232000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:42.232000 audit[2824]: NETFILTER_CFG table=nat:106 family=10 entries=10 op=nft_register_chain pid=2824 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:36:42.232000 audit[2824]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffdfed78f70 a2=0 a3=7ffdfed78f5c items=0 ppid=2659 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:42.232000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:42.543551 kubelet[2465]: I1002 19:36:42.543520 2465 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-mzk8f" podStartSLOduration=1.5434925339999999 pod.CreationTimestamp="2023-10-02 19:36:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:42.543162531 +0000 UTC m=+16.390699786" watchObservedRunningTime="2023-10-02 19:36:42.543492534 +0000 UTC m=+16.391029689" Oct 2 19:36:47.240037 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2902748568.mount: Deactivated successfully. Oct 2 19:36:49.943688 env[1331]: time="2023-10-02T19:36:49.943626459Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:49.950525 env[1331]: time="2023-10-02T19:36:49.950482013Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:49.955503 env[1331]: time="2023-10-02T19:36:49.955464052Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:49.956095 env[1331]: time="2023-10-02T19:36:49.956056657Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:36:49.957847 env[1331]: time="2023-10-02T19:36:49.957820171Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:36:49.959468 env[1331]: time="2023-10-02T19:36:49.959418983Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:36:50.001657 env[1331]: time="2023-10-02T19:36:50.001164312Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" Oct 2 19:36:50.001975 env[1331]: time="2023-10-02T19:36:50.001951918Z" level=info msg="StartContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" Oct 2 19:36:50.031885 systemd[1]: Started cri-containerd-ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9.scope. Oct 2 19:36:50.041887 systemd[1]: cri-containerd-ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9.scope: Deactivated successfully. Oct 2 19:36:50.046331 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9-rootfs.mount: Deactivated successfully. Oct 2 19:36:52.038134 env[1331]: time="2023-10-02T19:36:52.037978660Z" level=error msg="get state for ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" error="context deadline exceeded: unknown" Oct 2 19:36:52.038134 env[1331]: time="2023-10-02T19:36:52.038097361Z" level=warning msg="unknown status" status=0 Oct 2 19:36:53.741499 env[1331]: time="2023-10-02T19:36:53.741435059Z" level=info msg="shim disconnected" id=ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9 Oct 2 19:36:53.741499 env[1331]: time="2023-10-02T19:36:53.741494159Z" level=warning msg="cleaning up after shim disconnected" id=ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9 namespace=k8s.io Oct 2 19:36:53.741499 env[1331]: time="2023-10-02T19:36:53.741506559Z" level=info msg="cleaning up dead shim" Oct 2 19:36:53.754101 env[1331]: time="2023-10-02T19:36:53.754062151Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2854 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:53.754879 env[1331]: time="2023-10-02T19:36:53.754788656Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:36:53.755848 env[1331]: time="2023-10-02T19:36:53.755808563Z" level=error msg="Failed to pipe stdout of container \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" error="reading from a closed fifo" Oct 2 19:36:53.755953 env[1331]: time="2023-10-02T19:36:53.755808563Z" level=error msg="Failed to pipe stderr of container \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" error="reading from a closed fifo" Oct 2 19:36:53.763506 env[1331]: time="2023-10-02T19:36:53.763370418Z" level=error msg="StartContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:53.763674 kubelet[2465]: E1002 19:36:53.763651 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" Oct 2 19:36:53.764088 kubelet[2465]: E1002 19:36:53.763792 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:53.764088 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:53.764088 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:36:53.764088 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:53.764438 kubelet[2465]: E1002 19:36:53.763847 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:36:54.432811 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3336333149.mount: Deactivated successfully. Oct 2 19:36:54.565943 env[1331]: time="2023-10-02T19:36:54.565896656Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:36:54.625256 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount228820409.mount: Deactivated successfully. Oct 2 19:36:54.770996 env[1331]: time="2023-10-02T19:36:54.770544710Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" Oct 2 19:36:54.773790 env[1331]: time="2023-10-02T19:36:54.773760333Z" level=info msg="StartContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" Oct 2 19:36:54.807915 systemd[1]: Started cri-containerd-0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a.scope. Oct 2 19:36:54.827668 systemd[1]: cri-containerd-0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a.scope: Deactivated successfully. Oct 2 19:36:54.857472 env[1331]: time="2023-10-02T19:36:54.857200226Z" level=info msg="shim disconnected" id=0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a Oct 2 19:36:54.857472 env[1331]: time="2023-10-02T19:36:54.857330627Z" level=warning msg="cleaning up after shim disconnected" id=0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a namespace=k8s.io Oct 2 19:36:54.857472 env[1331]: time="2023-10-02T19:36:54.857344927Z" level=info msg="cleaning up dead shim" Oct 2 19:36:54.875535 env[1331]: time="2023-10-02T19:36:54.875485556Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2893 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:54.875824 env[1331]: time="2023-10-02T19:36:54.875762058Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:36:54.876055 env[1331]: time="2023-10-02T19:36:54.876011260Z" level=error msg="Failed to pipe stdout of container \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" error="reading from a closed fifo" Oct 2 19:36:54.876125 env[1331]: time="2023-10-02T19:36:54.876087660Z" level=error msg="Failed to pipe stderr of container \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" error="reading from a closed fifo" Oct 2 19:36:54.880483 env[1331]: time="2023-10-02T19:36:54.880433291Z" level=error msg="StartContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:54.880669 kubelet[2465]: E1002 19:36:54.880650 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a" Oct 2 19:36:54.881027 kubelet[2465]: E1002 19:36:54.880810 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:54.881027 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:54.881027 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:36:54.881027 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:54.881264 kubelet[2465]: E1002 19:36:54.880872 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:36:55.407207 env[1331]: time="2023-10-02T19:36:55.407162377Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.414583 env[1331]: time="2023-10-02T19:36:55.414540028Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.418869 env[1331]: time="2023-10-02T19:36:55.418830958Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.419291 env[1331]: time="2023-10-02T19:36:55.419257161Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:36:55.421663 env[1331]: time="2023-10-02T19:36:55.421631078Z" level=info msg="CreateContainer within sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:36:55.424455 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3156924639.mount: Deactivated successfully. Oct 2 19:36:55.456399 env[1331]: time="2023-10-02T19:36:55.456356620Z" level=info msg="CreateContainer within sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\"" Oct 2 19:36:55.457094 env[1331]: time="2023-10-02T19:36:55.457068825Z" level=info msg="StartContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\"" Oct 2 19:36:55.478826 systemd[1]: Started cri-containerd-059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698.scope. Oct 2 19:36:55.514959 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 19:36:55.515098 kernel: audit: type=1400 audit(1696275415.494:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.541352 kernel: audit: type=1400 audit(1696275415.494:1091): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.541460 kernel: audit: type=1400 audit(1696275415.494:1092): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.554728 kernel: audit: type=1400 audit(1696275415.494:1093): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.567808 kernel: audit: type=1400 audit(1696275415.494:1094): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.582791 kernel: audit: type=1400 audit(1696275415.494:1095): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.601017 env[1331]: time="2023-10-02T19:36:55.590723256Z" level=info msg="RemoveContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" Oct 2 19:36:55.601114 kubelet[2465]: I1002 19:36:55.587655 2465 scope.go:115] "RemoveContainer" containerID="ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" Oct 2 19:36:55.601114 kubelet[2465]: I1002 19:36:55.588019 2465 scope.go:115] "RemoveContainer" containerID="ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" Oct 2 19:36:55.615667 kernel: audit: type=1400 audit(1696275415.494:1096): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.615791 kernel: audit: type=1400 audit(1696275415.494:1097): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.615903 kubelet[2465]: E1002 19:36:55.602318 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\": container is already in removing state" containerID="ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" Oct 2 19:36:55.615903 kubelet[2465]: E1002 19:36:55.602368 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9": container is already in removing state; Skipping pod "cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)" Oct 2 19:36:55.615903 kubelet[2465]: E1002 19:36:55.602796 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:36:55.616076 env[1331]: time="2023-10-02T19:36:55.602059935Z" level=info msg="RemoveContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\"" Oct 2 19:36:55.616076 env[1331]: time="2023-10-02T19:36:55.602184835Z" level=error msg="RemoveContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\" failed" error="failed to set removing state for container \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\": container is already in removing state" Oct 2 19:36:55.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.631455 env[1331]: time="2023-10-02T19:36:55.631414639Z" level=info msg="StartContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" returns successfully" Oct 2 19:36:55.646235 kernel: audit: type=1400 audit(1696275415.494:1098): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.646337 kernel: audit: type=1400 audit(1696275415.514:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit: BPF prog-id=125 op=LOAD Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2753 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:55.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393037306136633266383863353435386335643637326236333664 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2753 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:55.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393037306136633266383863353435386335643637326236333664 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit: BPF prog-id=126 op=LOAD Oct 2 19:36:55.514000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025f0b0 items=0 ppid=2753 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:55.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393037306136633266383863353435386335643637326236333664 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit: BPF prog-id=127 op=LOAD Oct 2 19:36:55.514000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025f0f8 items=0 ppid=2753 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:55.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393037306136633266383863353435386335643637326236333664 Oct 2 19:36:55.514000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:36:55.514000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { perfmon } for pid=2913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit[2913]: AVC avc: denied { bpf } for pid=2913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:55.514000 audit: BPF prog-id=128 op=LOAD Oct 2 19:36:55.514000 audit[2913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00025f508 items=0 ppid=2753 pid=2913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:55.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393037306136633266383863353435386335643637326236333664 Oct 2 19:36:55.651840 env[1331]: time="2023-10-02T19:36:55.651799881Z" level=info msg="RemoveContainer for \"ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9\" returns successfully" Oct 2 19:36:55.662000 audit[2923]: AVC avc: denied { map_create } for pid=2923 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c526,c741 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c526,c741 tclass=bpf permissive=0 Oct 2 19:36:55.662000 audit[2923]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00068f7d0 a2=48 a3=c00068f7c0 items=0 ppid=2753 pid=2923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c526,c741 key=(null) Oct 2 19:36:55.662000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:36:56.594003 kubelet[2465]: E1002 19:36:56.593928 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:36:56.603326 kubelet[2465]: I1002 19:36:56.603287 2465 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-fp4cd" podStartSLOduration=-9.22337202125153e+09 pod.CreationTimestamp="2023-10-02 19:36:41 +0000 UTC" firstStartedPulling="2023-10-02 19:36:42.222679183 +0000 UTC m=+16.070216338" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:56.602748522 +0000 UTC m=+30.450285677" watchObservedRunningTime="2023-10-02 19:36:56.603246326 +0000 UTC m=+30.450783581" Oct 2 19:36:56.745959 kubelet[2465]: W1002 19:36:56.745908 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9.scope WatchSource:0}: container "ebae0d4fbd51414b84d794eb81b54b09e4306c204fb451aec3528e3977916cc9" in namespace "k8s.io": not found Oct 2 19:36:59.854783 kubelet[2465]: W1002 19:36:59.854743 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a.scope WatchSource:0}: task 0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a not found: not found Oct 2 19:37:09.491045 env[1331]: time="2023-10-02T19:37:09.490986197Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:37:09.520023 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount411145805.mount: Deactivated successfully. Oct 2 19:37:09.535369 env[1331]: time="2023-10-02T19:37:09.535321336Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" Oct 2 19:37:09.535882 env[1331]: time="2023-10-02T19:37:09.535844839Z" level=info msg="StartContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" Oct 2 19:37:09.559144 systemd[1]: Started cri-containerd-31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179.scope. Oct 2 19:37:09.568855 systemd[1]: cri-containerd-31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179.scope: Deactivated successfully. Oct 2 19:37:09.569156 systemd[1]: Stopped cri-containerd-31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179.scope. Oct 2 19:37:09.994640 env[1331]: time="2023-10-02T19:37:09.994550914Z" level=info msg="shim disconnected" id=31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179 Oct 2 19:37:09.994640 env[1331]: time="2023-10-02T19:37:09.994627714Z" level=warning msg="cleaning up after shim disconnected" id=31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179 namespace=k8s.io Oct 2 19:37:09.994640 env[1331]: time="2023-10-02T19:37:09.994642514Z" level=info msg="cleaning up dead shim" Oct 2 19:37:10.006081 env[1331]: time="2023-10-02T19:37:10.006037475Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2968 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:10.006487 env[1331]: time="2023-10-02T19:37:10.006372877Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:37:10.007264 env[1331]: time="2023-10-02T19:37:10.006773279Z" level=error msg="Failed to pipe stdout of container \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" error="reading from a closed fifo" Oct 2 19:37:10.007354 env[1331]: time="2023-10-02T19:37:10.007275082Z" level=error msg="Failed to pipe stderr of container \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" error="reading from a closed fifo" Oct 2 19:37:10.012909 env[1331]: time="2023-10-02T19:37:10.012870612Z" level=error msg="StartContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:10.013382 kubelet[2465]: E1002 19:37:10.013356 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179" Oct 2 19:37:10.013751 kubelet[2465]: E1002 19:37:10.013457 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:10.013751 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:10.013751 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:37:10.013751 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:10.014778 kubelet[2465]: E1002 19:37:10.013506 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:10.515765 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179-rootfs.mount: Deactivated successfully. Oct 2 19:37:10.621242 kubelet[2465]: I1002 19:37:10.621208 2465 scope.go:115] "RemoveContainer" containerID="0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a" Oct 2 19:37:10.621893 kubelet[2465]: I1002 19:37:10.621858 2465 scope.go:115] "RemoveContainer" containerID="0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a" Oct 2 19:37:10.622806 env[1331]: time="2023-10-02T19:37:10.622769549Z" level=info msg="RemoveContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" Oct 2 19:37:10.623974 env[1331]: time="2023-10-02T19:37:10.623933255Z" level=info msg="RemoveContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\"" Oct 2 19:37:10.624096 env[1331]: time="2023-10-02T19:37:10.624048056Z" level=error msg="RemoveContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\" failed" error="failed to set removing state for container \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\": container is already in removing state" Oct 2 19:37:10.624236 kubelet[2465]: E1002 19:37:10.624217 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\": container is already in removing state" containerID="0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a" Oct 2 19:37:10.624317 kubelet[2465]: E1002 19:37:10.624255 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a": container is already in removing state; Skipping pod "cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)" Oct 2 19:37:10.624585 kubelet[2465]: E1002 19:37:10.624564 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:10.634602 env[1331]: time="2023-10-02T19:37:10.634563212Z" level=info msg="RemoveContainer for \"0033d15bff56430553318573706f48fa7c744e63f2e8172d3981a6eb09d7589a\" returns successfully" Oct 2 19:37:13.100219 kubelet[2465]: W1002 19:37:13.099961 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179.scope WatchSource:0}: task 31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179 not found: not found Oct 2 19:37:22.488828 kubelet[2465]: E1002 19:37:22.488705 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:22.690000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.696979 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:37:22.697089 kernel: audit: type=1400 audit(1696275442.690:1110): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.690000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.730005 kernel: audit: type=1400 audit(1696275442.690:1109): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.730095 kernel: audit: type=1300 audit(1696275442.690:1109): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a2e3e0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:22.690000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a2e3e0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:22.753085 kernel: audit: type=1327 audit(1696275442.690:1109): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:22.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:22.690000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00129b860 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:22.792245 kernel: audit: type=1300 audit(1696275442.690:1110): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00129b860 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:22.792342 kernel: audit: type=1327 audit(1696275442.690:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:22.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:22.982000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.982000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.017796 kernel: audit: type=1400 audit(1696275442.982:1111): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.017918 kernel: audit: type=1400 audit(1696275442.982:1112): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.017949 kernel: audit: type=1300 audit(1696275442.982:1112): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009f65770 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:22.982000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009f65770 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:22.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:22.982000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:22.982000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b23ee00 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:22.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:22.982000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c009ea7cb0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:22.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:23.011000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.011000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009ea7ce0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:23.057757 kernel: audit: type=1327 audit(1696275442.982:1112): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:23.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:23.021000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.021000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b23f7a0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:23.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:23.021000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.021000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009f65b90 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:37:23.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:33.491123 env[1331]: time="2023-10-02T19:37:33.491074007Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:37:33.521617 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1447314532.mount: Deactivated successfully. Oct 2 19:37:33.534358 env[1331]: time="2023-10-02T19:37:33.534312775Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" Oct 2 19:37:33.534864 env[1331]: time="2023-10-02T19:37:33.534836377Z" level=info msg="StartContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" Oct 2 19:37:33.555659 systemd[1]: Started cri-containerd-06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3.scope. Oct 2 19:37:33.571585 systemd[1]: cri-containerd-06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3.scope: Deactivated successfully. Oct 2 19:37:33.609466 env[1331]: time="2023-10-02T19:37:33.609408768Z" level=info msg="shim disconnected" id=06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3 Oct 2 19:37:33.609466 env[1331]: time="2023-10-02T19:37:33.609463868Z" level=warning msg="cleaning up after shim disconnected" id=06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3 namespace=k8s.io Oct 2 19:37:33.609766 env[1331]: time="2023-10-02T19:37:33.609475469Z" level=info msg="cleaning up dead shim" Oct 2 19:37:33.617266 env[1331]: time="2023-10-02T19:37:33.617228199Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3009 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:33.617550 env[1331]: time="2023-10-02T19:37:33.617490000Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:37:33.617820 env[1331]: time="2023-10-02T19:37:33.617774501Z" level=error msg="Failed to pipe stdout of container \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" error="reading from a closed fifo" Oct 2 19:37:33.617979 env[1331]: time="2023-10-02T19:37:33.617942502Z" level=error msg="Failed to pipe stderr of container \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" error="reading from a closed fifo" Oct 2 19:37:33.622642 env[1331]: time="2023-10-02T19:37:33.622538819Z" level=error msg="StartContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:33.622937 kubelet[2465]: E1002 19:37:33.622915 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3" Oct 2 19:37:33.623274 kubelet[2465]: E1002 19:37:33.623040 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:33.623274 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:33.623274 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:37:33.623274 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:33.623464 kubelet[2465]: E1002 19:37:33.623087 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:33.664333 kubelet[2465]: I1002 19:37:33.664296 2465 scope.go:115] "RemoveContainer" containerID="31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179" Oct 2 19:37:33.664742 kubelet[2465]: I1002 19:37:33.664696 2465 scope.go:115] "RemoveContainer" containerID="31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179" Oct 2 19:37:33.666669 env[1331]: time="2023-10-02T19:37:33.666576591Z" level=info msg="RemoveContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" Oct 2 19:37:33.669343 env[1331]: time="2023-10-02T19:37:33.667573595Z" level=info msg="RemoveContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\"" Oct 2 19:37:33.669343 env[1331]: time="2023-10-02T19:37:33.667685596Z" level=error msg="RemoveContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\" failed" error="failed to set removing state for container \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\": container is already in removing state" Oct 2 19:37:33.669480 kubelet[2465]: E1002 19:37:33.668364 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\": container is already in removing state" containerID="31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179" Oct 2 19:37:33.669480 kubelet[2465]: E1002 19:37:33.668399 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179": container is already in removing state; Skipping pod "cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)" Oct 2 19:37:33.669480 kubelet[2465]: E1002 19:37:33.668934 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:33.676898 env[1331]: time="2023-10-02T19:37:33.676871331Z" level=info msg="RemoveContainer for \"31c72bf3152c275c332512df8a604b4fbd10e49eed9e0f93b9432c54e1c6e179\" returns successfully" Oct 2 19:37:34.516150 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3-rootfs.mount: Deactivated successfully. Oct 2 19:37:36.714728 kubelet[2465]: W1002 19:37:36.714657 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3.scope WatchSource:0}: task 06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3 not found: not found Oct 2 19:37:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.200241 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:37:39.200348 kernel: audit: type=1400 audit(1696275459.195:1118): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.233491 kernel: audit: type=1400 audit(1696275459.195:1117): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.233571 kernel: audit: type=1300 audit(1696275459.195:1118): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001224340 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001224340 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.256026 kernel: audit: type=1327 audit(1696275459.195:1118): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.289432 kernel: audit: type=1400 audit(1696275459.195:1119): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.289514 kernel: audit: type=1300 audit(1696275459.195:1119): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001224460 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001224460 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.329653 kernel: audit: type=1327 audit(1696275459.195:1119): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000c98160 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.351739 kernel: audit: type=1300 audit(1696275459.195:1117): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000c98160 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.351802 kernel: audit: type=1327 audit(1696275459.195:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:39.197000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.369735 kernel: audit: type=1400 audit(1696275459.197:1120): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:39.197000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001224680 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:37:39.197000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:47.488274 kubelet[2465]: E1002 19:37:47.488235 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:37:59.488656 kubelet[2465]: E1002 19:37:59.488441 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:12.489653 kubelet[2465]: E1002 19:38:12.489613 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:22.691000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.697306 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:38:22.697407 kernel: audit: type=1400 audit(1696275502.691:1121): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.691000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019940c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:22.736084 kernel: audit: type=1300 audit(1696275502.691:1121): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0019940c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:22.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:22.736807 kernel: audit: type=1327 audit(1696275502.691:1121): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:22.754932 kernel: audit: type=1400 audit(1696275502.691:1122): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.691000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.691000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001617fb0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:22.794630 kernel: audit: type=1300 audit(1696275502.691:1122): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001617fb0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:22.794723 kernel: audit: type=1327 audit(1696275502.691:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:22.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:22.984000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.984000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.019259 kernel: audit: type=1400 audit(1696275502.984:1123): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.019377 kernel: audit: type=1400 audit(1696275502.984:1124): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.019403 kernel: audit: type=1300 audit(1696275502.984:1124): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00860b5c0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:22.984000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00860b5c0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:22.984000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00134fe60 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:23.060155 kernel: audit: type=1300 audit(1696275502.984:1123): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00134fe60 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:22.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:22.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:22.984000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:22.984000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0058161b0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:22.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:23.011000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.011000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0058165a0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:23.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:23.022000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.022000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c000808200 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:23.022000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:23.022000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.022000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00860b710 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:38:23.022000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:26.316391 kubelet[2465]: E1002 19:38:26.316316 2465 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:38:26.468094 kubelet[2465]: E1002 19:38:26.468061 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:27.490679 env[1331]: time="2023-10-02T19:38:27.490624274Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:38:27.529561 env[1331]: time="2023-10-02T19:38:27.529509360Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" Oct 2 19:38:27.530144 env[1331]: time="2023-10-02T19:38:27.530110645Z" level=info msg="StartContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" Oct 2 19:38:27.551371 systemd[1]: Started cri-containerd-b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291.scope. Oct 2 19:38:27.564788 systemd[1]: cri-containerd-b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291.scope: Deactivated successfully. Oct 2 19:38:27.568456 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291-rootfs.mount: Deactivated successfully. Oct 2 19:38:27.598850 env[1331]: time="2023-10-02T19:38:27.598794354Z" level=info msg="shim disconnected" id=b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291 Oct 2 19:38:27.599065 env[1331]: time="2023-10-02T19:38:27.598851952Z" level=warning msg="cleaning up after shim disconnected" id=b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291 namespace=k8s.io Oct 2 19:38:27.599065 env[1331]: time="2023-10-02T19:38:27.598864452Z" level=info msg="cleaning up dead shim" Oct 2 19:38:27.608288 env[1331]: time="2023-10-02T19:38:27.608240907Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:38:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3054 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:38:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:38:27.608549 env[1331]: time="2023-10-02T19:38:27.608493101Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:38:27.608819 env[1331]: time="2023-10-02T19:38:27.608779193Z" level=error msg="Failed to pipe stdout of container \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" error="reading from a closed fifo" Oct 2 19:38:27.608907 env[1331]: time="2023-10-02T19:38:27.608865991Z" level=error msg="Failed to pipe stderr of container \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" error="reading from a closed fifo" Oct 2 19:38:27.614384 env[1331]: time="2023-10-02T19:38:27.614268250Z" level=error msg="StartContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:38:27.614800 kubelet[2465]: E1002 19:38:27.614780 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291" Oct 2 19:38:27.615146 kubelet[2465]: E1002 19:38:27.614927 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:38:27.615146 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:38:27.615146 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:38:27.615146 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:38:27.615523 kubelet[2465]: E1002 19:38:27.614983 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:27.769598 kubelet[2465]: I1002 19:38:27.768758 2465 scope.go:115] "RemoveContainer" containerID="06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3" Oct 2 19:38:27.769598 kubelet[2465]: I1002 19:38:27.769413 2465 scope.go:115] "RemoveContainer" containerID="06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3" Oct 2 19:38:27.771066 env[1331]: time="2023-10-02T19:38:27.770981964Z" level=info msg="RemoveContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" Oct 2 19:38:27.772584 env[1331]: time="2023-10-02T19:38:27.772169433Z" level=info msg="RemoveContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\"" Oct 2 19:38:27.780732 env[1331]: time="2023-10-02T19:38:27.773268804Z" level=error msg="RemoveContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\" failed" error="failed to set removing state for container \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\": container is already in removing state" Oct 2 19:38:27.780834 kubelet[2465]: E1002 19:38:27.773436 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\": container is already in removing state" containerID="06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3" Oct 2 19:38:27.780834 kubelet[2465]: E1002 19:38:27.773466 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3": container is already in removing state; Skipping pod "cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)" Oct 2 19:38:27.780834 kubelet[2465]: E1002 19:38:27.773804 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:27.781693 env[1331]: time="2023-10-02T19:38:27.781654386Z" level=info msg="RemoveContainer for \"06bf757f19d1b19cc805fa189ab12b5d883400c387c2e948e7407e519fd0afb3\" returns successfully" Oct 2 19:38:30.705489 kubelet[2465]: W1002 19:38:30.705436 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291.scope WatchSource:0}: task b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291 not found: not found Oct 2 19:38:31.469220 kubelet[2465]: E1002 19:38:31.469186 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:36.470140 kubelet[2465]: E1002 19:38:36.470100 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:38.489298 kubelet[2465]: E1002 19:38:38.489255 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.202736 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:38:39.202839 kernel: audit: type=1400 audit(1696275519.195:1130): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.195000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.233577 kernel: audit: type=1400 audit(1696275519.195:1129): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.233655 kernel: audit: type=1300 audit(1696275519.195:1129): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001995b00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001995b00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.196000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.289832 kernel: audit: type=1327 audit(1696275519.195:1129): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.289910 kernel: audit: type=1400 audit(1696275519.196:1131): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.289945 kernel: audit: type=1300 audit(1696275519.196:1131): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001df4080 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.196000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001df4080 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.196000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.328947 kernel: audit: type=1327 audit(1696275519.196:1131): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.336999 kernel: audit: type=1300 audit(1696275519.195:1130): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001d0dde0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.195000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001d0dde0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.351790 kernel: audit: type=1327 audit(1696275519.195:1130): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.195000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.198000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.385558 kernel: audit: type=1400 audit(1696275519.198:1132): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:39.198000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001df41a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:38:39.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:41.471529 kubelet[2465]: E1002 19:38:41.471485 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:46.472568 kubelet[2465]: E1002 19:38:46.472530 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:51.473584 kubelet[2465]: E1002 19:38:51.473545 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:51.488538 kubelet[2465]: E1002 19:38:51.488506 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:38:56.475147 kubelet[2465]: E1002 19:38:56.475103 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:01.476282 kubelet[2465]: E1002 19:39:01.476242 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:06.477648 kubelet[2465]: E1002 19:39:06.477602 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:06.489235 kubelet[2465]: E1002 19:39:06.488978 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:39:06.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:53122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:06.580151 systemd[1]: Started sshd@7-10.200.8.19:22-10.200.12.6:53122.service. Oct 2 19:39:06.585012 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:39:06.585095 kernel: audit: type=1130 audit(1696275546.578:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:53122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:07.216000 audit[3072]: USER_ACCT pid=3072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.219595 sshd[3072]: Accepted publickey for core from 10.200.12.6 port 53122 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:07.237746 kernel: audit: type=1101 audit(1696275547.216:1134): pid=3072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.235000 audit[3072]: CRED_ACQ pid=3072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.238139 sshd[3072]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:07.256288 kernel: audit: type=1103 audit(1696275547.235:1135): pid=3072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.256369 kernel: audit: type=1006 audit(1696275547.235:1136): pid=3072 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:39:07.260245 systemd-logind[1315]: New session 10 of user core. Oct 2 19:39:07.261192 systemd[1]: Started session-10.scope. Oct 2 19:39:07.235000 audit[3072]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef8caed70 a2=3 a3=0 items=0 ppid=1 pid=3072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.285186 kernel: audit: type=1300 audit(1696275547.235:1136): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef8caed70 a2=3 a3=0 items=0 ppid=1 pid=3072 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:07.285253 kernel: audit: type=1327 audit(1696275547.235:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:07.235000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:07.265000 audit[3072]: USER_START pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.309661 kernel: audit: type=1105 audit(1696275547.265:1137): pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.267000 audit[3074]: CRED_ACQ pid=3074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.325736 kernel: audit: type=1103 audit(1696275547.267:1138): pid=3074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.939409 sshd[3072]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:07.939000 audit[3072]: USER_END pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.942629 systemd[1]: sshd@7-10.200.8.19:22-10.200.12.6:53122.service: Deactivated successfully. Oct 2 19:39:07.943361 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:39:07.944924 systemd-logind[1315]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:39:07.945823 systemd-logind[1315]: Removed session 10. Oct 2 19:39:07.939000 audit[3072]: CRED_DISP pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.977173 kernel: audit: type=1106 audit(1696275547.939:1139): pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.977255 kernel: audit: type=1104 audit(1696275547.939:1140): pid=3072 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:07.941000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.19:22-10.200.12.6:53122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:11.478762 kubelet[2465]: E1002 19:39:11.478692 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:16.480125 kubelet[2465]: E1002 19:39:16.480085 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:17.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:57838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:17.977864 systemd[1]: Started sshd@8-10.200.8.19:22-10.200.12.6:57838.service. Oct 2 19:39:17.983137 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:17.983211 kernel: audit: type=1130 audit(1696275557.976:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:57838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:18.607000 audit[3089]: USER_ACCT pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.627813 kernel: audit: type=1101 audit(1696275558.607:1143): pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.610643 sshd[3089]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:18.628179 sshd[3089]: Accepted publickey for core from 10.200.12.6 port 57838 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:18.608000 audit[3089]: CRED_ACQ pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.632409 systemd[1]: Started session-11.scope. Oct 2 19:39:18.633368 systemd-logind[1315]: New session 11 of user core. Oct 2 19:39:18.645741 kernel: audit: type=1103 audit(1696275558.608:1144): pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.645813 kernel: audit: type=1006 audit(1696275558.608:1145): pid=3089 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:39:18.608000 audit[3089]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff58b4e2e0 a2=3 a3=0 items=0 ppid=1 pid=3089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:18.655734 kernel: audit: type=1300 audit(1696275558.608:1145): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff58b4e2e0 a2=3 a3=0 items=0 ppid=1 pid=3089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:18.608000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:18.673735 kernel: audit: type=1327 audit(1696275558.608:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:18.637000 audit[3089]: USER_START pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.697834 kernel: audit: type=1105 audit(1696275558.637:1146): pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.697907 kernel: audit: type=1103 audit(1696275558.639:1147): pid=3091 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:18.639000 audit[3091]: CRED_ACQ pid=3091 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:19.121323 sshd[3089]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:19.121000 audit[3089]: USER_END pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:19.125340 systemd[1]: sshd@8-10.200.8.19:22-10.200.12.6:57838.service: Deactivated successfully. Oct 2 19:39:19.126239 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:39:19.127771 systemd-logind[1315]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:39:19.128873 systemd-logind[1315]: Removed session 11. Oct 2 19:39:19.121000 audit[3089]: CRED_DISP pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:19.158285 kernel: audit: type=1106 audit(1696275559.121:1148): pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:19.158356 kernel: audit: type=1104 audit(1696275559.121:1149): pid=3089 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:19.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.19:22-10.200.12.6:57838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:21.481424 kubelet[2465]: E1002 19:39:21.481387 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:21.488592 kubelet[2465]: E1002 19:39:21.488553 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:39:22.692000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.692000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.692000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028135f0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:22.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:22.692000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ae96c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:22.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:22.984000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.990189 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:39:22.990303 kernel: audit: type=1400 audit(1696275562.984:1153): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.984000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c150 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.028559 kernel: audit: type=1300 audit(1696275562.984:1153): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c150 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.028647 kernel: audit: type=1327 audit(1696275562.984:1153): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:22.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:22.985000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.063499 kernel: audit: type=1400 audit(1696275562.985:1154): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.063592 kernel: audit: type=1300 audit(1696275562.985:1154): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c008e64940 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:22.985000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c008e64940 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:22.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.101215 kernel: audit: type=1327 audit(1696275562.985:1154): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.101325 kernel: audit: type=1400 audit(1696275562.985:1155): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.985000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:22.985000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c1e0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:22.985000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.156290 kernel: audit: type=1300 audit(1696275562.985:1155): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c1e0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.156403 kernel: audit: type=1327 audit(1696275562.985:1155): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.156430 kernel: audit: type=1400 audit(1696275563.012:1156): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.012000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.012000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c4b0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.012000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.023000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.023000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00c08c5a0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:23.023000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.023000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00904fe40 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:39:23.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:26.482553 kubelet[2465]: E1002 19:39:26.482487 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:29.247326 kernel: kauditd_printk_skb: 8 callbacks suppressed Oct 2 19:39:29.247465 kernel: audit: type=1130 audit(1696275569.224:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:49620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:29.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:49620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:29.225055 systemd[1]: Started sshd@9-10.200.8.19:22-10.200.12.6:49620.service. Oct 2 19:39:29.843000 audit[3103]: USER_ACCT pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.844087 sshd[3103]: Accepted publickey for core from 10.200.12.6 port 49620 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:29.862739 kernel: audit: type=1101 audit(1696275569.843:1160): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.862000 audit[3103]: CRED_ACQ pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.863496 sshd[3103]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:29.873803 systemd[1]: Started session-12.scope. Oct 2 19:39:29.874933 systemd-logind[1315]: New session 12 of user core. Oct 2 19:39:29.892203 kernel: audit: type=1103 audit(1696275569.862:1161): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.892285 kernel: audit: type=1006 audit(1696275569.862:1162): pid=3103 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:39:29.892307 kernel: audit: type=1300 audit(1696275569.862:1162): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed3509450 a2=3 a3=0 items=0 ppid=1 pid=3103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.862000 audit[3103]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed3509450 a2=3 a3=0 items=0 ppid=1 pid=3103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:29.912748 kernel: audit: type=1327 audit(1696275569.862:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:29.862000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:29.881000 audit[3103]: USER_START pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.915735 kernel: audit: type=1105 audit(1696275569.881:1163): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.883000 audit[3105]: CRED_ACQ pid=3105 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:29.949340 kernel: audit: type=1103 audit(1696275569.883:1164): pid=3105 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:30.348651 sshd[3103]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:30.349000 audit[3103]: USER_END pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:30.352026 systemd-logind[1315]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:39:30.353438 systemd[1]: sshd@9-10.200.8.19:22-10.200.12.6:49620.service: Deactivated successfully. Oct 2 19:39:30.354158 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:39:30.355786 systemd-logind[1315]: Removed session 12. Oct 2 19:39:30.349000 audit[3103]: CRED_DISP pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:30.385510 kernel: audit: type=1106 audit(1696275570.349:1165): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:30.385572 kernel: audit: type=1104 audit(1696275570.349:1166): pid=3103 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:30.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.19:22-10.200.12.6:49620 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:31.483691 kubelet[2465]: E1002 19:39:31.483653 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:35.488978 kubelet[2465]: E1002 19:39:35.488929 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:39:36.484945 kubelet[2465]: E1002 19:39:36.484905 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:39.196000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.202016 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:39.202108 kernel: audit: type=1400 audit(1696275579.196:1168): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.197000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.235756 kernel: audit: type=1400 audit(1696275579.197:1169): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.235837 kernel: audit: type=1300 audit(1696275579.197:1169): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001ca3d20 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.197000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001ca3d20 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.197000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.198000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.292842 kernel: audit: type=1327 audit(1696275579.197:1169): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.292928 kernel: audit: type=1400 audit(1696275579.198:1170): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.292952 kernel: audit: type=1300 audit(1696275579.198:1170): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001ca3e40 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.198000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001ca3e40 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.333573 kernel: audit: type=1327 audit(1696275579.198:1170): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.196000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011290a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.355999 kernel: audit: type=1300 audit(1696275579.196:1168): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0011290a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.356092 kernel: audit: type=1327 audit(1696275579.196:1168): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.196000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.199000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.373867 kernel: audit: type=1400 audit(1696275579.199:1171): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:39.199000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ca3f60 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:39:39.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:40.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.19:22-10.200.12.6:32788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:40.455351 systemd[1]: Started sshd@10-10.200.8.19:22-10.200.12.6:32788.service. Oct 2 19:39:41.082000 audit[3116]: USER_ACCT pid=3116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.083916 sshd[3116]: Accepted publickey for core from 10.200.12.6 port 32788 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:41.084000 audit[3116]: CRED_ACQ pid=3116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.085497 sshd[3116]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:41.084000 audit[3116]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00b36760 a2=3 a3=0 items=0 ppid=1 pid=3116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:41.084000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:41.090913 systemd[1]: Started session-13.scope. Oct 2 19:39:41.091368 systemd-logind[1315]: New session 13 of user core. Oct 2 19:39:41.095000 audit[3116]: USER_START pid=3116 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.096000 audit[3118]: CRED_ACQ pid=3118 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.485946 kubelet[2465]: E1002 19:39:41.485828 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:41.590144 sshd[3116]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:41.591000 audit[3116]: USER_END pid=3116 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.591000 audit[3116]: CRED_DISP pid=3116 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:41.593463 systemd[1]: sshd@10-10.200.8.19:22-10.200.12.6:32788.service: Deactivated successfully. Oct 2 19:39:41.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.19:22-10.200.12.6:32788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:41.594467 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:39:41.595272 systemd-logind[1315]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:39:41.596161 systemd-logind[1315]: Removed session 13. Oct 2 19:39:46.487010 kubelet[2465]: E1002 19:39:46.486969 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:50.491586 env[1331]: time="2023-10-02T19:39:50.491531883Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:39:50.520085 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2812994885.mount: Deactivated successfully. Oct 2 19:39:50.535658 env[1331]: time="2023-10-02T19:39:50.535614633Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\"" Oct 2 19:39:50.536245 env[1331]: time="2023-10-02T19:39:50.536214028Z" level=info msg="StartContainer for \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\"" Oct 2 19:39:50.559975 systemd[1]: Started cri-containerd-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd.scope. Oct 2 19:39:50.570770 systemd[1]: cri-containerd-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd.scope: Deactivated successfully. Oct 2 19:39:50.571122 systemd[1]: Stopped cri-containerd-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd.scope. Oct 2 19:39:50.651916 env[1331]: time="2023-10-02T19:39:50.651853509Z" level=info msg="shim disconnected" id=c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd Oct 2 19:39:50.651916 env[1331]: time="2023-10-02T19:39:50.651915909Z" level=warning msg="cleaning up after shim disconnected" id=c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd namespace=k8s.io Oct 2 19:39:50.651916 env[1331]: time="2023-10-02T19:39:50.651931009Z" level=info msg="cleaning up dead shim" Oct 2 19:39:50.660821 env[1331]: time="2023-10-02T19:39:50.660768839Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3154 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:50.661086 env[1331]: time="2023-10-02T19:39:50.661022636Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:39:50.662238 env[1331]: time="2023-10-02T19:39:50.662188027Z" level=error msg="Failed to pipe stdout of container \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\"" error="reading from a closed fifo" Oct 2 19:39:50.662330 env[1331]: time="2023-10-02T19:39:50.662275227Z" level=error msg="Failed to pipe stderr of container \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\"" error="reading from a closed fifo" Oct 2 19:39:50.668180 env[1331]: time="2023-10-02T19:39:50.668127980Z" level=error msg="StartContainer for \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:50.668381 kubelet[2465]: E1002 19:39:50.668361 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd" Oct 2 19:39:50.668776 kubelet[2465]: E1002 19:39:50.668490 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:50.668776 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:50.668776 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:39:50.668776 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:50.668948 kubelet[2465]: E1002 19:39:50.668539 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:39:50.923957 kubelet[2465]: I1002 19:39:50.923913 2465 scope.go:115] "RemoveContainer" containerID="b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291" Oct 2 19:39:50.924386 kubelet[2465]: I1002 19:39:50.924358 2465 scope.go:115] "RemoveContainer" containerID="b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291" Oct 2 19:39:50.927281 env[1331]: time="2023-10-02T19:39:50.927231121Z" level=info msg="RemoveContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" Oct 2 19:39:50.927657 env[1331]: time="2023-10-02T19:39:50.927619418Z" level=info msg="RemoveContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\"" Oct 2 19:39:50.927951 env[1331]: time="2023-10-02T19:39:50.927906616Z" level=error msg="RemoveContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\" failed" error="failed to set removing state for container \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\": container is already in removing state" Oct 2 19:39:50.928420 kubelet[2465]: E1002 19:39:50.928202 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\": container is already in removing state" containerID="b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291" Oct 2 19:39:50.928420 kubelet[2465]: E1002 19:39:50.928242 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291": container is already in removing state; Skipping pod "cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)" Oct 2 19:39:50.929939 kubelet[2465]: E1002 19:39:50.929779 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:39:50.938120 env[1331]: time="2023-10-02T19:39:50.938087335Z" level=info msg="RemoveContainer for \"b839c21cae7c9c786354878c071a19ccd0d192657bf0dc56eec9e07651e1e291\" returns successfully" Oct 2 19:39:51.488547 kubelet[2465]: E1002 19:39:51.488516 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:51.514966 systemd[1]: run-containerd-runc-k8s.io-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd-runc.qn2O6I.mount: Deactivated successfully. Oct 2 19:39:51.515135 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd-rootfs.mount: Deactivated successfully. Oct 2 19:39:51.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:51.694823 systemd[1]: Started sshd@11-10.200.8.19:22-10.200.12.6:33354.service. Oct 2 19:39:51.718115 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:39:51.718246 kernel: audit: type=1130 audit(1696275591.695:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:52.312000 audit[3168]: USER_ACCT pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.331833 kernel: audit: type=1101 audit(1696275592.312:1182): pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.331892 sshd[3168]: Accepted publickey for core from 10.200.12.6 port 33354 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:52.331000 audit[3168]: CRED_ACQ pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.332388 sshd[3168]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:52.337634 systemd[1]: Started session-14.scope. Oct 2 19:39:52.339251 systemd-logind[1315]: New session 14 of user core. Oct 2 19:39:52.349748 kernel: audit: type=1103 audit(1696275592.331:1183): pid=3168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.349817 kernel: audit: type=1006 audit(1696275592.331:1184): pid=3168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:39:52.331000 audit[3168]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4634cbd0 a2=3 a3=0 items=0 ppid=1 pid=3168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:52.377312 kernel: audit: type=1300 audit(1696275592.331:1184): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4634cbd0 a2=3 a3=0 items=0 ppid=1 pid=3168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:52.377390 kernel: audit: type=1327 audit(1696275592.331:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:52.331000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:52.343000 audit[3168]: USER_START pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.402599 kernel: audit: type=1105 audit(1696275592.343:1185): pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.345000 audit[3170]: CRED_ACQ pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.418740 kernel: audit: type=1103 audit(1696275592.345:1186): pid=3170 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.820253 sshd[3168]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:52.821000 audit[3168]: USER_END pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.823651 systemd[1]: sshd@11-10.200.8.19:22-10.200.12.6:33354.service: Deactivated successfully. Oct 2 19:39:52.824526 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:39:52.826485 systemd-logind[1315]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:39:52.827628 systemd-logind[1315]: Removed session 14. Oct 2 19:39:52.821000 audit[3168]: CRED_DISP pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.857897 kernel: audit: type=1106 audit(1696275592.821:1187): pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.857990 kernel: audit: type=1104 audit(1696275592.821:1188): pid=3168 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:52.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.19:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:53.755968 kubelet[2465]: W1002 19:39:53.755924 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd.scope WatchSource:0}: task c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd not found: not found Oct 2 19:39:56.489693 kubelet[2465]: E1002 19:39:56.489660 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:01.490732 kubelet[2465]: E1002 19:40:01.490681 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:02.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:36360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:02.944047 systemd[1]: Started sshd@12-10.200.8.19:22-10.200.12.6:36360.service. Oct 2 19:40:02.948925 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:02.949007 kernel: audit: type=1130 audit(1696275602.943:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:36360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:03.574000 audit[3182]: USER_ACCT pid=3182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.594074 sshd[3182]: Accepted publickey for core from 10.200.12.6 port 36360 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:03.593000 audit[3182]: CRED_ACQ pid=3182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.594482 sshd[3182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:03.605942 systemd[1]: Started session-15.scope. Oct 2 19:40:03.607365 systemd-logind[1315]: New session 15 of user core. Oct 2 19:40:03.612887 kernel: audit: type=1101 audit(1696275603.574:1191): pid=3182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.612991 kernel: audit: type=1103 audit(1696275603.593:1192): pid=3182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.593000 audit[3182]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00aeeff0 a2=3 a3=0 items=0 ppid=1 pid=3182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:03.625748 kernel: audit: type=1006 audit(1696275603.593:1193): pid=3182 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:40:03.625794 kernel: audit: type=1300 audit(1696275603.593:1193): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00aeeff0 a2=3 a3=0 items=0 ppid=1 pid=3182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:03.593000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:03.642733 kernel: audit: type=1327 audit(1696275603.593:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:03.613000 audit[3182]: USER_START pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.648740 kernel: audit: type=1105 audit(1696275603.613:1194): pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.619000 audit[3186]: CRED_ACQ pid=3186 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:03.683158 kernel: audit: type=1103 audit(1696275603.619:1195): pid=3186 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:04.408429 sshd[3182]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:04.409000 audit[3182]: USER_END pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:04.412203 systemd[1]: sshd@12-10.200.8.19:22-10.200.12.6:36360.service: Deactivated successfully. Oct 2 19:40:04.413118 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:40:04.414658 systemd-logind[1315]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:40:04.415808 systemd-logind[1315]: Removed session 15. Oct 2 19:40:04.409000 audit[3182]: CRED_DISP pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:04.444529 kernel: audit: type=1106 audit(1696275604.409:1196): pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:04.444634 kernel: audit: type=1104 audit(1696275604.409:1197): pid=3182 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:04.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.19:22-10.200.12.6:36360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:04.491079 kubelet[2465]: E1002 19:40:04.490912 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:40:06.492080 kubelet[2465]: E1002 19:40:06.492051 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:11.493098 kubelet[2465]: E1002 19:40:11.493052 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:14.537688 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:14.537809 kernel: audit: type=1130 audit(1696275614.514:1199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:37002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:14.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:37002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:14.515186 systemd[1]: Started sshd@13-10.200.8.19:22-10.200.12.6:37002.service. Oct 2 19:40:15.181865 kernel: audit: type=1101 audit(1696275615.161:1200): pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.161000 audit[3201]: USER_ACCT pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.182115 sshd[3201]: Accepted publickey for core from 10.200.12.6 port 37002 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:15.182273 sshd[3201]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:15.181000 audit[3201]: CRED_ACQ pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.187478 systemd[1]: Started session-16.scope. Oct 2 19:40:15.188445 systemd-logind[1315]: New session 16 of user core. Oct 2 19:40:15.209276 kernel: audit: type=1103 audit(1696275615.181:1201): pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.209360 kernel: audit: type=1006 audit(1696275615.181:1202): pid=3201 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:40:15.209383 kernel: audit: type=1300 audit(1696275615.181:1202): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecd4f1a0 a2=3 a3=0 items=0 ppid=1 pid=3201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.181000 audit[3201]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecd4f1a0 a2=3 a3=0 items=0 ppid=1 pid=3201 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:15.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:15.226770 kernel: audit: type=1327 audit(1696275615.181:1202): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:15.193000 audit[3201]: USER_START pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.233738 kernel: audit: type=1105 audit(1696275615.193:1203): pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.195000 audit[3203]: CRED_ACQ pid=3203 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.267008 kernel: audit: type=1103 audit(1696275615.195:1204): pid=3203 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.489318 kubelet[2465]: E1002 19:40:15.489156 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:40:15.957872 sshd[3201]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:15.958000 audit[3201]: USER_END pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.961134 systemd-logind[1315]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:40:15.962334 systemd[1]: sshd@13-10.200.8.19:22-10.200.12.6:37002.service: Deactivated successfully. Oct 2 19:40:15.963055 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:40:15.964323 systemd-logind[1315]: Removed session 16. Oct 2 19:40:15.958000 audit[3201]: CRED_DISP pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.994617 kernel: audit: type=1106 audit(1696275615.958:1205): pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.994759 kernel: audit: type=1104 audit(1696275615.958:1206): pid=3201 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:15.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.19:22-10.200.12.6:37002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:16.493470 kubelet[2465]: E1002 19:40:16.493440 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:21.494647 kubelet[2465]: E1002 19:40:21.494618 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:22.694000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.699451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:22.699576 kernel: audit: type=1400 audit(1696275622.694:1209): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.694000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.733862 kernel: audit: type=1400 audit(1696275622.694:1208): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.733953 kernel: audit: type=1300 audit(1696275622.694:1208): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001643560 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:22.694000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001643560 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:22.694000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:22.773155 kernel: audit: type=1327 audit(1696275622.694:1208): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:22.773241 kernel: audit: type=1300 audit(1696275622.694:1209): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00189c3f0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:22.694000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00189c3f0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:22.694000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:22.812274 kernel: audit: type=1327 audit(1696275622.694:1209): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:22.986000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.986000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a37db30 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:23.025235 kernel: audit: type=1400 audit(1696275622.986:1210): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.025355 kernel: audit: type=1300 audit(1696275622.986:1210): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a37db30 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:23.025400 kernel: audit: type=1327 audit(1696275622.986:1210): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:22.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:22.987000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.043740 kernel: audit: type=1400 audit(1696275622.987:1211): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.987000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a4a3500 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:22.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:22.987000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:22.987000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001f505c0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:22.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:23.014000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.014000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a4a3920 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:23.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:23.025000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.025000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a4a3a10 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:23.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:23.025000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.025000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c001f45360 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:40:23.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:26.055000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.19:22-10.200.12.6:41044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:26.055495 systemd[1]: Started sshd@14-10.200.8.19:22-10.200.12.6:41044.service. Oct 2 19:40:26.495372 kubelet[2465]: E1002 19:40:26.495141 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:26.677000 audit[3219]: USER_ACCT pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:26.678428 sshd[3219]: Accepted publickey for core from 10.200.12.6 port 41044 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:26.678000 audit[3219]: CRED_ACQ pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:26.678000 audit[3219]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcb016340 a2=3 a3=0 items=0 ppid=1 pid=3219 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:26.678000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:26.680156 sshd[3219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:26.685520 systemd-logind[1315]: New session 17 of user core. Oct 2 19:40:26.686406 systemd[1]: Started session-17.scope. Oct 2 19:40:26.690000 audit[3219]: USER_START pid=3219 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:26.691000 audit[3223]: CRED_ACQ pid=3223 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:27.175214 sshd[3219]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:27.175000 audit[3219]: USER_END pid=3219 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:27.176000 audit[3219]: CRED_DISP pid=3219 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:27.178251 systemd[1]: sshd@14-10.200.8.19:22-10.200.12.6:41044.service: Deactivated successfully. Oct 2 19:40:27.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.19:22-10.200.12.6:41044 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:27.179219 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:40:27.179957 systemd-logind[1315]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:40:27.180750 systemd-logind[1315]: Removed session 17. Oct 2 19:40:28.489956 kubelet[2465]: E1002 19:40:28.489917 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:40:31.496242 kubelet[2465]: E1002 19:40:31.496201 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:36.496770 kubelet[2465]: E1002 19:40:36.496738 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:37.282049 systemd[1]: Started sshd@15-10.200.8.19:22-10.200.12.6:39194.service. Oct 2 19:40:37.305537 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:37.305654 kernel: audit: type=1130 audit(1696275637.282:1225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.19:22-10.200.12.6:39194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:37.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.19:22-10.200.12.6:39194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:37.905000 audit[3234]: USER_ACCT pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:37.906007 sshd[3234]: Accepted publickey for core from 10.200.12.6 port 39194 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:37.925003 kernel: audit: type=1101 audit(1696275637.905:1226): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:37.924000 audit[3234]: CRED_ACQ pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:37.925315 sshd[3234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:37.931338 systemd[1]: Started session-18.scope. Oct 2 19:40:37.932322 systemd-logind[1315]: New session 18 of user core. Oct 2 19:40:37.952242 kernel: audit: type=1103 audit(1696275637.924:1227): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:37.952314 kernel: audit: type=1006 audit(1696275637.924:1228): pid=3234 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 19:40:37.952339 kernel: audit: type=1300 audit(1696275637.924:1228): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffba51af80 a2=3 a3=0 items=0 ppid=1 pid=3234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:37.924000 audit[3234]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffba51af80 a2=3 a3=0 items=0 ppid=1 pid=3234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:37.924000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:37.975592 kernel: audit: type=1327 audit(1696275637.924:1228): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:37.936000 audit[3234]: USER_START pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:37.939000 audit[3236]: CRED_ACQ pid=3236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.011034 kernel: audit: type=1105 audit(1696275637.936:1229): pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.011116 kernel: audit: type=1103 audit(1696275637.939:1230): pid=3236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.405917 sshd[3234]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:38.406000 audit[3234]: USER_END pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.409605 systemd-logind[1315]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:40:38.411181 systemd[1]: sshd@15-10.200.8.19:22-10.200.12.6:39194.service: Deactivated successfully. Oct 2 19:40:38.411902 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:40:38.413410 systemd-logind[1315]: Removed session 18. Oct 2 19:40:38.406000 audit[3234]: CRED_DISP pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.447051 kernel: audit: type=1106 audit(1696275638.406:1231): pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.447134 kernel: audit: type=1104 audit(1696275638.406:1232): pid=3234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:38.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.19:22-10.200.12.6:39194 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:39.198000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:39.198000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:39.198000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001f8a960 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:39.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:39.198000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001d0c820 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:39.198000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:39.199000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:39.199000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001d0c940 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:39.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:39.201000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:39.201000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001f8aa80 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:40:39.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:41.497474 kubelet[2465]: E1002 19:40:41.497440 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:43.489570 kubelet[2465]: E1002 19:40:43.489521 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:40:46.499337 kubelet[2465]: E1002 19:40:46.499307 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:48.534386 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:40:48.534501 kernel: audit: type=1130 audit(1696275648.511:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:36356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:48.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:36356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:48.512126 systemd[1]: Started sshd@16-10.200.8.19:22-10.200.12.6:36356.service. Oct 2 19:40:49.153000 audit[3248]: USER_ACCT pid=3248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.154745 sshd[3248]: Accepted publickey for core from 10.200.12.6 port 36356 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:49.174750 kernel: audit: type=1101 audit(1696275649.153:1239): pid=3248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.173000 audit[3248]: CRED_ACQ pid=3248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.175311 sshd[3248]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:49.180408 systemd[1]: Started session-19.scope. Oct 2 19:40:49.181493 systemd-logind[1315]: New session 19 of user core. Oct 2 19:40:49.193867 kernel: audit: type=1103 audit(1696275649.173:1240): pid=3248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.193938 kernel: audit: type=1006 audit(1696275649.173:1241): pid=3248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:40:49.173000 audit[3248]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff99c12840 a2=3 a3=0 items=0 ppid=1 pid=3248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:49.218975 kernel: audit: type=1300 audit(1696275649.173:1241): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff99c12840 a2=3 a3=0 items=0 ppid=1 pid=3248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:49.173000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:49.219774 kernel: audit: type=1327 audit(1696275649.173:1241): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:49.185000 audit[3248]: USER_START pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.225748 kernel: audit: type=1105 audit(1696275649.185:1242): pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.187000 audit[3250]: CRED_ACQ pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.260398 kernel: audit: type=1103 audit(1696275649.187:1243): pid=3250 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.654884 sshd[3248]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:49.655000 audit[3248]: USER_END pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.657954 systemd[1]: sshd@16-10.200.8.19:22-10.200.12.6:36356.service: Deactivated successfully. Oct 2 19:40:49.658685 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:40:49.660109 systemd-logind[1315]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:40:49.661048 systemd-logind[1315]: Removed session 19. Oct 2 19:40:49.655000 audit[3248]: CRED_DISP pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.690668 kernel: audit: type=1106 audit(1696275649.655:1244): pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.690762 kernel: audit: type=1104 audit(1696275649.655:1245): pid=3248 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:49.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.19:22-10.200.12.6:36356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:49.761863 systemd[1]: Started sshd@17-10.200.8.19:22-10.200.12.6:36370.service. Oct 2 19:40:49.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.19:22-10.200.12.6:36370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:50.390000 audit[3263]: USER_ACCT pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:50.391799 sshd[3263]: Accepted publickey for core from 10.200.12.6 port 36370 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:50.392000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:50.392000 audit[3263]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbf6c1070 a2=3 a3=0 items=0 ppid=1 pid=3263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:50.392000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:50.393534 sshd[3263]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:50.398225 systemd[1]: Started session-20.scope. Oct 2 19:40:50.398703 systemd-logind[1315]: New session 20 of user core. Oct 2 19:40:50.402000 audit[3263]: USER_START pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:50.404000 audit[3265]: CRED_ACQ pid=3265 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:51.500236 kubelet[2465]: E1002 19:40:51.500195 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:51.624499 sshd[3263]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:51.625000 audit[3263]: USER_END pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:51.625000 audit[3263]: CRED_DISP pid=3263 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:51.628090 systemd[1]: sshd@17-10.200.8.19:22-10.200.12.6:36370.service: Deactivated successfully. Oct 2 19:40:51.629130 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:40:51.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.19:22-10.200.12.6:36370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:51.630189 systemd-logind[1315]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:40:51.631162 systemd-logind[1315]: Removed session 20. Oct 2 19:40:51.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.19:22-10.200.12.6:36386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:51.728483 systemd[1]: Started sshd@18-10.200.8.19:22-10.200.12.6:36386.service. Oct 2 19:40:52.347000 audit[3273]: USER_ACCT pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.348046 sshd[3273]: Accepted publickey for core from 10.200.12.6 port 36386 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:52.348000 audit[3273]: CRED_ACQ pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.348000 audit[3273]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee57b6700 a2=3 a3=0 items=0 ppid=1 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:52.348000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:52.349422 sshd[3273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:52.354365 systemd[1]: Started session-21.scope. Oct 2 19:40:52.354836 systemd-logind[1315]: New session 21 of user core. Oct 2 19:40:52.358000 audit[3273]: USER_START pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.360000 audit[3275]: CRED_ACQ pid=3275 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.844963 sshd[3273]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:52.845000 audit[3273]: USER_END pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.846000 audit[3273]: CRED_DISP pid=3273 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:52.848463 systemd[1]: sshd@18-10.200.8.19:22-10.200.12.6:36386.service: Deactivated successfully. Oct 2 19:40:52.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.19:22-10.200.12.6:36386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:52.849470 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:40:52.850209 systemd-logind[1315]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:40:52.851082 systemd-logind[1315]: Removed session 21. Oct 2 19:40:56.489513 kubelet[2465]: E1002 19:40:56.489403 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:40:56.500734 kubelet[2465]: E1002 19:40:56.500703 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:01.502189 kubelet[2465]: E1002 19:41:01.502151 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:02.972479 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:41:02.972637 kernel: audit: type=1130 audit(1696275662.950:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:54324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:02.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:54324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:02.950548 systemd[1]: Started sshd@19-10.200.8.19:22-10.200.12.6:54324.service. Oct 2 19:41:03.569000 audit[3285]: USER_ACCT pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.570000 audit[3285]: CRED_ACQ pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.571545 sshd[3285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:03.589134 sshd[3285]: Accepted publickey for core from 10.200.12.6 port 54324 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:03.594209 systemd[1]: Started session-22.scope. Oct 2 19:41:03.595220 systemd-logind[1315]: New session 22 of user core. Oct 2 19:41:03.605117 kernel: audit: type=1101 audit(1696275663.569:1266): pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.605198 kernel: audit: type=1103 audit(1696275663.570:1267): pid=3285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.605224 kernel: audit: type=1006 audit(1696275663.570:1268): pid=3285 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:41:03.618745 kernel: audit: type=1300 audit(1696275663.570:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2cdac9f0 a2=3 a3=0 items=0 ppid=1 pid=3285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.570000 audit[3285]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2cdac9f0 a2=3 a3=0 items=0 ppid=1 pid=3285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:03.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.632781 kernel: audit: type=1327 audit(1696275663.570:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:03.599000 audit[3285]: USER_START pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.638832 kernel: audit: type=1105 audit(1696275663.599:1269): pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.601000 audit[3287]: CRED_ACQ pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:03.672035 kernel: audit: type=1103 audit(1696275663.601:1270): pid=3287 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:04.113347 sshd[3285]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:04.114000 audit[3285]: USER_END pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:04.117213 systemd[1]: sshd@19-10.200.8.19:22-10.200.12.6:54324.service: Deactivated successfully. Oct 2 19:41:04.118103 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:41:04.119870 systemd-logind[1315]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:41:04.120984 systemd-logind[1315]: Removed session 22. Oct 2 19:41:04.114000 audit[3285]: CRED_DISP pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:04.150989 kernel: audit: type=1106 audit(1696275664.114:1271): pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:04.151070 kernel: audit: type=1104 audit(1696275664.114:1272): pid=3285 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:04.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.19:22-10.200.12.6:54324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:06.503334 kubelet[2465]: E1002 19:41:06.503303 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:07.489332 kubelet[2465]: E1002 19:41:07.489287 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:41:11.504944 kubelet[2465]: E1002 19:41:11.504907 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:14.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.239312 systemd[1]: Started sshd@20-10.200.8.19:22-10.200.12.6:57098.service. Oct 2 19:41:14.244297 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:14.244352 kernel: audit: type=1130 audit(1696275674.238:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:14.944000 audit[3299]: USER_ACCT pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:14.947207 sshd[3299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:14.964377 sshd[3299]: Accepted publickey for core from 10.200.12.6 port 57098 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:14.964745 kernel: audit: type=1101 audit(1696275674.944:1275): pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:14.946000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:14.969697 systemd[1]: Started session-23.scope. Oct 2 19:41:14.970782 systemd-logind[1315]: New session 23 of user core. Oct 2 19:41:14.981733 kernel: audit: type=1103 audit(1696275674.946:1276): pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:14.981797 kernel: audit: type=1006 audit(1696275674.946:1277): pid=3299 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:41:14.991817 kernel: audit: type=1300 audit(1696275674.946:1277): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd954a1140 a2=3 a3=0 items=0 ppid=1 pid=3299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:14.946000 audit[3299]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd954a1140 a2=3 a3=0 items=0 ppid=1 pid=3299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:14.946000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:15.015467 kernel: audit: type=1327 audit(1696275674.946:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:14.974000 audit[3299]: USER_START pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.034647 kernel: audit: type=1105 audit(1696275674.974:1278): pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.034747 kernel: audit: type=1103 audit(1696275674.977:1279): pid=3301 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:14.977000 audit[3301]: CRED_ACQ pid=3301 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.487073 sshd[3299]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:15.487000 audit[3299]: USER_END pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.490049 systemd[1]: sshd@20-10.200.8.19:22-10.200.12.6:57098.service: Deactivated successfully. Oct 2 19:41:15.490923 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:41:15.492364 systemd-logind[1315]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:41:15.493276 systemd-logind[1315]: Removed session 23. Oct 2 19:41:15.488000 audit[3299]: CRED_DISP pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.507743 kernel: audit: type=1106 audit(1696275675.487:1280): pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.507790 kernel: audit: type=1104 audit(1696275675.488:1281): pid=3299 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:15.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.19:22-10.200.12.6:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:16.505660 kubelet[2465]: E1002 19:41:16.505626 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:21.506956 kubelet[2465]: E1002 19:41:21.506915 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:22.489345 kubelet[2465]: E1002 19:41:22.489299 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:41:22.696000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:22.700618 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:22.700701 kernel: audit: type=1400 audit(1696275682.696:1284): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:22.696000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:22.734071 kernel: audit: type=1400 audit(1696275682.696:1283): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:22.734160 kernel: audit: type=1300 audit(1696275682.696:1283): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002798ff0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:22.696000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002798ff0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:22.696000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:22.756791 kernel: audit: type=1327 audit(1696275682.696:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:22.696000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020cb9a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:22.796606 kernel: audit: type=1300 audit(1696275682.696:1284): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020cb9a0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:22.796744 kernel: audit: type=1327 audit(1696275682.696:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:22.696000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:22.987000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.005737 kernel: audit: type=1400 audit(1696275682.987:1285): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.005839 kernel: audit: type=1300 audit(1696275682.987:1285): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0087dcdb0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:22.987000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0087dcdb0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:22.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.026744 kernel: audit: type=1327 audit(1696275682.987:1285): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.058290 kernel: audit: type=1400 audit(1696275683.005:1286): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00194d7c0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008e6b050 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.011000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.011000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008e6b440 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:23.011000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.041000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.041000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c004231c60 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:23.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:23.041000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.041000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008e6b5f0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:41:23.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:25.767349 systemd[1]: Started sshd@21-10.200.8.19:22-10.200.12.6:33874.service. Oct 2 19:41:25.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.19:22-10.200.12.6:33874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:26.397000 audit[3311]: USER_ACCT pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.398463 sshd[3311]: Accepted publickey for core from 10.200.12.6 port 33874 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:26.398000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.398000 audit[3311]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaab8f310 a2=3 a3=0 items=0 ppid=1 pid=3311 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:26.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:26.399937 sshd[3311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:26.405097 systemd[1]: Started session-24.scope. Oct 2 19:41:26.405558 systemd-logind[1315]: New session 24 of user core. Oct 2 19:41:26.412000 audit[3311]: USER_START pid=3311 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.414000 audit[3313]: CRED_ACQ pid=3313 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.508096 kubelet[2465]: E1002 19:41:26.508068 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:26.887814 sshd[3311]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:26.888000 audit[3311]: USER_END pid=3311 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.888000 audit[3311]: CRED_DISP pid=3311 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:26.890878 systemd[1]: sshd@21-10.200.8.19:22-10.200.12.6:33874.service: Deactivated successfully. Oct 2 19:41:26.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.19:22-10.200.12.6:33874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:26.891851 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:41:26.892562 systemd-logind[1315]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:41:26.893425 systemd-logind[1315]: Removed session 24. Oct 2 19:41:31.509277 kubelet[2465]: E1002 19:41:31.509237 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:35.488261 kubelet[2465]: E1002 19:41:35.488207 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:41:36.510448 kubelet[2465]: E1002 19:41:36.510405 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:36.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.19:22-10.200.12.6:54404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:36.993759 systemd[1]: Started sshd@22-10.200.8.19:22-10.200.12.6:54404.service. Oct 2 19:41:37.018051 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:41:37.018244 kernel: audit: type=1130 audit(1696275696.993:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.19:22-10.200.12.6:54404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:37.638000 audit[3325]: USER_ACCT pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.658908 kernel: audit: type=1101 audit(1696275697.638:1301): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.658966 sshd[3325]: Accepted publickey for core from 10.200.12.6 port 54404 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:37.659256 sshd[3325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:37.658000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.663956 systemd[1]: Started session-25.scope. Oct 2 19:41:37.664954 systemd-logind[1315]: New session 25 of user core. Oct 2 19:41:37.676803 kernel: audit: type=1103 audit(1696275697.658:1302): pid=3325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.676887 kernel: audit: type=1006 audit(1696275697.658:1303): pid=3325 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:41:37.658000 audit[3325]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc14abec0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:37.686839 kernel: audit: type=1300 audit(1696275697.658:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc14abec0 a2=3 a3=0 items=0 ppid=1 pid=3325 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:37.658000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:37.710375 kernel: audit: type=1327 audit(1696275697.658:1303): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:37.711024 kernel: audit: type=1105 audit(1696275697.671:1304): pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.671000 audit[3325]: USER_START pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.673000 audit[3327]: CRED_ACQ pid=3327 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:37.745688 kernel: audit: type=1103 audit(1696275697.673:1305): pid=3327 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:38.170476 sshd[3325]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:38.171000 audit[3325]: USER_END pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:38.174274 systemd[1]: sshd@22-10.200.8.19:22-10.200.12.6:54404.service: Deactivated successfully. Oct 2 19:41:38.175134 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:41:38.176654 systemd-logind[1315]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:41:38.177764 systemd-logind[1315]: Removed session 25. Oct 2 19:41:38.171000 audit[3325]: CRED_DISP pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:38.208836 kernel: audit: type=1106 audit(1696275698.171:1306): pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:38.208913 kernel: audit: type=1104 audit(1696275698.171:1307): pid=3325 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:38.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.19:22-10.200.12.6:54404 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:39.199000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:39.199000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001a94e80 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:39.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:39.199000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:39.199000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001a94ea0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:39.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:39.199000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:39.199000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ae8940 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:39.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:39.200000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:39.200000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ae8a80 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:41:39.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:41.511675 kubelet[2465]: E1002 19:41:41.511629 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:46.512832 kubelet[2465]: E1002 19:41:46.512791 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:48.299436 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:48.299562 kernel: audit: type=1130 audit(1696275708.275:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:41200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:48.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:41200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:48.276792 systemd[1]: Started sshd@23-10.200.8.19:22-10.200.12.6:41200.service. Oct 2 19:41:48.491557 kubelet[2465]: E1002 19:41:48.491524 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:41:48.908000 audit[3340]: USER_ACCT pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.912012 sshd[3340]: Accepted publickey for core from 10.200.12.6 port 41200 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:48.928000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.930883 sshd[3340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:48.935918 systemd[1]: Started session-26.scope. Oct 2 19:41:48.936896 systemd-logind[1315]: New session 26 of user core. Oct 2 19:41:48.946993 kernel: audit: type=1101 audit(1696275708.908:1314): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.947077 kernel: audit: type=1103 audit(1696275708.928:1315): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.947111 kernel: audit: type=1006 audit(1696275708.928:1316): pid=3340 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:41:48.957520 kernel: audit: type=1300 audit(1696275708.928:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff39f3e1d0 a2=3 a3=0 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:48.928000 audit[3340]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff39f3e1d0 a2=3 a3=0 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:48.975061 kernel: audit: type=1327 audit(1696275708.928:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:48.928000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:48.981285 kernel: audit: type=1105 audit(1696275708.940:1317): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.940000 audit[3340]: USER_START pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:48.942000 audit[3342]: CRED_ACQ pid=3342 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.016334 kernel: audit: type=1103 audit(1696275708.942:1318): pid=3342 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.415599 sshd[3340]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:49.415000 audit[3340]: USER_END pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.419352 systemd[1]: sshd@23-10.200.8.19:22-10.200.12.6:41200.service: Deactivated successfully. Oct 2 19:41:49.420276 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:41:49.421919 systemd-logind[1315]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:41:49.422845 systemd-logind[1315]: Removed session 26. Oct 2 19:41:49.415000 audit[3340]: CRED_DISP pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.453491 kernel: audit: type=1106 audit(1696275709.415:1319): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.453577 kernel: audit: type=1104 audit(1696275709.415:1320): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:49.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.19:22-10.200.12.6:41200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:51.513755 kubelet[2465]: E1002 19:41:51.513704 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:56.514747 kubelet[2465]: E1002 19:41:56.514702 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:59.489262 kubelet[2465]: E1002 19:41:59.489225 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:41:59.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:38126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:59.521540 systemd[1]: Started sshd@24-10.200.8.19:22-10.200.12.6:38126.service. Oct 2 19:41:59.526908 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:59.527010 kernel: audit: type=1130 audit(1696275719.520:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:38126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.151000 audit[3351]: USER_ACCT pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.151000 audit[3351]: CRED_ACQ pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.155151 sshd[3351]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:00.172473 sshd[3351]: Accepted publickey for core from 10.200.12.6 port 38126 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:00.172827 kernel: audit: type=1101 audit(1696275720.151:1323): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.172890 kernel: audit: type=1103 audit(1696275720.151:1324): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.181923 systemd[1]: Started session-27.scope. Oct 2 19:42:00.182608 systemd-logind[1315]: New session 27 of user core. Oct 2 19:42:00.200333 kernel: audit: type=1006 audit(1696275720.151:1325): pid=3351 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:42:00.151000 audit[3351]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff80c4d00 a2=3 a3=0 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:00.200803 kernel: audit: type=1300 audit(1696275720.151:1325): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff80c4d00 a2=3 a3=0 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:00.151000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:00.189000 audit[3351]: USER_START pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.243757 kernel: audit: type=1327 audit(1696275720.151:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:00.243849 kernel: audit: type=1105 audit(1696275720.189:1326): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.243890 kernel: audit: type=1103 audit(1696275720.191:1327): pid=3353 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.191000 audit[3353]: CRED_ACQ pid=3353 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.662671 sshd[3351]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:00.662000 audit[3351]: USER_END pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.666442 systemd-logind[1315]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:42:00.667942 systemd[1]: sshd@24-10.200.8.19:22-10.200.12.6:38126.service: Deactivated successfully. Oct 2 19:42:00.668823 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:42:00.670496 systemd-logind[1315]: Removed session 27. Oct 2 19:42:00.662000 audit[3351]: CRED_DISP pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.700392 kernel: audit: type=1106 audit(1696275720.662:1328): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.700490 kernel: audit: type=1104 audit(1696275720.662:1329): pid=3351 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:00.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.19:22-10.200.12.6:38126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.516424 kubelet[2465]: E1002 19:42:01.516388 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:06.517213 kubelet[2465]: E1002 19:42:06.517176 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:10.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:33486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:10.769257 systemd[1]: Started sshd@25-10.200.8.19:22-10.200.12.6:33486.service. Oct 2 19:42:10.774349 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:10.774443 kernel: audit: type=1130 audit(1696275730.767:1331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:33486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.397000 audit[3362]: USER_ACCT pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.419535 sshd[3362]: Accepted publickey for core from 10.200.12.6 port 33486 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:11.420003 kernel: audit: type=1101 audit(1696275731.397:1332): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.420022 sshd[3362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:11.399000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.425220 systemd[1]: Started session-28.scope. Oct 2 19:42:11.426788 systemd-logind[1315]: New session 28 of user core. Oct 2 19:42:11.437768 kernel: audit: type=1103 audit(1696275731.399:1333): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.437837 kernel: audit: type=1006 audit(1696275731.399:1334): pid=3362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:42:11.399000 audit[3362]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5bef80d0 a2=3 a3=0 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:11.465167 kernel: audit: type=1300 audit(1696275731.399:1334): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5bef80d0 a2=3 a3=0 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:11.465824 kernel: audit: type=1327 audit(1696275731.399:1334): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:11.399000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:11.428000 audit[3362]: USER_START pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.490363 kernel: audit: type=1105 audit(1696275731.428:1335): pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.490441 kernel: audit: type=1103 audit(1696275731.428:1336): pid=3364 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.428000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.518279 kubelet[2465]: E1002 19:42:11.518254 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:11.890561 sshd[3362]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:11.890000 audit[3362]: USER_END pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.894021 systemd[1]: sshd@25-10.200.8.19:22-10.200.12.6:33486.service: Deactivated successfully. Oct 2 19:42:11.894917 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:42:11.898558 systemd-logind[1315]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:42:11.899655 systemd-logind[1315]: Removed session 28. Oct 2 19:42:11.890000 audit[3362]: CRED_DISP pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.911736 kernel: audit: type=1106 audit(1696275731.890:1337): pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.911778 kernel: audit: type=1104 audit(1696275731.890:1338): pid=3362 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:11.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.19:22-10.200.12.6:33486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:13.488977 kubelet[2465]: E1002 19:42:13.488927 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:42:16.519595 kubelet[2465]: E1002 19:42:16.519561 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:21.521168 kubelet[2465]: E1002 19:42:21.521130 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:22.019288 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:22.019426 kernel: audit: type=1130 audit(1696275741.995:1340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:43600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:43600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.996674 systemd[1]: Started sshd@26-10.200.8.19:22-10.200.12.6:43600.service. Oct 2 19:42:22.630000 audit[3376]: USER_ACCT pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.632460 sshd[3376]: Accepted publickey for core from 10.200.12.6 port 43600 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:22.651739 kernel: audit: type=1101 audit(1696275742.630:1341): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.652420 sshd[3376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:22.649000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.657706 systemd[1]: Started session-29.scope. Oct 2 19:42:22.658340 systemd-logind[1315]: New session 29 of user core. Oct 2 19:42:22.671358 kernel: audit: type=1103 audit(1696275742.649:1342): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.671458 kernel: audit: type=1006 audit(1696275742.650:1343): pid=3376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:42:22.650000 audit[3376]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef101b670 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:22.697204 kernel: audit: type=1300 audit(1696275742.650:1343): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef101b670 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:22.650000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:22.703727 kernel: audit: type=1327 audit(1696275742.650:1343): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:22.703796 kernel: audit: type=1105 audit(1696275742.662:1344): pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.662000 audit[3376]: USER_START pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.664000 audit[3378]: CRED_ACQ pid=3378 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.738019 kernel: audit: type=1103 audit(1696275742.664:1345): pid=3378 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:22.738111 kernel: audit: type=1400 audit(1696275742.694:1346): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:22.694000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:22.694000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d69b40 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:22.694000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:22.696000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:22.696000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f88540 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:22.696000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:22.777735 kernel: audit: type=1300 audit(1696275742.694:1346): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d69b40 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:22.987000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:22.987000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008679e60 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:22.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003fccf00 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c008679f20 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.014000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.014000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0058162d0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:23.014000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.041000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.041000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0058166f0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:23.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.041000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.041000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0018bb300 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:42:23.041000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:23.133750 sshd[3376]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:23.133000 audit[3376]: USER_END pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:23.133000 audit[3376]: CRED_DISP pid=3376 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:23.136784 systemd[1]: sshd@26-10.200.8.19:22-10.200.12.6:43600.service: Deactivated successfully. Oct 2 19:42:23.135000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.19:22-10.200.12.6:43600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:23.137743 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:42:23.138489 systemd-logind[1315]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:42:23.139312 systemd-logind[1315]: Removed session 29. Oct 2 19:42:24.488742 kubelet[2465]: E1002 19:42:24.488681 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e)\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:42:26.522762 kubelet[2465]: E1002 19:42:26.522673 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:31.523910 kubelet[2465]: E1002 19:42:31.523828 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:33.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.239960 systemd[1]: Started sshd@27-10.200.8.19:22-10.200.12.6:32988.service. Oct 2 19:42:33.245006 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:42:33.245230 kernel: audit: type=1130 audit(1696275753.238:1357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.864000 audit[3390]: USER_ACCT pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.884704 sshd[3390]: Accepted publickey for core from 10.200.12.6 port 32988 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:33.885064 kernel: audit: type=1101 audit(1696275753.864:1358): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.885099 sshd[3390]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:33.883000 audit[3390]: CRED_ACQ pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.890202 systemd[1]: Started session-30.scope. Oct 2 19:42:33.891297 systemd-logind[1315]: New session 30 of user core. Oct 2 19:42:33.901754 kernel: audit: type=1103 audit(1696275753.883:1359): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.901841 kernel: audit: type=1006 audit(1696275753.883:1360): pid=3390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:42:33.883000 audit[3390]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd22de8e60 a2=3 a3=0 items=0 ppid=1 pid=3390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.927232 kernel: audit: type=1300 audit(1696275753.883:1360): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd22de8e60 a2=3 a3=0 items=0 ppid=1 pid=3390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.927329 kernel: audit: type=1327 audit(1696275753.883:1360): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:33.883000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:33.953699 kernel: audit: type=1105 audit(1696275753.890:1361): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.890000 audit[3390]: USER_START pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.895000 audit[3392]: CRED_ACQ pid=3392 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.970809 kernel: audit: type=1103 audit(1696275753.895:1362): pid=3392 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:34.569465 sshd[3390]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:34.569000 audit[3390]: USER_END pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:34.573321 systemd[1]: sshd@27-10.200.8.19:22-10.200.12.6:32988.service: Deactivated successfully. Oct 2 19:42:34.574223 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:42:34.576370 systemd-logind[1315]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:42:34.577576 systemd-logind[1315]: Removed session 30. Oct 2 19:42:34.569000 audit[3390]: CRED_DISP pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:34.607286 kernel: audit: type=1106 audit(1696275754.569:1363): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:34.607372 kernel: audit: type=1104 audit(1696275754.569:1364): pid=3390 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:34.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.19:22-10.200.12.6:32988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:33002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.673886 systemd[1]: Started sshd@28-10.200.8.19:22-10.200.12.6:33002.service. Oct 2 19:42:35.295000 audit[3402]: USER_ACCT pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:35.297592 sshd[3402]: Accepted publickey for core from 10.200.12.6 port 33002 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:35.297000 audit[3402]: CRED_ACQ pid=3402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:35.297000 audit[3402]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebae58fc0 a2=3 a3=0 items=0 ppid=1 pid=3402 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.297000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:35.299328 sshd[3402]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:35.305366 systemd[1]: Started session-31.scope. Oct 2 19:42:35.305940 systemd-logind[1315]: New session 31 of user core. Oct 2 19:42:35.309000 audit[3402]: USER_START pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:35.310000 audit[3404]: CRED_ACQ pid=3404 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:36.491055 env[1331]: time="2023-10-02T19:42:36.490685992Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 19:42:36.516925 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount957941142.mount: Deactivated successfully. Oct 2 19:42:36.525285 kubelet[2465]: E1002 19:42:36.525254 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:36.525987 env[1331]: time="2023-10-02T19:42:36.525945531Z" level=info msg="CreateContainer within sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\"" Oct 2 19:42:36.526423 env[1331]: time="2023-10-02T19:42:36.526389231Z" level=info msg="StartContainer for \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\"" Oct 2 19:42:36.551869 systemd[1]: Started cri-containerd-6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074.scope. Oct 2 19:42:36.563395 systemd[1]: cri-containerd-6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074.scope: Deactivated successfully. Oct 2 19:42:36.596008 env[1331]: time="2023-10-02T19:42:36.595957711Z" level=info msg="shim disconnected" id=6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074 Oct 2 19:42:36.596008 env[1331]: time="2023-10-02T19:42:36.596006811Z" level=warning msg="cleaning up after shim disconnected" id=6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074 namespace=k8s.io Oct 2 19:42:36.596290 env[1331]: time="2023-10-02T19:42:36.596018911Z" level=info msg="cleaning up dead shim" Oct 2 19:42:36.604137 env[1331]: time="2023-10-02T19:42:36.604095898Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3444 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:36.604418 env[1331]: time="2023-10-02T19:42:36.604370597Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:42:36.605237 env[1331]: time="2023-10-02T19:42:36.605189596Z" level=error msg="Failed to pipe stdout of container \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\"" error="reading from a closed fifo" Oct 2 19:42:36.605387 env[1331]: time="2023-10-02T19:42:36.605352195Z" level=error msg="Failed to pipe stderr of container \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\"" error="reading from a closed fifo" Oct 2 19:42:36.609566 env[1331]: time="2023-10-02T19:42:36.609527388Z" level=error msg="StartContainer for \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:36.609777 kubelet[2465]: E1002 19:42:36.609754 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074" Oct 2 19:42:36.609900 kubelet[2465]: E1002 19:42:36.609874 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:36.609900 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:36.609900 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:42:36.609900 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k9chl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hkhk6_kube-system(7bee7a23-6783-4489-80ed-b5a4fec11c3e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:36.610092 kubelet[2465]: E1002 19:42:36.609922 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hkhk6" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e Oct 2 19:42:37.105731 env[1331]: time="2023-10-02T19:42:37.105664839Z" level=info msg="StopContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" with timeout 30 (s)" Oct 2 19:42:37.106260 env[1331]: time="2023-10-02T19:42:37.106195338Z" level=info msg="Stop container \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" with signal terminated" Oct 2 19:42:37.121386 systemd[1]: cri-containerd-059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698.scope: Deactivated successfully. Oct 2 19:42:37.119000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:42:37.124000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:42:37.152778 env[1331]: time="2023-10-02T19:42:37.152704858Z" level=info msg="shim disconnected" id=059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698 Oct 2 19:42:37.152778 env[1331]: time="2023-10-02T19:42:37.152780358Z" level=warning msg="cleaning up after shim disconnected" id=059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698 namespace=k8s.io Oct 2 19:42:37.153028 env[1331]: time="2023-10-02T19:42:37.152793758Z" level=info msg="cleaning up dead shim" Oct 2 19:42:37.160198 env[1331]: time="2023-10-02T19:42:37.160164046Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3476 runtime=io.containerd.runc.v2\n" Oct 2 19:42:37.164898 env[1331]: time="2023-10-02T19:42:37.164845138Z" level=info msg="StopContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" returns successfully" Oct 2 19:42:37.165474 env[1331]: time="2023-10-02T19:42:37.165446337Z" level=info msg="StopPodSandbox for \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\"" Oct 2 19:42:37.165572 env[1331]: time="2023-10-02T19:42:37.165510137Z" level=info msg="Container to stop \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:37.171904 systemd[1]: cri-containerd-a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480.scope: Deactivated successfully. Oct 2 19:42:37.170000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:42:37.173000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:42:37.200425 env[1331]: time="2023-10-02T19:42:37.200375577Z" level=info msg="shim disconnected" id=a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480 Oct 2 19:42:37.200608 env[1331]: time="2023-10-02T19:42:37.200572877Z" level=warning msg="cleaning up after shim disconnected" id=a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480 namespace=k8s.io Oct 2 19:42:37.200608 env[1331]: time="2023-10-02T19:42:37.200593777Z" level=info msg="cleaning up dead shim" Oct 2 19:42:37.208203 env[1331]: time="2023-10-02T19:42:37.208159864Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3509 runtime=io.containerd.runc.v2\n" Oct 2 19:42:37.208499 env[1331]: time="2023-10-02T19:42:37.208465463Z" level=info msg="TearDown network for sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" successfully" Oct 2 19:42:37.208499 env[1331]: time="2023-10-02T19:42:37.208491363Z" level=info msg="StopPodSandbox for \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" returns successfully" Oct 2 19:42:37.259349 kubelet[2465]: I1002 19:42:37.259103 2465 scope.go:115] "RemoveContainer" containerID="059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698" Oct 2 19:42:37.265304 env[1331]: time="2023-10-02T19:42:37.263118470Z" level=info msg="RemoveContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\"" Oct 2 19:42:37.265304 env[1331]: time="2023-10-02T19:42:37.264518068Z" level=info msg="StopPodSandbox for \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\"" Oct 2 19:42:37.265304 env[1331]: time="2023-10-02T19:42:37.264575768Z" level=info msg="Container to stop \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:37.265304 env[1331]: time="2023-10-02T19:42:37.264594568Z" level=info msg="Container to stop \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:37.275581 env[1331]: time="2023-10-02T19:42:37.275543749Z" level=info msg="RemoveContainer for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" returns successfully" Oct 2 19:42:37.275740 kubelet[2465]: I1002 19:42:37.275707 2465 scope.go:115] "RemoveContainer" containerID="059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698" Oct 2 19:42:37.276011 env[1331]: time="2023-10-02T19:42:37.275923048Z" level=error msg="ContainerStatus for \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\": not found" Oct 2 19:42:37.276140 kubelet[2465]: E1002 19:42:37.276121 2465 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\": not found" containerID="059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698" Oct 2 19:42:37.276228 kubelet[2465]: I1002 19:42:37.276166 2465 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698} err="failed to get container status \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\": rpc error: code = NotFound desc = an error occurred when try to find container \"059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698\": not found" Oct 2 19:42:37.276228 kubelet[2465]: I1002 19:42:37.276184 2465 scope.go:115] "RemoveContainer" containerID="c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd" Oct 2 19:42:37.277129 env[1331]: time="2023-10-02T19:42:37.277099746Z" level=info msg="RemoveContainer for \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\"" Oct 2 19:42:37.281334 systemd[1]: cri-containerd-08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198.scope: Deactivated successfully. Oct 2 19:42:37.279000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:42:37.282000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:42:37.295123 env[1331]: time="2023-10-02T19:42:37.295085116Z" level=info msg="RemoveContainer for \"c07aed2c61f5380ea6098997b1a21328f60153ed81de93c3f36af987218e44cd\" returns successfully" Oct 2 19:42:37.325638 env[1331]: time="2023-10-02T19:42:37.325582764Z" level=info msg="shim disconnected" id=08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198 Oct 2 19:42:37.325865 env[1331]: time="2023-10-02T19:42:37.325639463Z" level=warning msg="cleaning up after shim disconnected" id=08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198 namespace=k8s.io Oct 2 19:42:37.325865 env[1331]: time="2023-10-02T19:42:37.325652563Z" level=info msg="cleaning up dead shim" Oct 2 19:42:37.334043 env[1331]: time="2023-10-02T19:42:37.334005649Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3540 runtime=io.containerd.runc.v2\n" Oct 2 19:42:37.334341 env[1331]: time="2023-10-02T19:42:37.334313649Z" level=info msg="TearDown network for sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" successfully" Oct 2 19:42:37.334341 env[1331]: time="2023-10-02T19:42:37.334338449Z" level=info msg="StopPodSandbox for \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" returns successfully" Oct 2 19:42:37.374141 kubelet[2465]: I1002 19:42:37.372893 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/08e38a11-58c6-4dd6-a2f7-39524b093199-cilium-config-path\") pod \"08e38a11-58c6-4dd6-a2f7-39524b093199\" (UID: \"08e38a11-58c6-4dd6-a2f7-39524b093199\") " Oct 2 19:42:37.374141 kubelet[2465]: I1002 19:42:37.372965 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sr94j\" (UniqueName: \"kubernetes.io/projected/08e38a11-58c6-4dd6-a2f7-39524b093199-kube-api-access-sr94j\") pod \"08e38a11-58c6-4dd6-a2f7-39524b093199\" (UID: \"08e38a11-58c6-4dd6-a2f7-39524b093199\") " Oct 2 19:42:37.374141 kubelet[2465]: W1002 19:42:37.373270 2465 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/08e38a11-58c6-4dd6-a2f7-39524b093199/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:37.377627 kubelet[2465]: I1002 19:42:37.377584 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/08e38a11-58c6-4dd6-a2f7-39524b093199-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "08e38a11-58c6-4dd6-a2f7-39524b093199" (UID: "08e38a11-58c6-4dd6-a2f7-39524b093199"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:37.378780 kubelet[2465]: I1002 19:42:37.378750 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/08e38a11-58c6-4dd6-a2f7-39524b093199-kube-api-access-sr94j" (OuterVolumeSpecName: "kube-api-access-sr94j") pod "08e38a11-58c6-4dd6-a2f7-39524b093199" (UID: "08e38a11-58c6-4dd6-a2f7-39524b093199"). InnerVolumeSpecName "kube-api-access-sr94j". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:37.474237 kubelet[2465]: I1002 19:42:37.474179 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-cgroup\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474467 kubelet[2465]: I1002 19:42:37.474252 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-net\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474467 kubelet[2465]: I1002 19:42:37.474287 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-kernel\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474467 kubelet[2465]: I1002 19:42:37.474312 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-lib-modules\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474467 kubelet[2465]: I1002 19:42:37.474365 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hubble-tls\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474467 kubelet[2465]: I1002 19:42:37.474417 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-config-path\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474499 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-etc-cni-netd\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474542 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cni-path\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474589 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-bpf-maps\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474630 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-k9chl\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-kube-api-access-k9chl\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474684 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7bee7a23-6783-4489-80ed-b5a4fec11c3e-clustermesh-secrets\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.474820 kubelet[2465]: I1002 19:42:37.474754 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hostproc\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.474789 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-run\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.474840 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-xtables-lock\") pod \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\" (UID: \"7bee7a23-6783-4489-80ed-b5a4fec11c3e\") " Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.474911 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/08e38a11-58c6-4dd6-a2f7-39524b093199-cilium-config-path\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.474935 2465 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-sr94j\" (UniqueName: \"kubernetes.io/projected/08e38a11-58c6-4dd6-a2f7-39524b093199-kube-api-access-sr94j\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.474998 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.475159 kubelet[2465]: I1002 19:42:37.475068 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.475491 kubelet[2465]: I1002 19:42:37.475100 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.475491 kubelet[2465]: I1002 19:42:37.475127 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.475491 kubelet[2465]: I1002 19:42:37.475175 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.475765 kubelet[2465]: I1002 19:42:37.475735 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.476493 kubelet[2465]: I1002 19:42:37.476442 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.476687 kubelet[2465]: I1002 19:42:37.476630 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cni-path" (OuterVolumeSpecName: "cni-path") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.476804 kubelet[2465]: W1002 19:42:37.476756 2465 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/7bee7a23-6783-4489-80ed-b5a4fec11c3e/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:37.479860 kubelet[2465]: I1002 19:42:37.479831 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:37.479958 kubelet[2465]: I1002 19:42:37.479882 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hostproc" (OuterVolumeSpecName: "hostproc") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.479958 kubelet[2465]: I1002 19:42:37.479920 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:37.480841 kubelet[2465]: I1002 19:42:37.480812 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-kube-api-access-k9chl" (OuterVolumeSpecName: "kube-api-access-k9chl") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "kube-api-access-k9chl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:37.482883 kubelet[2465]: I1002 19:42:37.482847 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:37.483663 kubelet[2465]: I1002 19:42:37.483637 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/7bee7a23-6783-4489-80ed-b5a4fec11c3e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "7bee7a23-6783-4489-80ed-b5a4fec11c3e" (UID: "7bee7a23-6783-4489-80ed-b5a4fec11c3e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:42:37.510275 systemd[1]: run-containerd-runc-k8s.io-6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074-runc.AVcdqY.mount: Deactivated successfully. Oct 2 19:42:37.510408 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074-rootfs.mount: Deactivated successfully. Oct 2 19:42:37.510489 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-059070a6c2f88c5458c5d672b636da2ad336a769d9e649a7a3a6c4f0ebba3698-rootfs.mount: Deactivated successfully. Oct 2 19:42:37.510564 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480-rootfs.mount: Deactivated successfully. Oct 2 19:42:37.510641 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480-shm.mount: Deactivated successfully. Oct 2 19:42:37.510730 systemd[1]: var-lib-kubelet-pods-08e38a11\x2d58c6\x2d4dd6\x2da2f7\x2d39524b093199-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsr94j.mount: Deactivated successfully. Oct 2 19:42:37.510812 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198-rootfs.mount: Deactivated successfully. Oct 2 19:42:37.510892 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198-shm.mount: Deactivated successfully. Oct 2 19:42:37.510966 systemd[1]: var-lib-kubelet-pods-7bee7a23\x2d6783\x2d4489\x2d80ed\x2db5a4fec11c3e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dk9chl.mount: Deactivated successfully. Oct 2 19:42:37.511050 systemd[1]: var-lib-kubelet-pods-7bee7a23\x2d6783\x2d4489\x2d80ed\x2db5a4fec11c3e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:42:37.511126 systemd[1]: var-lib-kubelet-pods-7bee7a23\x2d6783\x2d4489\x2d80ed\x2db5a4fec11c3e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:42:37.563079 systemd[1]: Removed slice kubepods-besteffort-pod08e38a11_58c6_4dd6_a2f7_39524b093199.slice. Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575666 2465 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hostproc\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575700 2465 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/7bee7a23-6783-4489-80ed-b5a4fec11c3e-clustermesh-secrets\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575734 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-run\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575749 2465 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-xtables-lock\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575764 2465 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-net\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575777 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-cgroup\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575792 2465 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.575820 kubelet[2465]: I1002 19:42:37.575805 2465 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cni-path\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575818 2465 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-lib-modules\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575830 2465 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-hubble-tls\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575842 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/7bee7a23-6783-4489-80ed-b5a4fec11c3e-cilium-config-path\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575854 2465 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-etc-cni-netd\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575867 2465 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/7bee7a23-6783-4489-80ed-b5a4fec11c3e-bpf-maps\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:37.576886 kubelet[2465]: I1002 19:42:37.575881 2465 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-k9chl\" (UniqueName: \"kubernetes.io/projected/7bee7a23-6783-4489-80ed-b5a4fec11c3e-kube-api-access-k9chl\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:42:38.267757 kubelet[2465]: I1002 19:42:38.267707 2465 scope.go:115] "RemoveContainer" containerID="6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074" Oct 2 19:42:38.269153 env[1331]: time="2023-10-02T19:42:38.269109356Z" level=info msg="RemoveContainer for \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\"" Oct 2 19:42:38.273405 systemd[1]: Removed slice kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice. Oct 2 19:42:38.281237 env[1331]: time="2023-10-02T19:42:38.281189535Z" level=info msg="RemoveContainer for \"6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074\" returns successfully" Oct 2 19:42:38.492042 kubelet[2465]: I1002 19:42:38.492003 2465 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=08e38a11-58c6-4dd6-a2f7-39524b093199 path="/var/lib/kubelet/pods/08e38a11-58c6-4dd6-a2f7-39524b093199/volumes" Oct 2 19:42:38.492555 kubelet[2465]: I1002 19:42:38.492532 2465 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=7bee7a23-6783-4489-80ed-b5a4fec11c3e path="/var/lib/kubelet/pods/7bee7a23-6783-4489-80ed-b5a4fec11c3e/volumes" Oct 2 19:42:39.155013 sshd[3402]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:39.155000 audit[3402]: USER_END pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.162743 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:42:39.162829 kernel: audit: type=1106 audit(1696275759.155:1378): pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.165049 systemd[1]: sshd@28-10.200.8.19:22-10.200.12.6:33002.service: Deactivated successfully. Oct 2 19:42:39.165787 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 19:42:39.167289 systemd-logind[1315]: Session 31 logged out. Waiting for processes to exit. Oct 2 19:42:39.168354 systemd-logind[1315]: Removed session 31. Oct 2 19:42:39.159000 audit[3402]: CRED_DISP pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.195545 kernel: audit: type=1104 audit(1696275759.159:1379): pid=3402 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.195622 kernel: audit: type=1131 audit(1696275759.163:1380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:33002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.19:22-10.200.12.6:33002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.227821 kernel: audit: type=1400 audit(1696275759.210:1381): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.228732 kernel: audit: type=1400 audit(1696275759.210:1382): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001642e80 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.244735 kernel: audit: type=1300 audit(1696275759.210:1381): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001642e80 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.276733 kernel: audit: type=1300 audit(1696275759.210:1382): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001994cc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001994cc0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.272062 systemd[1]: Started sshd@29-10.200.8.19:22-10.200.12.6:60822.service. Oct 2 19:42:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.309379 kernel: audit: type=1327 audit(1696275759.210:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.326391 kernel: audit: type=1327 audit(1696275759.210:1381): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.326498 kernel: audit: type=1400 audit(1696275759.210:1383): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001994ce0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001994f00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:42:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:39.704349 kubelet[2465]: W1002 19:42:39.704307 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod7bee7a23_6783_4489_80ed_b5a4fec11c3e.slice/cri-containerd-6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074.scope WatchSource:0}: container "6efaac0e28260a8ddd23930117cf6359a95042813d9b734ef6ed2a199174b074" in namespace "k8s.io": not found Oct 2 19:42:39.899000 audit[3558]: USER_ACCT pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.901869 sshd[3558]: Accepted publickey for core from 10.200.12.6 port 60822 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:39.901000 audit[3558]: CRED_ACQ pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.901000 audit[3558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd05f13930 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:39.901000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:39.903190 sshd[3558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:39.907795 systemd-logind[1315]: New session 32 of user core. Oct 2 19:42:39.908561 systemd[1]: Started session-32.scope. Oct 2 19:42:39.911000 audit[3558]: USER_START pid=3558 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:39.912000 audit[3560]: CRED_ACQ pid=3560 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:40.753541 kubelet[2465]: I1002 19:42:40.753487 2465 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753560 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753573 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="08e38a11-58c6-4dd6-a2f7-39524b093199" containerName="cilium-operator" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753581 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753588 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753596 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753604 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: E1002 19:42:40.753614 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: I1002 19:42:40.753638 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: I1002 19:42:40.753647 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="08e38a11-58c6-4dd6-a2f7-39524b093199" containerName="cilium-operator" Oct 2 19:42:40.754002 kubelet[2465]: I1002 19:42:40.753656 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: I1002 19:42:40.753664 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754002 kubelet[2465]: I1002 19:42:40.753672 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754477 kubelet[2465]: I1002 19:42:40.753681 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754477 kubelet[2465]: E1002 19:42:40.753710 2465 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754477 kubelet[2465]: I1002 19:42:40.753743 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.754477 kubelet[2465]: I1002 19:42:40.753753 2465 memory_manager.go:346] "RemoveStaleState removing state" podUID="7bee7a23-6783-4489-80ed-b5a4fec11c3e" containerName="mount-cgroup" Oct 2 19:42:40.760236 systemd[1]: Created slice kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice. Oct 2 19:42:40.895151 kubelet[2465]: I1002 19:42:40.895111 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-bpf-maps\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895151 kubelet[2465]: I1002 19:42:40.895160 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hostproc\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895186 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hubble-tls\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895208 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-run\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895233 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-ipsec-secrets\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895258 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x7gsw\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-kube-api-access-x7gsw\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895289 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-etc-cni-netd\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895406 kubelet[2465]: I1002 19:42:40.895315 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-lib-modules\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895341 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-cgroup\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895367 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-clustermesh-secrets\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895399 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cni-path\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895428 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-xtables-lock\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895459 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-config-path\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895657 kubelet[2465]: I1002 19:42:40.895490 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-kernel\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:40.895903 kubelet[2465]: I1002 19:42:40.895521 2465 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-net\") pod \"cilium-fm84d\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " pod="kube-system/cilium-fm84d" Oct 2 19:42:41.066693 env[1331]: time="2023-10-02T19:42:41.066370328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fm84d,Uid:e938e391-a668-4f8a-af3a-e0e5d2b5c65a,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:41.102553 env[1331]: time="2023-10-02T19:42:41.102477967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:41.102760 env[1331]: time="2023-10-02T19:42:41.102513267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:41.102760 env[1331]: time="2023-10-02T19:42:41.102540067Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:41.106439 env[1331]: time="2023-10-02T19:42:41.102676667Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5 pid=3578 runtime=io.containerd.runc.v2 Oct 2 19:42:41.120054 systemd[1]: Started cri-containerd-304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5.scope. Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.130000 audit: BPF prog-id=129 op=LOAD Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3578 pid=3588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346466363231333737303166323233346162323532646436396536 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3578 pid=3588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346466363231333737303166323233346162323532646436396536 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit: BPF prog-id=130 op=LOAD Oct 2 19:42:41.131000 audit[3588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000388340 items=0 ppid=3578 pid=3588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346466363231333737303166323233346162323532646436396536 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit: BPF prog-id=131 op=LOAD Oct 2 19:42:41.131000 audit[3588]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000388388 items=0 ppid=3578 pid=3588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346466363231333737303166323233346162323532646436396536 Oct 2 19:42:41.131000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:42:41.131000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { perfmon } for pid=3588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit[3588]: AVC avc: denied { bpf } for pid=3588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:41.131000 audit: BPF prog-id=132 op=LOAD Oct 2 19:42:41.131000 audit[3588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000388798 items=0 ppid=3578 pid=3588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:41.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346466363231333737303166323233346162323532646436396536 Oct 2 19:42:41.145368 env[1331]: time="2023-10-02T19:42:41.145332396Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-fm84d,Uid:e938e391-a668-4f8a-af3a-e0e5d2b5c65a,Namespace:kube-system,Attempt:0,} returns sandbox id \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\"" Oct 2 19:42:41.148870 env[1331]: time="2023-10-02T19:42:41.148374290Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:42:41.183271 env[1331]: time="2023-10-02T19:42:41.183221132Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" Oct 2 19:42:41.185409 env[1331]: time="2023-10-02T19:42:41.183927731Z" level=info msg="StartContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" Oct 2 19:42:41.200833 systemd[1]: Started cri-containerd-3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4.scope. Oct 2 19:42:41.212902 systemd[1]: cri-containerd-3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4.scope: Deactivated successfully. Oct 2 19:42:41.301982 env[1331]: time="2023-10-02T19:42:41.301919233Z" level=info msg="shim disconnected" id=3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4 Oct 2 19:42:41.301982 env[1331]: time="2023-10-02T19:42:41.301976533Z" level=warning msg="cleaning up after shim disconnected" id=3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4 namespace=k8s.io Oct 2 19:42:41.301982 env[1331]: time="2023-10-02T19:42:41.301988133Z" level=info msg="cleaning up dead shim" Oct 2 19:42:41.310919 env[1331]: time="2023-10-02T19:42:41.310878218Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3636 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:41.311242 env[1331]: time="2023-10-02T19:42:41.311188017Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 19:42:41.311545 env[1331]: time="2023-10-02T19:42:41.311507617Z" level=error msg="Failed to pipe stderr of container \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" error="reading from a closed fifo" Oct 2 19:42:41.311655 env[1331]: time="2023-10-02T19:42:41.311606917Z" level=error msg="Failed to pipe stdout of container \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" error="reading from a closed fifo" Oct 2 19:42:41.316442 env[1331]: time="2023-10-02T19:42:41.316400309Z" level=error msg="StartContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:41.316656 kubelet[2465]: E1002 19:42:41.316626 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4" Oct 2 19:42:41.316890 kubelet[2465]: E1002 19:42:41.316828 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:41.316890 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:41.316890 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:42:41.316890 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-x7gsw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:41.318142 kubelet[2465]: E1002 19:42:41.317786 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:42:41.526382 kubelet[2465]: E1002 19:42:41.526349 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:42.294607 env[1331]: time="2023-10-02T19:42:42.294559971Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:42:42.324168 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1468944910.mount: Deactivated successfully. Oct 2 19:42:42.333190 env[1331]: time="2023-10-02T19:42:42.333145906Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" Oct 2 19:42:42.334836 env[1331]: time="2023-10-02T19:42:42.334802804Z" level=info msg="StartContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" Oct 2 19:42:42.354620 systemd[1]: Started cri-containerd-d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e.scope. Oct 2 19:42:42.363568 systemd[1]: cri-containerd-d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e.scope: Deactivated successfully. Oct 2 19:42:42.363888 systemd[1]: Stopped cri-containerd-d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e.scope. Oct 2 19:42:42.381031 env[1331]: time="2023-10-02T19:42:42.380983327Z" level=info msg="shim disconnected" id=d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e Oct 2 19:42:42.381297 env[1331]: time="2023-10-02T19:42:42.381272926Z" level=warning msg="cleaning up after shim disconnected" id=d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e namespace=k8s.io Oct 2 19:42:42.381297 env[1331]: time="2023-10-02T19:42:42.381292226Z" level=info msg="cleaning up dead shim" Oct 2 19:42:42.389204 env[1331]: time="2023-10-02T19:42:42.389165213Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3675 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:42.389477 env[1331]: time="2023-10-02T19:42:42.389418112Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 19:42:42.389673 env[1331]: time="2023-10-02T19:42:42.389628412Z" level=error msg="Failed to pipe stdout of container \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" error="reading from a closed fifo" Oct 2 19:42:42.389880 env[1331]: time="2023-10-02T19:42:42.389759412Z" level=error msg="Failed to pipe stderr of container \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" error="reading from a closed fifo" Oct 2 19:42:42.393630 env[1331]: time="2023-10-02T19:42:42.393591706Z" level=error msg="StartContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:42.393883 kubelet[2465]: E1002 19:42:42.393863 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e" Oct 2 19:42:42.394247 kubelet[2465]: E1002 19:42:42.393990 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:42.394247 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:42.394247 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:42:42.394247 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-x7gsw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:42.394654 kubelet[2465]: E1002 19:42:42.394036 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:42:43.295532 kubelet[2465]: I1002 19:42:43.295501 2465 scope.go:115] "RemoveContainer" containerID="3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4" Oct 2 19:42:43.296445 kubelet[2465]: I1002 19:42:43.296426 2465 scope.go:115] "RemoveContainer" containerID="3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4" Oct 2 19:42:43.297929 env[1331]: time="2023-10-02T19:42:43.297875098Z" level=info msg="RemoveContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" Oct 2 19:42:43.299786 env[1331]: time="2023-10-02T19:42:43.299757595Z" level=info msg="RemoveContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\"" Oct 2 19:42:43.300302 env[1331]: time="2023-10-02T19:42:43.300252994Z" level=error msg="RemoveContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\" failed" error="failed to set removing state for container \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\": container is already in removing state" Oct 2 19:42:43.300826 kubelet[2465]: E1002 19:42:43.300814 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\": container is already in removing state" containerID="3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4" Oct 2 19:42:43.301053 kubelet[2465]: E1002 19:42:43.301044 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4": container is already in removing state; Skipping pod "cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)" Oct 2 19:42:43.301937 kubelet[2465]: E1002 19:42:43.301917 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:42:43.312655 env[1331]: time="2023-10-02T19:42:43.312602473Z" level=info msg="RemoveContainer for \"3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4\" returns successfully" Oct 2 19:42:44.300068 kubelet[2465]: E1002 19:42:44.300036 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:42:44.408562 kubelet[2465]: W1002 19:42:44.408511 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice/cri-containerd-3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4.scope WatchSource:0}: container "3b4c29f2dc78d22c7e2d09a833e200fbd786d160a38792cc0c5ef174c8c236b4" in namespace "k8s.io": not found Oct 2 19:42:46.527831 kubelet[2465]: E1002 19:42:46.527783 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:47.516373 kubelet[2465]: W1002 19:42:47.516325 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice/cri-containerd-d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e.scope WatchSource:0}: task d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e not found: not found Oct 2 19:42:51.529038 kubelet[2465]: E1002 19:42:51.528990 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:56.530686 kubelet[2465]: E1002 19:42:56.530645 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:59.491080 env[1331]: time="2023-10-02T19:42:59.490565096Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:42:59.516516 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount937599121.mount: Deactivated successfully. Oct 2 19:42:59.525871 env[1331]: time="2023-10-02T19:42:59.525832440Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\"" Oct 2 19:42:59.526596 env[1331]: time="2023-10-02T19:42:59.526566439Z" level=info msg="StartContainer for \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\"" Oct 2 19:42:59.553373 systemd[1]: Started cri-containerd-fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646.scope. Oct 2 19:42:59.565423 systemd[1]: cri-containerd-fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646.scope: Deactivated successfully. Oct 2 19:42:59.597197 env[1331]: time="2023-10-02T19:42:59.597143929Z" level=info msg="shim disconnected" id=fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646 Oct 2 19:42:59.597415 env[1331]: time="2023-10-02T19:42:59.597390529Z" level=warning msg="cleaning up after shim disconnected" id=fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646 namespace=k8s.io Oct 2 19:42:59.597415 env[1331]: time="2023-10-02T19:42:59.597408729Z" level=info msg="cleaning up dead shim" Oct 2 19:42:59.605862 env[1331]: time="2023-10-02T19:42:59.605824015Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3713 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:59.606129 env[1331]: time="2023-10-02T19:42:59.606079615Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 19:42:59.606335 env[1331]: time="2023-10-02T19:42:59.606291615Z" level=error msg="Failed to pipe stdout of container \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\"" error="reading from a closed fifo" Oct 2 19:42:59.606497 env[1331]: time="2023-10-02T19:42:59.606457614Z" level=error msg="Failed to pipe stderr of container \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\"" error="reading from a closed fifo" Oct 2 19:42:59.611304 env[1331]: time="2023-10-02T19:42:59.611238707Z" level=error msg="StartContainer for \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:59.611738 kubelet[2465]: E1002 19:42:59.611588 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646" Oct 2 19:42:59.611738 kubelet[2465]: E1002 19:42:59.611701 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:59.611738 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:59.611738 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:42:59.612227 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-x7gsw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:59.612404 kubelet[2465]: E1002 19:42:59.612363 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:00.333588 kubelet[2465]: I1002 19:43:00.333490 2465 scope.go:115] "RemoveContainer" containerID="d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e" Oct 2 19:43:00.333865 kubelet[2465]: I1002 19:43:00.333844 2465 scope.go:115] "RemoveContainer" containerID="d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e" Oct 2 19:43:00.335539 env[1331]: time="2023-10-02T19:43:00.335493576Z" level=info msg="RemoveContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" Oct 2 19:43:00.335777 env[1331]: time="2023-10-02T19:43:00.335530876Z" level=info msg="RemoveContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\"" Oct 2 19:43:00.335871 env[1331]: time="2023-10-02T19:43:00.335844975Z" level=error msg="RemoveContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\" failed" error="failed to set removing state for container \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\": container is already in removing state" Oct 2 19:43:00.336043 kubelet[2465]: E1002 19:43:00.336023 2465 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\": container is already in removing state" containerID="d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e" Oct 2 19:43:00.336123 kubelet[2465]: E1002 19:43:00.336062 2465 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e": container is already in removing state; Skipping pod "cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)" Oct 2 19:43:00.336465 kubelet[2465]: E1002 19:43:00.336444 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:00.346750 env[1331]: time="2023-10-02T19:43:00.346692358Z" level=info msg="RemoveContainer for \"d1ca1ae4cb89f218d2d8ebe4dd9571c0e485f150251e4b339760f3d5f8e3497e\" returns successfully" Oct 2 19:43:00.513124 systemd[1]: run-containerd-runc-k8s.io-fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646-runc.fWrh4w.mount: Deactivated successfully. Oct 2 19:43:00.513270 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646-rootfs.mount: Deactivated successfully. Oct 2 19:43:01.531572 kubelet[2465]: E1002 19:43:01.531531 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:02.703421 kubelet[2465]: W1002 19:43:02.703378 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice/cri-containerd-fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646.scope WatchSource:0}: task fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646 not found: not found Oct 2 19:43:06.532817 kubelet[2465]: E1002 19:43:06.532771 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:11.488827 kubelet[2465]: E1002 19:43:11.488786 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:11.533566 kubelet[2465]: E1002 19:43:11.533535 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:16.535007 kubelet[2465]: E1002 19:43:16.534971 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:21.536501 kubelet[2465]: E1002 19:43:21.536450 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:22.697000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:22.702609 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 19:43:22.702731 kernel: audit: type=1400 audit(1696275802.697:1410): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:22.697000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:22.735810 kernel: audit: type=1400 audit(1696275802.697:1409): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:22.735885 kernel: audit: type=1300 audit(1696275802.697:1409): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a2eca0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:22.697000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a2eca0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:22.697000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:22.757732 kernel: audit: type=1327 audit(1696275802.697:1409): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:22.697000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cfe390 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:22.796988 kernel: audit: type=1300 audit(1696275802.697:1410): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cfe390 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:22.797070 kernel: audit: type=1327 audit(1696275802.697:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:22.697000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:22.988000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.011707 kernel: audit: type=1400 audit(1696275802.988:1411): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.011853 kernel: audit: type=1300 audit(1696275802.988:1411): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a064030 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:22.988000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a064030 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:22.988000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.045808 kernel: audit: type=1327 audit(1696275802.988:1411): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.045933 kernel: audit: type=1400 audit(1696275803.005:1412): avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c009dd8db0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.005000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.005000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c001a2a500 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:23.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.015000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.015000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c009dd9140 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:23.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.040000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.040000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c001a2a7c0 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:23.040000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:23.040000 audit[2344]: AVC avc: denied { watch } for pid=2344 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.040000 audit[2344]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c009dd9170 a2=fc6 a3=0 items=0 ppid=2169 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c363,c807 key=(null) Oct 2 19:43:23.040000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3139002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:25.491604 env[1331]: time="2023-10-02T19:43:25.491495722Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:25.517001 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3890080359.mount: Deactivated successfully. Oct 2 19:43:25.531761 env[1331]: time="2023-10-02T19:43:25.531701564Z" level=info msg="CreateContainer within sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\"" Oct 2 19:43:25.533570 env[1331]: time="2023-10-02T19:43:25.532202063Z" level=info msg="StartContainer for \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\"" Oct 2 19:43:25.551852 systemd[1]: Started cri-containerd-80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3.scope. Oct 2 19:43:25.565247 systemd[1]: cri-containerd-80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3.scope: Deactivated successfully. Oct 2 19:43:25.615733 env[1331]: time="2023-10-02T19:43:25.615657942Z" level=info msg="shim disconnected" id=80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3 Oct 2 19:43:25.615733 env[1331]: time="2023-10-02T19:43:25.615712142Z" level=warning msg="cleaning up after shim disconnected" id=80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3 namespace=k8s.io Oct 2 19:43:25.616003 env[1331]: time="2023-10-02T19:43:25.615742342Z" level=info msg="cleaning up dead shim" Oct 2 19:43:25.623698 env[1331]: time="2023-10-02T19:43:25.623650330Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3751 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:25.623961 env[1331]: time="2023-10-02T19:43:25.623905330Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 19:43:25.624186 env[1331]: time="2023-10-02T19:43:25.624153530Z" level=error msg="Failed to pipe stderr of container \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\"" error="reading from a closed fifo" Oct 2 19:43:25.627839 env[1331]: time="2023-10-02T19:43:25.627792024Z" level=error msg="Failed to pipe stdout of container \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\"" error="reading from a closed fifo" Oct 2 19:43:25.633037 env[1331]: time="2023-10-02T19:43:25.632994717Z" level=error msg="StartContainer for \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:25.633259 kubelet[2465]: E1002 19:43:25.633230 2465 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3" Oct 2 19:43:25.633622 kubelet[2465]: E1002 19:43:25.633373 2465 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:25.633622 kubelet[2465]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:25.633622 kubelet[2465]: rm /hostbin/cilium-mount Oct 2 19:43:25.633622 kubelet[2465]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-x7gsw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:25.633881 kubelet[2465]: E1002 19:43:25.633421 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:26.324797 kubelet[2465]: I1002 19:43:26.324762 2465 scope.go:115] "RemoveContainer" containerID="fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646" Oct 2 19:43:26.325847 env[1331]: time="2023-10-02T19:43:26.325806814Z" level=info msg="RemoveContainer for \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\"" Oct 2 19:43:26.334800 env[1331]: time="2023-10-02T19:43:26.334766501Z" level=info msg="RemoveContainer for \"fbc36825a05926040f337cd4aa8ef32508578740690aab635375e072bc5cd646\" returns successfully" Oct 2 19:43:26.335797 env[1331]: time="2023-10-02T19:43:26.335760500Z" level=info msg="StopPodSandbox for \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\"" Oct 2 19:43:26.335909 env[1331]: time="2023-10-02T19:43:26.335853300Z" level=info msg="TearDown network for sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" successfully" Oct 2 19:43:26.335909 env[1331]: time="2023-10-02T19:43:26.335894500Z" level=info msg="StopPodSandbox for \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" returns successfully" Oct 2 19:43:26.336345 env[1331]: time="2023-10-02T19:43:26.336317799Z" level=info msg="RemovePodSandbox for \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\"" Oct 2 19:43:26.336442 env[1331]: time="2023-10-02T19:43:26.336345799Z" level=info msg="Forcibly stopping sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\"" Oct 2 19:43:26.336442 env[1331]: time="2023-10-02T19:43:26.336425899Z" level=info msg="TearDown network for sandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" successfully" Oct 2 19:43:26.344703 env[1331]: time="2023-10-02T19:43:26.344676987Z" level=info msg="RemovePodSandbox \"08fec8ceb4cb7f96b479ffb89e5a23eba8a0a39f68a2b6adf571018a1bde6198\" returns successfully" Oct 2 19:43:26.345065 env[1331]: time="2023-10-02T19:43:26.345033586Z" level=info msg="StopPodSandbox for \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\"" Oct 2 19:43:26.345160 env[1331]: time="2023-10-02T19:43:26.345115186Z" level=info msg="TearDown network for sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" successfully" Oct 2 19:43:26.345211 env[1331]: time="2023-10-02T19:43:26.345155286Z" level=info msg="StopPodSandbox for \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" returns successfully" Oct 2 19:43:26.345505 env[1331]: time="2023-10-02T19:43:26.345468586Z" level=info msg="RemovePodSandbox for \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\"" Oct 2 19:43:26.345594 env[1331]: time="2023-10-02T19:43:26.345502386Z" level=info msg="Forcibly stopping sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\"" Oct 2 19:43:26.345594 env[1331]: time="2023-10-02T19:43:26.345580886Z" level=info msg="TearDown network for sandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" successfully" Oct 2 19:43:26.355359 env[1331]: time="2023-10-02T19:43:26.355281572Z" level=info msg="RemovePodSandbox \"a28526d942824098eb7aeccdcf23b2d807e31a4b81379e5ca71147c0f0ba1480\" returns successfully" Oct 2 19:43:26.385574 kubelet[2465]: E1002 19:43:26.385544 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:26.513858 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3-rootfs.mount: Deactivated successfully. Oct 2 19:43:26.537827 kubelet[2465]: E1002 19:43:26.537784 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:28.722526 kubelet[2465]: W1002 19:43:28.721660 2465 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice/cri-containerd-80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3.scope WatchSource:0}: task 80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3 not found: not found Oct 2 19:43:31.539235 kubelet[2465]: E1002 19:43:31.539196 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:36.540706 kubelet[2465]: E1002 19:43:36.540667 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.216653 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:39.216838 kernel: audit: type=1400 audit(1696275819.210:1418): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.210000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.233737 kernel: audit: type=1400 audit(1696275819.210:1417): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012256c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.249739 kernel: audit: type=1300 audit(1696275819.210:1418): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012256c0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.211000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.304554 kernel: audit: type=1327 audit(1696275819.210:1418): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.304657 kernel: audit: type=1400 audit(1696275819.211:1419): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.304689 kernel: audit: type=1300 audit(1696275819.211:1419): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012258e0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.211000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012258e0 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.326737 kernel: audit: type=1327 audit(1696275819.211:1419): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.212000 audit[2347]: AVC avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.360139 kernel: audit: type=1400 audit(1696275819.212:1420): avc: denied { watch } for pid=2347 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:39.360230 kernel: audit: type=1300 audit(1696275819.212:1420): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001225a00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.212000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001225a00 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.399510 kernel: audit: type=1327 audit(1696275819.212:1420): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.210000 audit[2347]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001263500 a2=fc6 a3=0 items=0 ppid=2211 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c128,c189 key=(null) Oct 2 19:43:39.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:40.489257 kubelet[2465]: E1002 19:43:40.489217 2465 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-fm84d_kube-system(e938e391-a668-4f8a-af3a-e0e5d2b5c65a)\"" pod="kube-system/cilium-fm84d" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a Oct 2 19:43:41.541693 kubelet[2465]: E1002 19:43:41.541652 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:41.942876 env[1331]: time="2023-10-02T19:43:41.942824428Z" level=info msg="StopPodSandbox for \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\"" Oct 2 19:43:41.943352 env[1331]: time="2023-10-02T19:43:41.942912828Z" level=info msg="Container to stop \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:41.945268 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5-shm.mount: Deactivated successfully. Oct 2 19:43:41.955000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:43:41.956561 systemd[1]: cri-containerd-304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5.scope: Deactivated successfully. Oct 2 19:43:41.959000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:43:41.982810 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5-rootfs.mount: Deactivated successfully. Oct 2 19:43:42.016730 env[1331]: time="2023-10-02T19:43:42.016668325Z" level=info msg="shim disconnected" id=304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5 Oct 2 19:43:42.017018 env[1331]: time="2023-10-02T19:43:42.016993324Z" level=warning msg="cleaning up after shim disconnected" id=304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5 namespace=k8s.io Oct 2 19:43:42.017293 env[1331]: time="2023-10-02T19:43:42.017126224Z" level=info msg="cleaning up dead shim" Oct 2 19:43:42.024627 env[1331]: time="2023-10-02T19:43:42.024595214Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3787 runtime=io.containerd.runc.v2\n" Oct 2 19:43:42.024941 env[1331]: time="2023-10-02T19:43:42.024911113Z" level=info msg="TearDown network for sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" successfully" Oct 2 19:43:42.025027 env[1331]: time="2023-10-02T19:43:42.024940713Z" level=info msg="StopPodSandbox for \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" returns successfully" Oct 2 19:43:42.092000 audit[3558]: USER_END pid=3558 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:42.093000 audit[3558]: CRED_DISP pid=3558 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:42.093394 sshd[3558]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:42.096563 systemd[1]: sshd@29-10.200.8.19:22-10.200.12.6:60822.service: Deactivated successfully. Oct 2 19:43:42.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.19:22-10.200.12.6:60822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:42.097653 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 19:43:42.098479 systemd-logind[1315]: Session 32 logged out. Waiting for processes to exit. Oct 2 19:43:42.099585 systemd-logind[1315]: Removed session 32. Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173243 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-run\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173371 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173387 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-ipsec-secrets\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173423 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-config-path\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173447 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-net\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.176790 kubelet[2465]: I1002 19:43:42.173476 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-xtables-lock\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173504 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-etc-cni-netd\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173536 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hubble-tls\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173571 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-clustermesh-secrets\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173600 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cni-path\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173636 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-x7gsw\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-kube-api-access-x7gsw\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177226 kubelet[2465]: I1002 19:43:42.173665 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-cgroup\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177444 kubelet[2465]: I1002 19:43:42.173696 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-bpf-maps\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177444 kubelet[2465]: W1002 19:43:42.173695 2465 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e938e391-a668-4f8a-af3a-e0e5d2b5c65a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:43:42.177444 kubelet[2465]: I1002 19:43:42.173756 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-lib-modules\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177444 kubelet[2465]: I1002 19:43:42.173800 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hostproc\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177444 kubelet[2465]: I1002 19:43:42.173832 2465 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-kernel\") pod \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\" (UID: \"e938e391-a668-4f8a-af3a-e0e5d2b5c65a\") " Oct 2 19:43:42.177444 kubelet[2465]: I1002 19:43:42.173877 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-run\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.177610 kubelet[2465]: I1002 19:43:42.173908 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177610 kubelet[2465]: I1002 19:43:42.173940 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177610 kubelet[2465]: I1002 19:43:42.173968 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177610 kubelet[2465]: I1002 19:43:42.173994 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177610 kubelet[2465]: I1002 19:43:42.176432 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:42.177806 kubelet[2465]: I1002 19:43:42.176676 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177806 kubelet[2465]: I1002 19:43:42.176991 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cni-path" (OuterVolumeSpecName: "cni-path") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177806 kubelet[2465]: I1002 19:43:42.177241 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177806 kubelet[2465]: I1002 19:43:42.177271 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.177806 kubelet[2465]: I1002 19:43:42.177305 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hostproc" (OuterVolumeSpecName: "hostproc") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:42.180086 systemd[1]: var-lib-kubelet-pods-e938e391\x2da668\x2d4f8a\x2daf3a\x2de0e5d2b5c65a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:43:42.181457 kubelet[2465]: I1002 19:43:42.181430 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:42.185820 systemd[1]: var-lib-kubelet-pods-e938e391\x2da668\x2d4f8a\x2daf3a\x2de0e5d2b5c65a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:42.185928 systemd[1]: var-lib-kubelet-pods-e938e391\x2da668\x2d4f8a\x2daf3a\x2de0e5d2b5c65a-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:42.188871 kubelet[2465]: I1002 19:43:42.188846 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:42.189203 kubelet[2465]: I1002 19:43:42.189170 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:42.191060 kubelet[2465]: I1002 19:43:42.191034 2465 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-kube-api-access-x7gsw" (OuterVolumeSpecName: "kube-api-access-x7gsw") pod "e938e391-a668-4f8a-af3a-e0e5d2b5c65a" (UID: "e938e391-a668-4f8a-af3a-e0e5d2b5c65a"). InnerVolumeSpecName "kube-api-access-x7gsw". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274733 2465 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274780 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274799 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-config-path\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274816 2465 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-host-proc-sys-net\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274835 2465 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-xtables-lock\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274851 2465 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-etc-cni-netd\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274869 2465 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hubble-tls\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275056 kubelet[2465]: I1002 19:43:42.274884 2465 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-clustermesh-secrets\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274901 2465 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cni-path\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274925 2465 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-x7gsw\" (UniqueName: \"kubernetes.io/projected/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-kube-api-access-x7gsw\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274941 2465 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-cilium-cgroup\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274957 2465 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-bpf-maps\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274975 2465 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-lib-modules\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.275635 kubelet[2465]: I1002 19:43:42.274993 2465 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e938e391-a668-4f8a-af3a-e0e5d2b5c65a-hostproc\") on node \"ci-3510.3.0-a-8abed2f532\" DevicePath \"\"" Oct 2 19:43:42.413886 kubelet[2465]: I1002 19:43:42.413849 2465 scope.go:115] "RemoveContainer" containerID="80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3" Oct 2 19:43:42.418009 systemd[1]: Removed slice kubepods-burstable-pode938e391_a668_4f8a_af3a_e0e5d2b5c65a.slice. Oct 2 19:43:42.421459 env[1331]: time="2023-10-02T19:43:42.421422760Z" level=info msg="RemoveContainer for \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\"" Oct 2 19:43:42.435370 env[1331]: time="2023-10-02T19:43:42.435332040Z" level=info msg="RemoveContainer for \"80825d432cb2ff1392b27d271d8c32b5d523cecd221658c3a1c8f2170c8617f3\" returns successfully" Oct 2 19:43:42.489540 env[1331]: time="2023-10-02T19:43:42.489450965Z" level=info msg="StopPodSandbox for \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\"" Oct 2 19:43:42.489676 env[1331]: time="2023-10-02T19:43:42.489545965Z" level=info msg="TearDown network for sandbox \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" successfully" Oct 2 19:43:42.489676 env[1331]: time="2023-10-02T19:43:42.489588365Z" level=info msg="StopPodSandbox for \"304df62137701f2234ab252dd69e653d01fc0dd7a408cd504c44cc9f54d718c5\" returns successfully" Oct 2 19:43:42.491132 kubelet[2465]: I1002 19:43:42.491112 2465 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=e938e391-a668-4f8a-af3a-e0e5d2b5c65a path="/var/lib/kubelet/pods/e938e391-a668-4f8a-af3a-e0e5d2b5c65a/volumes" Oct 2 19:43:42.945656 systemd[1]: var-lib-kubelet-pods-e938e391\x2da668\x2d4f8a\x2daf3a\x2de0e5d2b5c65a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dx7gsw.mount: Deactivated successfully. Oct 2 19:43:46.542369 kubelet[2465]: E1002 19:43:46.542327 2465 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"