Oct 2 19:34:13.090140 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:34:13.090175 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:13.090190 kernel: BIOS-provided physical RAM map: Oct 2 19:34:13.090200 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:34:13.090210 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:34:13.090221 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:34:13.090236 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:34:13.090247 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:34:13.090258 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:34:13.090268 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:34:13.090279 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:34:13.090289 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:34:13.090300 kernel: NX (Execute Disable) protection: active Oct 2 19:34:13.090311 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:34:13.090328 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5c9a98 RNG=0x3ffd1018 Oct 2 19:34:13.090340 kernel: random: crng init done Oct 2 19:34:13.090351 kernel: SMBIOS 3.1.0 present. Oct 2 19:34:13.090363 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:34:13.090375 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:34:13.090386 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:34:13.090398 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:34:13.090409 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:34:13.090424 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:34:13.090436 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:34:13.090447 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:34:13.090475 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:34:13.090485 kernel: tsc: Detected 2593.906 MHz processor Oct 2 19:34:13.090496 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:34:13.090506 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:34:13.090516 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:34:13.090527 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:34:13.090538 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:34:13.090552 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:34:13.090562 kernel: Using GB pages for direct mapping Oct 2 19:34:13.090573 kernel: Secure boot disabled Oct 2 19:34:13.090583 kernel: ACPI: Early table checksum verification disabled Oct 2 19:34:13.090595 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:34:13.090605 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090616 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090626 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:34:13.090644 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:34:13.090656 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090667 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090679 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090691 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090703 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090716 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090728 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:34:13.090739 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:34:13.090750 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:34:13.090764 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:34:13.090775 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:34:13.090785 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:34:13.090796 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:34:13.090810 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:34:13.090821 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:34:13.090833 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:34:13.090844 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:34:13.090858 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:34:13.090868 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:34:13.090880 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:34:13.090891 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:34:13.090902 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:34:13.090917 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:34:13.090931 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:34:13.090948 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:34:13.090960 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:34:13.090971 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:34:13.090981 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:34:13.090992 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:34:13.091003 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:34:13.091013 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:34:13.091026 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:34:13.091037 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:34:13.091049 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:34:13.091060 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:34:13.091072 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:34:13.091085 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:34:13.091098 kernel: Zone ranges: Oct 2 19:34:13.091110 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:34:13.091122 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:34:13.091135 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:34:13.091146 kernel: Movable zone start for each node Oct 2 19:34:13.091156 kernel: Early memory node ranges Oct 2 19:34:13.091167 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:34:13.091178 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:34:13.091191 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:34:13.091203 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:34:13.091214 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:34:13.091224 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:34:13.091237 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:34:13.091249 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:34:13.091260 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:34:13.091272 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:34:13.091283 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:34:13.091294 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:34:13.091306 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:34:13.091318 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:34:13.091330 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:34:13.091344 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:34:13.091357 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:34:13.091368 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:34:13.091379 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:34:13.091391 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:34:13.091404 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:34:13.091417 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:34:13.091429 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:34:13.091443 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:34:13.091476 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:34:13.091489 kernel: Policy zone: Normal Oct 2 19:34:13.091505 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:13.091517 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:34:13.091530 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:34:13.091542 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:34:13.091554 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:34:13.091567 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:34:13.091583 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:34:13.091597 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:34:13.091619 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:34:13.091635 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:34:13.091650 kernel: rcu: RCU event tracing is enabled. Oct 2 19:34:13.091663 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:34:13.091677 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:34:13.091690 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:34:13.091704 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:34:13.091717 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:34:13.091730 kernel: Using NULL legacy PIC Oct 2 19:34:13.091747 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:34:13.091761 kernel: Console: colour dummy device 80x25 Oct 2 19:34:13.091774 kernel: printk: console [tty1] enabled Oct 2 19:34:13.091787 kernel: printk: console [ttyS0] enabled Oct 2 19:34:13.091800 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:34:13.091817 kernel: ACPI: Core revision 20210730 Oct 2 19:34:13.091830 kernel: Failed to register legacy timer interrupt Oct 2 19:34:13.091843 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:34:13.091857 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:34:13.091870 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593906) Oct 2 19:34:13.091884 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:34:13.091898 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:34:13.091911 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:34:13.091924 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:34:13.091937 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:34:13.091953 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:34:13.091967 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:34:13.091981 kernel: RETBleed: Vulnerable Oct 2 19:34:13.091993 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:34:13.092006 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:34:13.092019 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:34:13.092032 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:34:13.092045 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:34:13.092057 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:34:13.092071 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:34:13.092087 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:34:13.092100 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:34:13.092114 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:34:13.092127 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:34:13.092140 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:34:13.092153 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:34:13.092165 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:34:13.092179 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:34:13.092192 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:34:13.092205 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:34:13.092218 kernel: LSM: Security Framework initializing Oct 2 19:34:13.092231 kernel: SELinux: Initializing. Oct 2 19:34:13.092248 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:34:13.092261 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:34:13.092274 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:34:13.092287 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:34:13.092302 kernel: signal: max sigframe size: 3632 Oct 2 19:34:13.092314 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:34:13.092328 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:34:13.092342 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:34:13.092354 kernel: x86: Booting SMP configuration: Oct 2 19:34:13.092368 kernel: .... node #0, CPUs: #1 Oct 2 19:34:13.092385 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:34:13.092400 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:34:13.092413 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:34:13.092426 kernel: smpboot: Max logical packages: 1 Oct 2 19:34:13.092440 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:34:13.092453 kernel: devtmpfs: initialized Oct 2 19:34:13.092482 kernel: x86/mm: Memory block size: 128MB Oct 2 19:34:13.092496 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:34:13.092513 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:34:13.092526 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:34:13.092540 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:34:13.092553 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:34:13.092566 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:34:13.092580 kernel: audit: type=2000 audit(1696275252.028:1): state=initialized audit_enabled=0 res=1 Oct 2 19:34:13.092593 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:34:13.092607 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:34:13.092620 kernel: cpuidle: using governor menu Oct 2 19:34:13.092636 kernel: ACPI: bus type PCI registered Oct 2 19:34:13.092649 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:34:13.092662 kernel: dca service started, version 1.12.1 Oct 2 19:34:13.092676 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:34:13.092689 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:34:13.092703 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:34:13.092717 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:34:13.092728 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:34:13.092740 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:34:13.092754 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:34:13.092766 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:34:13.092778 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:34:13.092789 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:34:13.092802 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:34:13.092814 kernel: ACPI: Interpreter enabled Oct 2 19:34:13.092826 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:34:13.092838 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:34:13.092850 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:34:13.092865 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:34:13.092877 kernel: iommu: Default domain type: Translated Oct 2 19:34:13.092890 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:34:13.092903 kernel: vgaarb: loaded Oct 2 19:34:13.092917 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:34:13.092931 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:34:13.092945 kernel: PTP clock support registered Oct 2 19:34:13.092959 kernel: Registered efivars operations Oct 2 19:34:13.092975 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:34:13.092989 kernel: PCI: System does not support PCI Oct 2 19:34:13.093007 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:34:13.093021 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:34:13.093036 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:34:13.093051 kernel: pnp: PnP ACPI init Oct 2 19:34:13.093065 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:34:13.093080 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:34:13.093095 kernel: NET: Registered PF_INET protocol family Oct 2 19:34:13.093110 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:34:13.093128 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:34:13.093143 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:34:13.093158 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:34:13.093172 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:34:13.093185 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:34:13.093198 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:34:13.093211 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:34:13.093223 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:34:13.093234 kernel: NET: Registered PF_XDP protocol family Oct 2 19:34:13.093248 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:34:13.093260 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:34:13.093272 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:34:13.093284 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:34:13.093295 kernel: Initialise system trusted keyrings Oct 2 19:34:13.093308 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:34:13.093320 kernel: Key type asymmetric registered Oct 2 19:34:13.093334 kernel: Asymmetric key parser 'x509' registered Oct 2 19:34:13.093347 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:34:13.093362 kernel: io scheduler mq-deadline registered Oct 2 19:34:13.093375 kernel: io scheduler kyber registered Oct 2 19:34:13.093387 kernel: io scheduler bfq registered Oct 2 19:34:13.093399 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:34:13.093411 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:34:13.093423 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:34:13.093435 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:34:13.093447 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:34:13.093645 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:34:13.093759 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:34:12 UTC (1696275252) Oct 2 19:34:13.093862 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:34:13.093878 kernel: fail to initialize ptp_kvm Oct 2 19:34:13.093891 kernel: intel_pstate: CPU model not supported Oct 2 19:34:13.093904 kernel: efifb: probing for efifb Oct 2 19:34:13.093917 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:34:13.093930 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:34:13.093943 kernel: efifb: scrolling: redraw Oct 2 19:34:13.093959 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:34:13.093972 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:34:13.093984 kernel: fb0: EFI VGA frame buffer device Oct 2 19:34:13.093997 kernel: pstore: Registered efi as persistent store backend Oct 2 19:34:13.094010 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:34:13.094023 kernel: Segment Routing with IPv6 Oct 2 19:34:13.094035 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:34:13.094048 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:34:13.094061 kernel: Key type dns_resolver registered Oct 2 19:34:13.094076 kernel: IPI shorthand broadcast: enabled Oct 2 19:34:13.094089 kernel: sched_clock: Marking stable (865869400, 25188300)->(1111341200, -220283500) Oct 2 19:34:13.094103 kernel: registered taskstats version 1 Oct 2 19:34:13.094116 kernel: Loading compiled-in X.509 certificates Oct 2 19:34:13.094129 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:34:13.094142 kernel: Key type .fscrypt registered Oct 2 19:34:13.094155 kernel: Key type fscrypt-provisioning registered Oct 2 19:34:13.094168 kernel: pstore: Using crash dump compression: deflate Oct 2 19:34:13.094184 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:34:13.094197 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:34:13.094209 kernel: ima: No architecture policies found Oct 2 19:34:13.094222 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:34:13.094235 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:34:13.094248 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:34:13.094261 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:34:13.094274 kernel: Run /init as init process Oct 2 19:34:13.094287 kernel: with arguments: Oct 2 19:34:13.094300 kernel: /init Oct 2 19:34:13.094315 kernel: with environment: Oct 2 19:34:13.094328 kernel: HOME=/ Oct 2 19:34:13.094341 kernel: TERM=linux Oct 2 19:34:13.094354 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:34:13.094370 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:34:13.094386 systemd[1]: Detected virtualization microsoft. Oct 2 19:34:13.094400 systemd[1]: Detected architecture x86-64. Oct 2 19:34:13.094416 systemd[1]: Running in initrd. Oct 2 19:34:13.094429 systemd[1]: No hostname configured, using default hostname. Oct 2 19:34:13.094443 systemd[1]: Hostname set to . Oct 2 19:34:13.094474 systemd[1]: Initializing machine ID from random generator. Oct 2 19:34:13.094488 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:34:13.094502 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:34:13.094516 systemd[1]: Reached target cryptsetup.target. Oct 2 19:34:13.094530 systemd[1]: Reached target paths.target. Oct 2 19:34:13.094542 systemd[1]: Reached target slices.target. Oct 2 19:34:13.094559 systemd[1]: Reached target swap.target. Oct 2 19:34:13.094573 systemd[1]: Reached target timers.target. Oct 2 19:34:13.094586 systemd[1]: Listening on iscsid.socket. Oct 2 19:34:13.094601 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:34:13.094613 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:34:13.094626 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:34:13.094640 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:34:13.094656 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:34:13.094669 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:34:13.094683 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:34:13.094697 systemd[1]: Reached target sockets.target. Oct 2 19:34:13.094710 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:34:13.094724 systemd[1]: Finished network-cleanup.service. Oct 2 19:34:13.094739 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:34:13.094752 systemd[1]: Starting systemd-journald.service... Oct 2 19:34:13.094766 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:34:13.094783 systemd[1]: Starting systemd-resolved.service... Oct 2 19:34:13.094797 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:34:13.094818 systemd-journald[183]: Journal started Oct 2 19:34:13.094888 systemd-journald[183]: Runtime Journal (/run/log/journal/ed07a2a9386e4d1eb173904fb3f868b0) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:34:13.095662 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:34:13.126526 systemd[1]: Started systemd-journald.service. Oct 2 19:34:13.126591 kernel: audit: type=1130 audit(1696275253.114:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.115264 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:34:13.131508 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:34:13.134177 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:34:13.135835 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:34:13.151452 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:34:13.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.169835 kernel: audit: type=1130 audit(1696275253.130:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.185965 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:34:13.186994 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:34:13.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.205557 kernel: audit: type=1130 audit(1696275253.133:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.208808 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:34:13.210489 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:34:13.210498 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:34:13.210532 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:34:13.216342 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:34:13.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.242312 kernel: Bridge firewalling registered Oct 2 19:34:13.242348 kernel: audit: type=1130 audit(1696275253.134:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.242360 kernel: audit: type=1130 audit(1696275253.187:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.257271 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:34:13.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.262290 systemd[1]: Started systemd-resolved.service. Oct 2 19:34:13.293246 kernel: audit: type=1130 audit(1696275253.261:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.293272 kernel: audit: type=1130 audit(1696275253.276:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.277178 systemd[1]: Reached target nss-lookup.target. Oct 2 19:34:13.291736 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:34:13.312326 dracut-cmdline[202]: dracut-dracut-053 Oct 2 19:34:13.316607 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:34:13.336478 kernel: SCSI subsystem initialized Oct 2 19:34:13.363248 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:34:13.363329 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:34:13.369487 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:34:13.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.373205 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:34:13.392376 kernel: audit: type=1130 audit(1696275253.376:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.374108 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:34:13.395086 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:34:13.403618 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:34:13.410719 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:34:13.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.428486 kernel: audit: type=1130 audit(1696275253.415:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.428538 kernel: iscsi: registered transport (tcp) Oct 2 19:34:13.458480 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:34:13.458562 kernel: QLogic iSCSI HBA Driver Oct 2 19:34:13.488925 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:34:13.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:13.494774 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:34:13.546488 kernel: raid6: avx512x4 gen() 17579 MB/s Oct 2 19:34:13.566470 kernel: raid6: avx512x4 xor() 7965 MB/s Oct 2 19:34:13.586466 kernel: raid6: avx512x2 gen() 17652 MB/s Oct 2 19:34:13.607473 kernel: raid6: avx512x2 xor() 27637 MB/s Oct 2 19:34:13.627469 kernel: raid6: avx512x1 gen() 17746 MB/s Oct 2 19:34:13.647466 kernel: raid6: avx512x1 xor() 25738 MB/s Oct 2 19:34:13.668474 kernel: raid6: avx2x4 gen() 17796 MB/s Oct 2 19:34:13.688466 kernel: raid6: avx2x4 xor() 7453 MB/s Oct 2 19:34:13.708467 kernel: raid6: avx2x2 gen() 17720 MB/s Oct 2 19:34:13.729481 kernel: raid6: avx2x2 xor() 20376 MB/s Oct 2 19:34:13.749472 kernel: raid6: avx2x1 gen() 13274 MB/s Oct 2 19:34:13.769473 kernel: raid6: avx2x1 xor() 18009 MB/s Oct 2 19:34:13.790472 kernel: raid6: sse2x4 gen() 11119 MB/s Oct 2 19:34:13.810468 kernel: raid6: sse2x4 xor() 6655 MB/s Oct 2 19:34:13.830467 kernel: raid6: sse2x2 gen() 12152 MB/s Oct 2 19:34:13.851473 kernel: raid6: sse2x2 xor() 7201 MB/s Oct 2 19:34:13.871466 kernel: raid6: sse2x1 gen() 11141 MB/s Oct 2 19:34:13.896399 kernel: raid6: sse2x1 xor() 5692 MB/s Oct 2 19:34:13.896423 kernel: raid6: using algorithm avx2x4 gen() 17796 MB/s Oct 2 19:34:13.896436 kernel: raid6: .... xor() 7453 MB/s, rmw enabled Oct 2 19:34:13.900020 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:34:13.919487 kernel: xor: automatically using best checksumming function avx Oct 2 19:34:14.015481 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:34:14.024161 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:34:14.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:14.028000 audit: BPF prog-id=7 op=LOAD Oct 2 19:34:14.028000 audit: BPF prog-id=8 op=LOAD Oct 2 19:34:14.029050 systemd[1]: Starting systemd-udevd.service... Oct 2 19:34:14.044522 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 19:34:14.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:14.051484 systemd[1]: Started systemd-udevd.service. Oct 2 19:34:14.054782 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:34:14.075362 dracut-pre-trigger[398]: rd.md=0: removing MD RAID activation Oct 2 19:34:14.109011 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:34:14.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:14.115258 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:34:14.149833 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:34:14.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:14.197481 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:34:14.219480 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:34:14.228480 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:34:14.234479 kernel: AES CTR mode by8 optimization enabled Oct 2 19:34:14.263479 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:34:14.268477 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:34:14.281150 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:34:14.281252 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:34:14.291944 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:34:14.292012 kernel: scsi host1: storvsc_host_t Oct 2 19:34:14.305703 kernel: scsi host0: storvsc_host_t Oct 2 19:34:14.305998 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:34:14.306016 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:34:14.316513 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:34:14.317525 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:34:14.328837 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:34:14.352129 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:34:14.352398 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:34:14.361026 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:34:14.361280 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:34:14.361402 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:34:14.370423 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:34:14.370751 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:34:14.375476 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:14.375528 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:34:14.379475 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:34:14.417001 kernel: hv_netvsc 000d3a69-5100-000d-3a69-5100000d3a69 eth0: VF slot 1 added Oct 2 19:34:14.434443 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:34:14.434546 kernel: hv_pci 87fb0172-2c63-4586-9acd-0319309fad8f: PCI VMBus probing: Using version 0x10004 Oct 2 19:34:14.443484 kernel: hv_pci 87fb0172-2c63-4586-9acd-0319309fad8f: PCI host bridge to bus 2c63:00 Oct 2 19:34:14.443710 kernel: pci_bus 2c63:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:34:14.452379 kernel: pci_bus 2c63:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:34:14.461846 kernel: pci 2c63:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:34:14.471042 kernel: pci 2c63:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:34:14.486626 kernel: pci 2c63:00:02.0: enabling Extended Tags Oct 2 19:34:14.505733 kernel: pci 2c63:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 2c63:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:34:14.505984 kernel: pci_bus 2c63:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:34:14.506111 kernel: pci 2c63:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:34:14.609488 kernel: mlx5_core 2c63:00:02.0: firmware version: 14.30.1224 Oct 2 19:34:14.705905 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:34:14.758484 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (444) Oct 2 19:34:14.775279 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:34:14.787477 kernel: mlx5_core 2c63:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:34:14.855062 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:34:14.903357 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:34:14.906813 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:34:14.917376 systemd[1]: Starting disk-uuid.service... Oct 2 19:34:14.932480 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:14.940485 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:14.955159 kernel: mlx5_core 2c63:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:34:14.955421 kernel: mlx5_core 2c63:00:02.0: mlx5e_tc_post_act_init:40:(pid 239): firmware level support is missing Oct 2 19:34:14.971784 kernel: hv_netvsc 000d3a69-5100-000d-3a69-5100000d3a69 eth0: VF registering: eth1 Oct 2 19:34:14.972046 kernel: mlx5_core 2c63:00:02.0 eth1: joined to eth0 Oct 2 19:34:14.992477 kernel: mlx5_core 2c63:00:02.0 enP11363s1: renamed from eth1 Oct 2 19:34:15.949481 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:34:15.949841 disk-uuid[554]: The operation has completed successfully. Oct 2 19:34:16.027998 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:34:16.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.028110 systemd[1]: Finished disk-uuid.service. Oct 2 19:34:16.040674 systemd[1]: Starting verity-setup.service... Oct 2 19:34:16.077486 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:34:16.318985 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:34:16.322311 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:34:16.328981 systemd[1]: Finished verity-setup.service. Oct 2 19:34:16.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.408477 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:34:16.408634 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:34:16.410964 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:34:16.411785 systemd[1]: Starting ignition-setup.service... Oct 2 19:34:16.420179 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:34:16.441548 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:16.441584 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:16.441602 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:16.498908 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:34:16.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.503000 audit: BPF prog-id=9 op=LOAD Oct 2 19:34:16.505089 systemd[1]: Starting systemd-networkd.service... Oct 2 19:34:16.522946 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:34:16.539728 systemd-networkd[796]: lo: Link UP Oct 2 19:34:16.539738 systemd-networkd[796]: lo: Gained carrier Oct 2 19:34:16.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.540686 systemd-networkd[796]: Enumeration completed Oct 2 19:34:16.540794 systemd[1]: Started systemd-networkd.service. Oct 2 19:34:16.544367 systemd[1]: Reached target network.target. Oct 2 19:34:16.548345 systemd-networkd[796]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:34:16.557316 systemd[1]: Starting iscsiuio.service... Oct 2 19:34:16.561716 systemd[1]: Started iscsiuio.service. Oct 2 19:34:16.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.566746 systemd[1]: Starting iscsid.service... Oct 2 19:34:16.572096 iscsid[805]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:34:16.572096 iscsid[805]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:34:16.572096 iscsid[805]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:34:16.572096 iscsid[805]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:34:16.572096 iscsid[805]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:34:16.572096 iscsid[805]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:34:16.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.572863 systemd[1]: Started iscsid.service. Oct 2 19:34:16.578950 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:34:16.628350 kernel: mlx5_core 2c63:00:02.0 enP11363s1: Link up Oct 2 19:34:16.594313 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:34:16.598147 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:34:16.598448 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:34:16.598924 systemd[1]: Reached target remote-fs.target. Oct 2 19:34:16.600270 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:34:16.609252 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:34:16.707152 kernel: hv_netvsc 000d3a69-5100-000d-3a69-5100000d3a69 eth0: Data path switched to VF: enP11363s1 Oct 2 19:34:16.707430 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:34:16.707610 systemd-networkd[796]: enP11363s1: Link UP Oct 2 19:34:16.707746 systemd-networkd[796]: eth0: Link UP Oct 2 19:34:16.707975 systemd-networkd[796]: eth0: Gained carrier Oct 2 19:34:16.712652 systemd-networkd[796]: enP11363s1: Gained carrier Oct 2 19:34:16.718854 systemd[1]: Finished ignition-setup.service. Oct 2 19:34:16.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.720890 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:34:16.746554 systemd-networkd[796]: eth0: DHCPv4 address 10.200.8.20/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:34:17.819710 systemd-networkd[796]: eth0: Gained IPv6LL Oct 2 19:34:19.320408 ignition[820]: Ignition 2.14.0 Oct 2 19:34:19.320428 ignition[820]: Stage: fetch-offline Oct 2 19:34:19.320607 ignition[820]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:19.320669 ignition[820]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:19.397793 ignition[820]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:19.398059 ignition[820]: parsed url from cmdline: "" Oct 2 19:34:19.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.399624 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:34:19.428272 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:34:19.428302 kernel: audit: type=1130 audit(1696275259.404:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.398064 ignition[820]: no config URL provided Oct 2 19:34:19.406861 systemd[1]: Starting ignition-fetch.service... Oct 2 19:34:19.398070 ignition[820]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:34:19.398084 ignition[820]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:34:19.398092 ignition[820]: failed to fetch config: resource requires networking Oct 2 19:34:19.398405 ignition[820]: Ignition finished successfully Oct 2 19:34:19.416925 ignition[826]: Ignition 2.14.0 Oct 2 19:34:19.416931 ignition[826]: Stage: fetch Oct 2 19:34:19.417072 ignition[826]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:19.417109 ignition[826]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:19.423211 ignition[826]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:19.423480 ignition[826]: parsed url from cmdline: "" Oct 2 19:34:19.423486 ignition[826]: no config URL provided Oct 2 19:34:19.423499 ignition[826]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:34:19.423515 ignition[826]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:34:19.423565 ignition[826]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:34:19.449261 ignition[826]: GET result: OK Oct 2 19:34:19.449280 ignition[826]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 19:34:19.548906 ignition[826]: opening config device: "/dev/sr0" Oct 2 19:34:19.549489 ignition[826]: getting drive status for "/dev/sr0" Oct 2 19:34:19.549609 ignition[826]: drive status: OK Oct 2 19:34:19.549651 ignition[826]: mounting config device Oct 2 19:34:19.549685 ignition[826]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure1401637674" Oct 2 19:34:19.572213 ignition[826]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure1401637674" Oct 2 19:34:19.575683 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 19:34:19.574818 systemd[1]: tmp-ignition\x2dazure1401637674.mount: Deactivated successfully. Oct 2 19:34:19.573503 ignition[826]: checking for config drive Oct 2 19:34:19.573901 ignition[826]: reading config Oct 2 19:34:19.574442 ignition[826]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure1401637674" Oct 2 19:34:19.575511 ignition[826]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure1401637674" Oct 2 19:34:19.575527 ignition[826]: config has been read from custom data Oct 2 19:34:19.575572 ignition[826]: parsing config with SHA512: 08038f8c25c5518b9dbd8680970fa88fbc8de847a86e561b267941a75e5dfe60c75267d08941508d269843c83466480ba69d679f935bcbe7f6693c628fbbffdb Oct 2 19:34:19.607027 unknown[826]: fetched base config from "system" Oct 2 19:34:19.607039 unknown[826]: fetched base config from "system" Oct 2 19:34:19.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.607589 ignition[826]: fetch: fetch complete Oct 2 19:34:19.631275 kernel: audit: type=1130 audit(1696275259.615:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.607047 unknown[826]: fetched user config from "azure" Oct 2 19:34:19.607594 ignition[826]: fetch: fetch passed Oct 2 19:34:19.609774 systemd[1]: Finished ignition-fetch.service. Oct 2 19:34:19.607635 ignition[826]: Ignition finished successfully Oct 2 19:34:19.616540 systemd[1]: Starting ignition-kargs.service... Oct 2 19:34:19.642408 ignition[833]: Ignition 2.14.0 Oct 2 19:34:19.642414 ignition[833]: Stage: kargs Oct 2 19:34:19.642535 ignition[833]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:19.649688 systemd[1]: Finished ignition-kargs.service. Oct 2 19:34:19.669845 kernel: audit: type=1130 audit(1696275259.654:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.642554 ignition[833]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:19.655550 systemd[1]: Starting ignition-disks.service... Oct 2 19:34:19.645446 ignition[833]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:19.648147 ignition[833]: kargs: kargs passed Oct 2 19:34:19.648197 ignition[833]: Ignition finished successfully Oct 2 19:34:19.663812 ignition[839]: Ignition 2.14.0 Oct 2 19:34:19.663820 ignition[839]: Stage: disks Oct 2 19:34:19.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.684753 systemd[1]: Finished ignition-disks.service. Oct 2 19:34:19.705739 kernel: audit: type=1130 audit(1696275259.687:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.663936 ignition[839]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:19.687847 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:34:19.663962 ignition[839]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:19.705762 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:34:19.681413 ignition[839]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:19.683052 ignition[839]: disks: disks passed Oct 2 19:34:19.683107 ignition[839]: Ignition finished successfully Oct 2 19:34:19.723201 systemd[1]: Reached target local-fs.target. Oct 2 19:34:19.727655 systemd[1]: Reached target sysinit.target. Oct 2 19:34:19.731941 systemd[1]: Reached target basic.target. Oct 2 19:34:19.735512 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:34:19.785657 systemd-fsck[847]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:34:19.791697 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:34:19.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.797824 systemd[1]: Mounting sysroot.mount... Oct 2 19:34:19.815827 kernel: audit: type=1130 audit(1696275259.796:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:19.823488 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:34:19.823468 systemd[1]: Mounted sysroot.mount. Oct 2 19:34:19.827262 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:34:19.858610 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:34:19.866823 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:34:19.871722 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:34:19.872801 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:34:19.882622 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:34:19.945547 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:34:19.951587 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:34:19.967490 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (857) Oct 2 19:34:19.972954 initrd-setup-root[862]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:34:19.985926 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:19.985975 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:19.986002 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:19.989691 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:34:19.997828 initrd-setup-root[888]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:34:20.015814 initrd-setup-root[896]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:34:20.022816 initrd-setup-root[904]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:34:20.381358 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:34:20.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.398486 kernel: audit: type=1130 audit(1696275260.383:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.398910 systemd[1]: Starting ignition-mount.service... Oct 2 19:34:20.405353 systemd[1]: Starting sysroot-boot.service... Oct 2 19:34:20.431428 systemd[1]: Finished sysroot-boot.service. Oct 2 19:34:20.449089 kernel: audit: type=1130 audit(1696275260.433:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.449176 ignition[925]: INFO : Ignition 2.14.0 Oct 2 19:34:20.449176 ignition[925]: INFO : Stage: mount Oct 2 19:34:20.449176 ignition[925]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:20.449176 ignition[925]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:20.449176 ignition[925]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:20.478562 kernel: audit: type=1130 audit(1696275260.458:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:20.478642 ignition[925]: INFO : mount: mount passed Oct 2 19:34:20.478642 ignition[925]: INFO : Ignition finished successfully Oct 2 19:34:20.456224 systemd[1]: Finished ignition-mount.service. Oct 2 19:34:20.573518 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:34:20.573615 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:34:20.984108 coreos-metadata[856]: Oct 02 19:34:20.984 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:34:21.001066 coreos-metadata[856]: Oct 02 19:34:21.001 INFO Fetch successful Oct 2 19:34:21.034438 coreos-metadata[856]: Oct 02 19:34:21.034 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:34:21.050135 coreos-metadata[856]: Oct 02 19:34:21.050 INFO Fetch successful Oct 2 19:34:21.067034 coreos-metadata[856]: Oct 02 19:34:21.066 INFO wrote hostname ci-3510.3.0-a-c0afe9ffb8 to /sysroot/etc/hostname Oct 2 19:34:21.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:21.068885 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:34:21.090954 kernel: audit: type=1130 audit(1696275261.073:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:21.074685 systemd[1]: Starting ignition-files.service... Oct 2 19:34:21.094439 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:34:21.109477 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (935) Oct 2 19:34:21.118425 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:34:21.118472 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:34:21.118486 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:34:21.126610 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:34:21.141514 ignition[954]: INFO : Ignition 2.14.0 Oct 2 19:34:21.141514 ignition[954]: INFO : Stage: files Oct 2 19:34:21.145881 ignition[954]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:21.145881 ignition[954]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:21.155327 ignition[954]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:21.165359 ignition[954]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:34:21.168692 ignition[954]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:34:21.168692 ignition[954]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:34:21.201348 ignition[954]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:34:21.205765 ignition[954]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:34:21.210057 unknown[954]: wrote ssh authorized keys file for user: core Oct 2 19:34:21.213011 ignition[954]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:34:21.216937 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:34:21.221982 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:34:21.723162 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:34:22.570260 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:34:22.579357 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:34:22.579357 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:34:22.579357 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:34:22.961701 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:34:23.362528 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:34:23.371198 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:34:23.371198 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:34:23.380982 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:34:28.546157 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:34:30.396554 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:34:30.406488 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:34:30.406488 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:34:30.406488 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:34:30.536014 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:34:34.182752 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:34:34.193230 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:34:34.193230 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:34:34.193230 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:34:34.313981 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:34:36.254280 ignition[954]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:34:36.265000 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:34:36.265000 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:34:36.265000 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:34:36.265000 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:34:36.265000 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:34:36.622281 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:34:37.094269 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:34:37.100089 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:34:37.100089 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:34:37.100089 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:34:37.121310 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:34:37.121310 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:34:37.121310 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:34:37.121310 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1252887855" Oct 2 19:34:37.121310 ignition[954]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1252887855": device or resource busy Oct 2 19:34:37.121310 ignition[954]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1252887855", trying btrfs: device or resource busy Oct 2 19:34:37.121310 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1252887855" Oct 2 19:34:37.162823 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (957) Oct 2 19:34:37.129116 systemd[1]: mnt-oem1252887855.mount: Deactivated successfully. Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1252887855" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem1252887855" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem1252887855" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem678244484" Oct 2 19:34:37.165974 ignition[954]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem678244484": device or resource busy Oct 2 19:34:37.165974 ignition[954]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem678244484", trying btrfs: device or resource busy Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem678244484" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem678244484" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem678244484" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem678244484" Oct 2 19:34:37.165974 ignition[954]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:34:37.165974 ignition[954]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:34:37.165974 ignition[954]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:34:37.259223 kernel: audit: type=1130 audit(1696275277.179:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.153187 systemd[1]: mnt-oem678244484.mount: Deactivated successfully. Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:34:37.261962 ignition[954]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:34:37.261962 ignition[954]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:34:37.261962 ignition[954]: INFO : files: files passed Oct 2 19:34:37.377842 kernel: audit: type=1130 audit(1696275277.335:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.377883 kernel: audit: type=1131 audit(1696275277.347:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.166668 systemd[1]: Finished ignition-files.service. Oct 2 19:34:37.379999 ignition[954]: INFO : Ignition finished successfully Oct 2 19:34:37.303989 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:34:37.306955 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:34:37.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.392946 initrd-setup-root-after-ignition[979]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:34:37.408388 kernel: audit: type=1130 audit(1696275277.392:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.324754 systemd[1]: Starting ignition-quench.service... Oct 2 19:34:37.334856 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:34:37.334967 systemd[1]: Finished ignition-quench.service. Oct 2 19:34:37.384951 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:34:37.392844 systemd[1]: Reached target ignition-complete.target. Oct 2 19:34:37.422985 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:34:37.441544 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:34:37.441664 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:34:37.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.448553 systemd[1]: Reached target initrd-fs.target. Oct 2 19:34:37.476430 kernel: audit: type=1130 audit(1696275277.448:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.476490 kernel: audit: type=1131 audit(1696275277.448:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.476495 systemd[1]: Reached target initrd.target. Oct 2 19:34:37.481009 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:34:37.486218 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:34:37.499467 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:34:37.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.518511 kernel: audit: type=1130 audit(1696275277.502:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.519176 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:34:37.534218 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:34:37.539681 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:34:37.545279 systemd[1]: Stopped target timers.target. Oct 2 19:34:37.549781 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:34:37.551586 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:34:37.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.555653 systemd[1]: Stopped target initrd.target. Oct 2 19:34:37.576120 kernel: audit: type=1131 audit(1696275277.555:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.573540 systemd[1]: Stopped target basic.target. Oct 2 19:34:37.580406 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:34:37.585827 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:34:37.591019 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:34:37.597183 systemd[1]: Stopped target remote-fs.target. Oct 2 19:34:37.602565 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:34:37.608772 systemd[1]: Stopped target sysinit.target. Oct 2 19:34:37.614323 systemd[1]: Stopped target local-fs.target. Oct 2 19:34:37.619879 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:34:37.625894 systemd[1]: Stopped target swap.target. Oct 2 19:34:37.630968 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:34:37.656243 kernel: audit: type=1131 audit(1696275277.634:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.631131 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:34:37.652655 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:34:37.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.656316 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:34:37.680392 kernel: audit: type=1131 audit(1696275277.661:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.658865 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:34:37.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.661975 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:34:37.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.674614 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:34:37.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.680544 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:34:37.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.709952 iscsid[805]: iscsid shutting down. Oct 2 19:34:37.680711 systemd[1]: Stopped ignition-files.service. Oct 2 19:34:37.684979 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:34:37.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.723788 ignition[992]: INFO : Ignition 2.14.0 Oct 2 19:34:37.723788 ignition[992]: INFO : Stage: umount Oct 2 19:34:37.723788 ignition[992]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:34:37.723788 ignition[992]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:34:37.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.685127 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:34:37.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.752521 ignition[992]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:34:37.752521 ignition[992]: INFO : umount: umount passed Oct 2 19:34:37.752521 ignition[992]: INFO : Ignition finished successfully Oct 2 19:34:37.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.694564 systemd[1]: Stopping ignition-mount.service... Oct 2 19:34:37.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.698873 systemd[1]: Stopping iscsid.service... Oct 2 19:34:37.700865 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:34:37.701044 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:34:37.704878 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:34:37.712348 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:34:37.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.712643 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:34:37.721024 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:34:37.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.721198 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:34:37.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.728701 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:34:37.728835 systemd[1]: Stopped iscsid.service. Oct 2 19:34:37.732016 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:34:37.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.732101 systemd[1]: Stopped ignition-mount.service. Oct 2 19:34:37.737662 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:34:37.737761 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:34:37.741987 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:34:37.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.742048 systemd[1]: Stopped ignition-disks.service. Oct 2 19:34:37.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.752531 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:34:37.842000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:34:37.752601 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:34:37.757887 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:34:37.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.757939 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:34:37.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.762094 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:34:37.762149 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:34:37.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.767634 systemd[1]: Stopped target paths.target. Oct 2 19:34:37.773914 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:34:37.779543 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:34:37.783269 systemd[1]: Stopped target slices.target. Oct 2 19:34:37.785361 systemd[1]: Stopped target sockets.target. Oct 2 19:34:37.787510 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:34:37.787562 systemd[1]: Closed iscsid.socket. Oct 2 19:34:37.789321 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:34:37.789381 systemd[1]: Stopped ignition-setup.service. Oct 2 19:34:37.795033 systemd[1]: Stopping iscsiuio.service... Oct 2 19:34:37.801184 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 19:34:37.801654 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:34:37.801757 systemd[1]: Stopped iscsiuio.service. Oct 2 19:34:37.804854 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:34:37.804947 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:34:37.809307 systemd[1]: Stopped target network.target. Oct 2 19:34:37.813560 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:34:37.813606 systemd[1]: Closed iscsiuio.socket. Oct 2 19:34:37.817310 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:34:37.817373 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:34:37.822309 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:34:37.826212 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:34:37.829846 systemd-networkd[796]: eth0: DHCPv6 lease lost Oct 2 19:34:37.892000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:34:37.831224 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:34:37.831316 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:34:37.838302 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:34:37.838407 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:34:37.842879 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:34:37.842924 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:34:37.848591 systemd[1]: Stopping network-cleanup.service... Oct 2 19:34:37.852339 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:34:37.852417 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:34:37.857607 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:34:37.857684 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:34:37.862026 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:34:37.862096 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:34:37.871597 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:34:37.883121 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:34:37.887072 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:34:37.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.955357 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:34:37.955444 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:34:37.960681 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:34:37.961003 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:34:37.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.965238 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:34:37.965299 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:34:37.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.971859 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:34:37.974441 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:34:37.978569 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:34:37.978628 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:34:37.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.990357 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:34:38.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:38.000000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:37.992764 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:34:37.992836 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:34:37.997214 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:34:37.997311 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:34:38.030481 kernel: hv_netvsc 000d3a69-5100-000d-3a69-5100000d3a69 eth0: Data path switched from VF: enP11363s1 Oct 2 19:34:38.047864 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:34:38.048003 systemd[1]: Stopped network-cleanup.service. Oct 2 19:34:38.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:38.055014 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:34:38.060480 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:34:38.071941 systemd[1]: Switching root. Oct 2 19:34:38.096646 systemd-journald[183]: Journal stopped Oct 2 19:34:50.130549 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 19:34:50.130579 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:34:50.130590 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:34:50.130603 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:34:50.130611 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:34:50.130620 kernel: SELinux: policy capability open_perms=1 Oct 2 19:34:50.130633 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:34:50.130644 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:34:50.130652 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:34:50.130660 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:34:50.130671 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:34:50.130680 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:34:50.130691 systemd[1]: Successfully loaded SELinux policy in 286.625ms. Oct 2 19:34:50.130702 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.323ms. Oct 2 19:34:50.130718 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:34:50.130728 systemd[1]: Detected virtualization microsoft. Oct 2 19:34:50.130740 systemd[1]: Detected architecture x86-64. Oct 2 19:34:50.130749 systemd[1]: Detected first boot. Oct 2 19:34:50.130763 systemd[1]: Hostname set to . Oct 2 19:34:50.130772 systemd[1]: Initializing machine ID from random generator. Oct 2 19:34:50.130784 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:34:50.130794 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:34:50.130806 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:34:50.130817 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:34:50.130830 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 19:34:50.130839 kernel: audit: type=1334 audit(1696275289.577:89): prog-id=12 op=LOAD Oct 2 19:34:50.130852 kernel: audit: type=1334 audit(1696275289.577:90): prog-id=3 op=UNLOAD Oct 2 19:34:50.130861 kernel: audit: type=1334 audit(1696275289.583:91): prog-id=13 op=LOAD Oct 2 19:34:50.130872 kernel: audit: type=1334 audit(1696275289.589:92): prog-id=14 op=LOAD Oct 2 19:34:50.130881 kernel: audit: type=1334 audit(1696275289.589:93): prog-id=4 op=UNLOAD Oct 2 19:34:50.130891 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:34:50.130901 kernel: audit: type=1334 audit(1696275289.589:94): prog-id=5 op=UNLOAD Oct 2 19:34:50.130911 kernel: audit: type=1334 audit(1696275289.597:95): prog-id=15 op=LOAD Oct 2 19:34:50.130923 kernel: audit: type=1334 audit(1696275289.597:96): prog-id=12 op=UNLOAD Oct 2 19:34:50.130932 kernel: audit: type=1334 audit(1696275289.603:97): prog-id=16 op=LOAD Oct 2 19:34:50.130944 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:34:50.130953 kernel: audit: type=1334 audit(1696275289.603:98): prog-id=17 op=LOAD Oct 2 19:34:50.130965 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:34:50.130974 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:34:50.130987 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:34:50.131000 systemd[1]: Created slice system-getty.slice. Oct 2 19:34:50.131014 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:34:50.131024 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:34:50.131036 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:34:50.131046 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:34:50.131059 systemd[1]: Created slice user.slice. Oct 2 19:34:50.131069 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:34:50.131081 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:34:50.131091 systemd[1]: Set up automount boot.automount. Oct 2 19:34:50.131103 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:34:50.131115 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:34:50.131127 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:34:50.131137 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:34:50.131149 systemd[1]: Reached target integritysetup.target. Oct 2 19:34:50.131159 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:34:50.131170 systemd[1]: Reached target remote-fs.target. Oct 2 19:34:50.131181 systemd[1]: Reached target slices.target. Oct 2 19:34:50.131195 systemd[1]: Reached target swap.target. Oct 2 19:34:50.131205 systemd[1]: Reached target torcx.target. Oct 2 19:34:50.131214 systemd[1]: Reached target veritysetup.target. Oct 2 19:34:50.131227 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:34:50.131236 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:34:50.131249 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:34:50.131262 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:34:50.131275 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:34:50.131285 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:34:50.131298 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:34:50.131311 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:34:50.131329 systemd[1]: Mounting media.mount... Oct 2 19:34:50.131351 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:34:50.131370 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:34:50.131392 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:34:50.131415 systemd[1]: Mounting tmp.mount... Oct 2 19:34:50.131436 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:34:50.131469 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:34:50.131489 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:34:50.131508 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:34:50.131527 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:34:50.131551 systemd[1]: Starting modprobe@drm.service... Oct 2 19:34:50.131570 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:34:50.131594 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:34:50.131615 systemd[1]: Starting modprobe@loop.service... Oct 2 19:34:50.131634 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:34:50.131653 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:34:50.131676 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:34:50.131695 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:34:50.131713 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:34:50.131735 systemd[1]: Stopped systemd-journald.service. Oct 2 19:34:50.131752 systemd[1]: Starting systemd-journald.service... Oct 2 19:34:50.131773 kernel: loop: module loaded Oct 2 19:34:50.131790 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:34:50.131808 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:34:50.131827 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:34:50.131847 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:34:50.131866 kernel: fuse: init (API version 7.34) Oct 2 19:34:50.131882 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:34:50.131900 systemd[1]: Stopped verity-setup.service. Oct 2 19:34:50.131921 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:34:50.131947 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:34:50.131966 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:34:50.131984 systemd[1]: Mounted media.mount. Oct 2 19:34:50.132004 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:34:50.132022 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:34:50.132042 systemd[1]: Mounted tmp.mount. Oct 2 19:34:50.132077 systemd-journald[1130]: Journal started Oct 2 19:34:50.132149 systemd-journald[1130]: Runtime Journal (/run/log/journal/78af5bac3e4644038cfa9481fff65060) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:34:40.160000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:34:40.793000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:34:40.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:34:40.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:34:40.809000 audit: BPF prog-id=10 op=LOAD Oct 2 19:34:40.809000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:34:40.809000 audit: BPF prog-id=11 op=LOAD Oct 2 19:34:40.809000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:34:49.577000 audit: BPF prog-id=12 op=LOAD Oct 2 19:34:49.577000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:34:49.583000 audit: BPF prog-id=13 op=LOAD Oct 2 19:34:49.589000 audit: BPF prog-id=14 op=LOAD Oct 2 19:34:49.589000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:34:49.589000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:34:49.597000 audit: BPF prog-id=15 op=LOAD Oct 2 19:34:49.597000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:34:49.603000 audit: BPF prog-id=16 op=LOAD Oct 2 19:34:49.603000 audit: BPF prog-id=17 op=LOAD Oct 2 19:34:49.603000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:34:49.603000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:34:49.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.651000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:34:49.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:49.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.016000 audit: BPF prog-id=18 op=LOAD Oct 2 19:34:50.016000 audit: BPF prog-id=19 op=LOAD Oct 2 19:34:50.016000 audit: BPF prog-id=20 op=LOAD Oct 2 19:34:50.016000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:34:50.016000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:34:50.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.126000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:34:50.126000 audit[1130]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe991afc00 a2=4000 a3=7ffe991afc9c items=0 ppid=1 pid=1130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:50.126000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:34:49.576153 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:34:42.116984 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:34:49.613845 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:34:42.117414 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:34:42.117436 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:34:42.117499 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:34:42.117512 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:34:42.117568 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:34:42.117583 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:34:42.117826 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:34:42.117871 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:34:42.117885 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:34:42.118331 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:34:42.118374 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:34:42.118396 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:34:42.118413 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:34:42.118432 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:34:42.118447 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:34:48.459714 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:48.459977 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:48.460087 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:48.460262 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:34:48.460307 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:34:48.460362 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:34:48Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:34:50.142192 systemd[1]: Started systemd-journald.service. Oct 2 19:34:50.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.141968 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:34:50.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.144912 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:34:50.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.147340 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:34:50.147511 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:34:50.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.150134 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:34:50.150269 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:34:50.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.152872 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:34:50.153016 systemd[1]: Finished modprobe@drm.service. Oct 2 19:34:50.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.155764 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:34:50.155910 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:34:50.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.158905 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:34:50.159067 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:34:50.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.161992 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:34:50.162253 systemd[1]: Finished modprobe@loop.service. Oct 2 19:34:50.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.165665 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:34:50.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.169771 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:34:50.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.173955 systemd[1]: Reached target network-pre.target. Oct 2 19:34:50.179026 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:34:50.184295 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:34:50.191803 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:34:50.210492 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:34:50.215856 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:34:50.218825 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:34:50.221220 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:34:50.223600 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:34:50.225173 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:34:50.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.229949 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:34:50.234915 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:34:50.237723 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:34:50.243483 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:34:50.257555 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:34:50.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.262859 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:34:50.270570 systemd-journald[1130]: Time spent on flushing to /var/log/journal/78af5bac3e4644038cfa9481fff65060 is 38.137ms for 1177 entries. Oct 2 19:34:50.270570 systemd-journald[1130]: System Journal (/var/log/journal/78af5bac3e4644038cfa9481fff65060) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:34:50.389140 systemd-journald[1130]: Received client request to flush runtime journal. Oct 2 19:34:50.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.276472 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:34:50.389542 udevadm[1148]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:34:50.279303 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:34:50.368516 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:34:50.390598 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:34:50.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.736452 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:34:51.512919 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:34:51.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:51.516000 audit: BPF prog-id=21 op=LOAD Oct 2 19:34:51.516000 audit: BPF prog-id=22 op=LOAD Oct 2 19:34:51.516000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:34:51.516000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:34:51.517805 systemd[1]: Starting systemd-udevd.service... Oct 2 19:34:51.542669 systemd-udevd[1151]: Using default interface naming scheme 'v252'. Oct 2 19:34:51.784697 systemd[1]: Started systemd-udevd.service. Oct 2 19:34:51.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:51.788000 audit: BPF prog-id=23 op=LOAD Oct 2 19:34:51.790337 systemd[1]: Starting systemd-networkd.service... Oct 2 19:34:51.833277 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:34:51.874000 audit: BPF prog-id=24 op=LOAD Oct 2 19:34:51.874000 audit: BPF prog-id=25 op=LOAD Oct 2 19:34:51.874000 audit: BPF prog-id=26 op=LOAD Oct 2 19:34:51.875770 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:34:51.902040 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:34:51.902166 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:34:51.906230 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:34:51.915478 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:34:51.924000 audit[1158]: AVC avc: denied { confidentiality } for pid=1158 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:34:51.937489 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:34:51.939184 systemd[1]: Started systemd-userdbd.service. Oct 2 19:34:51.945193 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:34:51.945274 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:34:51.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:51.959836 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:34:51.959941 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:34:51.965555 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:34:52.777404 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:34:52.777562 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:34:52.820490 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:34:51.924000 audit[1158]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561e75fd6c80 a1=f884 a2=7fa2e471cbc5 a3=5 items=10 ppid=1151 pid=1158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:51.924000 audit: CWD cwd="/" Oct 2 19:34:51.924000 audit: PATH item=0 name=(null) inode=15584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=1 name=(null) inode=15585 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=2 name=(null) inode=15584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=3 name=(null) inode=15586 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=4 name=(null) inode=15584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=5 name=(null) inode=15587 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=6 name=(null) inode=15584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=7 name=(null) inode=15588 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=8 name=(null) inode=15584 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PATH item=9 name=(null) inode=15589 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:34:51.924000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:34:53.045339 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1161) Oct 2 19:34:53.083071 systemd-networkd[1157]: lo: Link UP Oct 2 19:34:53.083086 systemd-networkd[1157]: lo: Gained carrier Oct 2 19:34:53.083688 systemd-networkd[1157]: Enumeration completed Oct 2 19:34:53.083796 systemd[1]: Started systemd-networkd.service. Oct 2 19:34:53.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:53.092005 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:34:53.093085 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:34:53.107584 systemd-networkd[1157]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:34:53.132438 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:34:53.136320 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:34:53.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:53.140916 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:34:53.172909 kernel: mlx5_core 2c63:00:02.0 enP11363s1: Link up Oct 2 19:34:53.211907 kernel: hv_netvsc 000d3a69-5100-000d-3a69-5100000d3a69 eth0: Data path switched to VF: enP11363s1 Oct 2 19:34:53.213154 systemd-networkd[1157]: enP11363s1: Link UP Oct 2 19:34:53.213296 systemd-networkd[1157]: eth0: Link UP Oct 2 19:34:53.213302 systemd-networkd[1157]: eth0: Gained carrier Oct 2 19:34:53.218242 systemd-networkd[1157]: enP11363s1: Gained carrier Oct 2 19:34:53.250044 systemd-networkd[1157]: eth0: DHCPv4 address 10.200.8.20/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:34:53.457033 lvm[1229]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:34:53.484249 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:34:53.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:53.487783 systemd[1]: Reached target cryptsetup.target. Oct 2 19:34:53.491855 systemd[1]: Starting lvm2-activation.service... Oct 2 19:34:53.498507 lvm[1230]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:34:53.522170 systemd[1]: Finished lvm2-activation.service. Oct 2 19:34:53.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:53.525097 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:34:53.528114 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:34:53.528159 systemd[1]: Reached target local-fs.target. Oct 2 19:34:53.530651 systemd[1]: Reached target machines.target. Oct 2 19:34:53.534570 systemd[1]: Starting ldconfig.service... Oct 2 19:34:53.563650 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:34:53.563747 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:34:53.565301 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:34:53.569588 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:34:53.574590 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:34:53.577031 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:34:53.577136 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:34:53.578652 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:34:54.341160 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1232 (bootctl) Oct 2 19:34:54.343109 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:34:54.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.352419 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:34:54.648012 systemd-networkd[1157]: eth0: Gained IPv6LL Oct 2 19:34:54.652825 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:34:54.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:54.735136 systemd-tmpfiles[1235]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:34:55.637071 systemd-tmpfiles[1235]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:34:55.740283 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:34:55.740990 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:34:55.744610 kernel: kauditd_printk_skb: 73 callbacks suppressed Oct 2 19:34:55.744666 kernel: audit: type=1130 audit(1696275295.740:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:55.764744 systemd-tmpfiles[1235]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:34:56.172920 systemd-fsck[1240]: fsck.fat 4.2 (2021-01-31) Oct 2 19:34:56.172920 systemd-fsck[1240]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:34:56.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:56.181364 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:34:56.196734 systemd[1]: Mounting boot.mount... Oct 2 19:34:56.209364 kernel: audit: type=1130 audit(1696275296.184:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:56.216261 systemd[1]: Mounted boot.mount. Oct 2 19:34:56.233591 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:34:56.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:56.247921 kernel: audit: type=1130 audit(1696275296.235:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.448166 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:34:57.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.453019 systemd[1]: Starting audit-rules.service... Oct 2 19:34:57.464912 kernel: audit: type=1130 audit(1696275297.450:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.469832 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:34:57.479000 audit: BPF prog-id=27 op=LOAD Oct 2 19:34:57.475178 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:34:57.481521 systemd[1]: Starting systemd-resolved.service... Oct 2 19:34:57.488133 kernel: audit: type=1334 audit(1696275297.479:161): prog-id=27 op=LOAD Oct 2 19:34:57.489000 audit: BPF prog-id=28 op=LOAD Oct 2 19:34:57.491344 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:34:57.494902 kernel: audit: type=1334 audit(1696275297.489:162): prog-id=28 op=LOAD Oct 2 19:34:57.497586 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:34:57.520000 audit[1253]: SYSTEM_BOOT pid=1253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.535449 kernel: audit: type=1127 audit(1696275297.520:163): pid=1253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.537359 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:34:57.540468 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:34:57.555728 kernel: audit: type=1130 audit(1696275297.539:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.555676 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:34:57.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.572518 kernel: audit: type=1130 audit(1696275297.554:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.592329 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:34:57.611512 kernel: audit: type=1130 audit(1696275297.594:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.666638 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:34:57.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:57.669550 systemd[1]: Reached target time-set.target. Oct 2 19:34:57.697517 systemd-resolved[1251]: Positive Trust Anchors: Oct 2 19:34:57.697541 systemd-resolved[1251]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:34:57.697596 systemd-resolved[1251]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:34:57.792000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:34:57.792000 audit[1268]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffed38ffdf0 a2=420 a3=0 items=0 ppid=1247 pid=1268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:57.792000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:34:57.793511 augenrules[1268]: No rules Oct 2 19:34:57.794215 systemd[1]: Finished audit-rules.service. Oct 2 19:34:57.845460 systemd-resolved[1251]: Using system hostname 'ci-3510.3.0-a-c0afe9ffb8'. Oct 2 19:34:57.847148 systemd[1]: Started systemd-resolved.service. Oct 2 19:34:57.850366 systemd[1]: Reached target network.target. Oct 2 19:34:57.852836 systemd[1]: Reached target network-online.target. Oct 2 19:34:57.855793 systemd[1]: Reached target nss-lookup.target. Oct 2 19:34:57.893683 systemd-timesyncd[1252]: Contacted time server 193.1.8.106:123 (0.flatcar.pool.ntp.org). Oct 2 19:34:57.893771 systemd-timesyncd[1252]: Initial clock synchronization to Mon 2023-10-02 19:34:57.895229 UTC. Oct 2 19:35:01.886494 ldconfig[1231]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:35:01.897432 systemd[1]: Finished ldconfig.service. Oct 2 19:35:01.902013 systemd[1]: Starting systemd-update-done.service... Oct 2 19:35:01.921657 systemd[1]: Finished systemd-update-done.service. Oct 2 19:35:01.924437 systemd[1]: Reached target sysinit.target. Oct 2 19:35:01.926831 systemd[1]: Started motdgen.path. Oct 2 19:35:01.928757 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:35:01.931868 systemd[1]: Started logrotate.timer. Oct 2 19:35:01.933841 systemd[1]: Started mdadm.timer. Oct 2 19:35:01.935719 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:35:01.937928 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:35:01.937964 systemd[1]: Reached target paths.target. Oct 2 19:35:01.939867 systemd[1]: Reached target timers.target. Oct 2 19:35:01.942221 systemd[1]: Listening on dbus.socket. Oct 2 19:35:01.945208 systemd[1]: Starting docker.socket... Oct 2 19:35:01.977678 systemd[1]: Listening on sshd.socket. Oct 2 19:35:01.980240 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:35:01.980730 systemd[1]: Listening on docker.socket. Oct 2 19:35:01.983037 systemd[1]: Reached target sockets.target. Oct 2 19:35:01.985424 systemd[1]: Reached target basic.target. Oct 2 19:35:01.987842 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:35:01.987899 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:35:01.989018 systemd[1]: Starting containerd.service... Oct 2 19:35:01.993045 systemd[1]: Starting dbus.service... Oct 2 19:35:01.996378 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:35:01.999717 systemd[1]: Starting extend-filesystems.service... Oct 2 19:35:02.002060 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:35:02.003457 systemd[1]: Starting motdgen.service... Oct 2 19:35:02.009083 systemd[1]: Started nvidia.service. Oct 2 19:35:02.012445 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:35:02.015930 systemd[1]: Starting prepare-critools.service... Oct 2 19:35:02.019176 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:35:02.022707 systemd[1]: Starting sshd-keygen.service... Oct 2 19:35:02.030106 systemd[1]: Starting systemd-logind.service... Oct 2 19:35:02.032428 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:35:02.032523 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:35:02.033137 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:35:02.034004 systemd[1]: Starting update-engine.service... Oct 2 19:35:02.037503 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:35:02.048460 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:35:02.048668 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:35:02.067374 jq[1278]: false Oct 2 19:35:02.068247 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:35:02.068458 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:35:02.070942 jq[1292]: true Oct 2 19:35:02.088713 jq[1304]: true Oct 2 19:35:02.089782 extend-filesystems[1279]: Found sda Oct 2 19:35:02.092263 extend-filesystems[1279]: Found sda1 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda2 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda3 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found usr Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda4 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda6 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda7 Oct 2 19:35:02.095184 extend-filesystems[1279]: Found sda9 Oct 2 19:35:02.095184 extend-filesystems[1279]: Checking size of /dev/sda9 Oct 2 19:35:02.130818 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:35:02.131068 systemd[1]: Finished motdgen.service. Oct 2 19:35:02.145532 tar[1294]: ./ Oct 2 19:35:02.145532 tar[1294]: ./loopback Oct 2 19:35:02.145914 tar[1296]: crictl Oct 2 19:35:02.155978 systemd-logind[1289]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:35:02.162540 systemd-logind[1289]: New seat seat0. Oct 2 19:35:02.182114 extend-filesystems[1279]: Old size kept for /dev/sda9 Oct 2 19:35:02.188334 extend-filesystems[1279]: Found sr0 Oct 2 19:35:02.193331 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:35:02.193553 systemd[1]: Finished extend-filesystems.service. Oct 2 19:35:02.255028 env[1316]: time="2023-10-02T19:35:02.254959443Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:35:02.282129 tar[1294]: ./bandwidth Oct 2 19:35:02.333295 dbus-daemon[1277]: [system] SELinux support is enabled Oct 2 19:35:02.333515 systemd[1]: Started dbus.service. Oct 2 19:35:02.339460 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:35:02.350157 dbus-daemon[1277]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:35:02.339492 systemd[1]: Reached target system-config.target. Oct 2 19:35:02.342816 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:35:02.342844 systemd[1]: Reached target user-config.target. Oct 2 19:35:02.347271 systemd[1]: Started systemd-logind.service. Oct 2 19:35:02.364746 env[1316]: time="2023-10-02T19:35:02.364692492Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:35:02.373169 bash[1328]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:35:02.374112 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:35:02.381188 env[1316]: time="2023-10-02T19:35:02.381133703Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.384063 env[1316]: time="2023-10-02T19:35:02.384020333Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:02.384196 env[1316]: time="2023-10-02T19:35:02.384175445Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.384542 env[1316]: time="2023-10-02T19:35:02.384515672Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:02.392090 env[1316]: time="2023-10-02T19:35:02.392062474Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.392215 env[1316]: time="2023-10-02T19:35:02.392197585Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:35:02.392279 env[1316]: time="2023-10-02T19:35:02.392266590Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.392428 env[1316]: time="2023-10-02T19:35:02.392412702Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.394243 env[1316]: time="2023-10-02T19:35:02.394216746Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:35:02.395720 env[1316]: time="2023-10-02T19:35:02.395656960Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:35:02.395818 env[1316]: time="2023-10-02T19:35:02.395800172Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:35:02.397689 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:35:02.398658 env[1316]: time="2023-10-02T19:35:02.398604996Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:35:02.398769 env[1316]: time="2023-10-02T19:35:02.398751307Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:35:02.415284 env[1316]: time="2023-10-02T19:35:02.415249223Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:35:02.415360 env[1316]: time="2023-10-02T19:35:02.415292726Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:35:02.415360 env[1316]: time="2023-10-02T19:35:02.415310627Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:35:02.415360 env[1316]: time="2023-10-02T19:35:02.415350331Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415370132Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415390634Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415409335Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415428437Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415446738Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415483 env[1316]: time="2023-10-02T19:35:02.415467140Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415695 env[1316]: time="2023-10-02T19:35:02.415485141Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.415695 env[1316]: time="2023-10-02T19:35:02.415506343Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:35:02.415695 env[1316]: time="2023-10-02T19:35:02.415628453Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:35:02.415801 env[1316]: time="2023-10-02T19:35:02.415722060Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:35:02.416145 env[1316]: time="2023-10-02T19:35:02.416118392Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:35:02.416211 env[1316]: time="2023-10-02T19:35:02.416164496Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416211 env[1316]: time="2023-10-02T19:35:02.416184297Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:35:02.416300 env[1316]: time="2023-10-02T19:35:02.416237501Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416300 env[1316]: time="2023-10-02T19:35:02.416257003Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416300 env[1316]: time="2023-10-02T19:35:02.416274404Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416300 env[1316]: time="2023-10-02T19:35:02.416292806Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416430 env[1316]: time="2023-10-02T19:35:02.416311207Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416430 env[1316]: time="2023-10-02T19:35:02.416329109Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416430 env[1316]: time="2023-10-02T19:35:02.416344310Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416430 env[1316]: time="2023-10-02T19:35:02.416360311Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416430 env[1316]: time="2023-10-02T19:35:02.416379713Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:35:02.416617 env[1316]: time="2023-10-02T19:35:02.416528325Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416617 env[1316]: time="2023-10-02T19:35:02.416554027Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416617 env[1316]: time="2023-10-02T19:35:02.416571828Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.416617 env[1316]: time="2023-10-02T19:35:02.416587829Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:35:02.416617 env[1316]: time="2023-10-02T19:35:02.416608031Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:35:02.416791 env[1316]: time="2023-10-02T19:35:02.416624332Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:35:02.416791 env[1316]: time="2023-10-02T19:35:02.416649734Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:35:02.416791 env[1316]: time="2023-10-02T19:35:02.416691938Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:35:02.417122 env[1316]: time="2023-10-02T19:35:02.417050266Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.417141273Z" level=info msg="Connect containerd service" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.417190977Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.417951438Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.418246061Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.418301766Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.418364971Z" level=info msg="containerd successfully booted in 0.164494s" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420464338Z" level=info msg="Start subscribing containerd event" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420524143Z" level=info msg="Start recovering state" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420593449Z" level=info msg="Start event monitor" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420614150Z" level=info msg="Start snapshots syncer" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420625951Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:35:02.445825 env[1316]: time="2023-10-02T19:35:02.420637052Z" level=info msg="Start streaming server" Oct 2 19:35:02.418434 systemd[1]: Started containerd.service. Oct 2 19:35:02.474035 tar[1294]: ./ptp Oct 2 19:35:02.595924 tar[1294]: ./vlan Oct 2 19:35:02.698756 tar[1294]: ./host-device Oct 2 19:35:02.787528 tar[1294]: ./tuning Oct 2 19:35:02.870651 tar[1294]: ./vrf Oct 2 19:35:02.887815 update_engine[1291]: I1002 19:35:02.886998 1291 main.cc:92] Flatcar Update Engine starting Oct 2 19:35:02.931538 systemd[1]: Started update-engine.service. Oct 2 19:35:02.934752 update_engine[1291]: I1002 19:35:02.933866 1291 update_check_scheduler.cc:74] Next update check in 2m27s Oct 2 19:35:02.937584 systemd[1]: Started locksmithd.service. Oct 2 19:35:02.959942 tar[1294]: ./sbr Oct 2 19:35:02.973768 systemd[1]: Finished prepare-critools.service. Oct 2 19:35:03.013760 tar[1294]: ./tap Oct 2 19:35:03.058106 tar[1294]: ./dhcp Oct 2 19:35:03.170933 tar[1294]: ./static Oct 2 19:35:03.202771 tar[1294]: ./firewall Oct 2 19:35:03.251649 tar[1294]: ./macvlan Oct 2 19:35:03.295809 tar[1294]: ./dummy Oct 2 19:35:03.339649 tar[1294]: ./bridge Oct 2 19:35:03.387526 tar[1294]: ./ipvlan Oct 2 19:35:03.432041 tar[1294]: ./portmap Oct 2 19:35:03.474353 tar[1294]: ./host-local Oct 2 19:35:03.550977 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:35:04.258134 sshd_keygen[1300]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:35:04.279726 systemd[1]: Finished sshd-keygen.service. Oct 2 19:35:04.284040 systemd[1]: Starting issuegen.service... Oct 2 19:35:04.288091 systemd[1]: Started waagent.service. Oct 2 19:35:04.295308 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:35:04.295474 systemd[1]: Finished issuegen.service. Oct 2 19:35:04.299868 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:35:04.319188 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:35:04.324272 systemd[1]: Started getty@tty1.service. Oct 2 19:35:04.328819 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:35:04.331647 systemd[1]: Reached target getty.target. Oct 2 19:35:04.333781 systemd[1]: Reached target multi-user.target. Oct 2 19:35:04.337993 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:35:04.349622 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:35:04.349839 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:35:04.353259 systemd[1]: Startup finished in 857ms (firmware) + 22.816s (loader) + 1.042s (kernel) + 26.930s (initrd) + 23.893s (userspace) = 1min 15.540s. Oct 2 19:35:04.418217 locksmithd[1377]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:35:04.674163 login[1398]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:35:04.677628 login[1399]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:35:04.751025 systemd[1]: Created slice user-500.slice. Oct 2 19:35:04.752950 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:35:04.755701 systemd-logind[1289]: New session 1 of user core. Oct 2 19:35:04.760543 systemd-logind[1289]: New session 2 of user core. Oct 2 19:35:04.773988 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:35:04.777221 systemd[1]: Starting user@500.service... Oct 2 19:35:04.780087 (systemd)[1402]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:05.011690 systemd[1402]: Queued start job for default target default.target. Oct 2 19:35:05.012488 systemd[1402]: Reached target paths.target. Oct 2 19:35:05.012521 systemd[1402]: Reached target sockets.target. Oct 2 19:35:05.012539 systemd[1402]: Reached target timers.target. Oct 2 19:35:05.012556 systemd[1402]: Reached target basic.target. Oct 2 19:35:05.012621 systemd[1402]: Reached target default.target. Oct 2 19:35:05.012669 systemd[1402]: Startup finished in 225ms. Oct 2 19:35:05.012700 systemd[1]: Started user@500.service. Oct 2 19:35:05.014183 systemd[1]: Started session-1.scope. Oct 2 19:35:05.015007 systemd[1]: Started session-2.scope. Oct 2 19:35:10.612543 waagent[1393]: 2023-10-02T19:35:10.612418Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:35:10.614591 waagent[1393]: 2023-10-02T19:35:10.614502Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:35:10.614852 waagent[1393]: 2023-10-02T19:35:10.614788Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:35:10.615364 waagent[1393]: 2023-10-02T19:35:10.615287Z INFO Daemon Daemon Run daemon Oct 2 19:35:10.625507 waagent[1393]: 2023-10-02T19:35:10.625394Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:35:10.640548 waagent[1393]: 2023-10-02T19:35:10.640407Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:35:10.649836 waagent[1393]: 2023-10-02T19:35:10.649704Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:35:10.654948 waagent[1393]: 2023-10-02T19:35:10.654860Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:35:10.657807 waagent[1393]: 2023-10-02T19:35:10.657710Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:35:10.661493 waagent[1393]: 2023-10-02T19:35:10.661421Z INFO Daemon Daemon Activate resource disk Oct 2 19:35:10.664588 waagent[1393]: 2023-10-02T19:35:10.664482Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:35:10.676570 waagent[1393]: 2023-10-02T19:35:10.676449Z INFO Daemon Daemon Found device: None Oct 2 19:35:10.679848 waagent[1393]: 2023-10-02T19:35:10.679717Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:35:10.685129 waagent[1393]: 2023-10-02T19:35:10.685014Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:35:10.693012 waagent[1393]: 2023-10-02T19:35:10.692914Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:35:10.696802 waagent[1393]: 2023-10-02T19:35:10.696685Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:35:10.710049 waagent[1393]: 2023-10-02T19:35:10.709871Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:35:10.719790 waagent[1393]: 2023-10-02T19:35:10.719630Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:35:10.726064 waagent[1393]: 2023-10-02T19:35:10.725944Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:35:10.729794 waagent[1393]: 2023-10-02T19:35:10.729664Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:35:10.753736 waagent[1393]: 2023-10-02T19:35:10.749068Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:35:10.859656 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:35:10.877383 waagent[1393]: 2023-10-02T19:35:10.877156Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:35:10.880571 waagent[1393]: 2023-10-02T19:35:10.878032Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:35:10.892255 waagent[1393]: 2023-10-02T19:35:10.881214Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:35:10.892255 waagent[1393]: 2023-10-02T19:35:10.886074Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:35:10.892443 waagent[1393]: 2023-10-02T19:35:10.892332Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:35:10.898994 waagent[1393]: 2023-10-02T19:35:10.893230Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:35:10.996456 waagent[1393]: 2023-10-02T19:35:10.996378Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:35:11.005608 waagent[1393]: 2023-10-02T19:35:10.997397Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:35:11.005608 waagent[1393]: 2023-10-02T19:35:10.998100Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:35:11.364791 waagent[1393]: 2023-10-02T19:35:11.364638Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:35:11.376889 waagent[1393]: 2023-10-02T19:35:11.376806Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:35:11.380281 waagent[1393]: 2023-10-02T19:35:11.380209Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:35:11.489999 waagent[1393]: 2023-10-02T19:35:11.489845Z INFO Daemon Daemon Found private key matching thumbprint 9D4810A6533E76406047BE5EB4076A6E51A0030B Oct 2 19:35:11.502227 waagent[1393]: 2023-10-02T19:35:11.490401Z INFO Daemon Daemon Certificate with thumbprint 9C6303FD490D1A95F6A9452D379388EEBA1C6337 has no matching private key. Oct 2 19:35:11.502227 waagent[1393]: 2023-10-02T19:35:11.491627Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:35:11.554851 waagent[1393]: 2023-10-02T19:35:11.554740Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: b0dde549-81ea-485b-a874-7fab92f1d5de New eTag: 17703294894801778772] Oct 2 19:35:11.565582 waagent[1393]: 2023-10-02T19:35:11.555946Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:35:11.573332 waagent[1393]: 2023-10-02T19:35:11.573246Z INFO Daemon Daemon Starting provisioning Oct 2 19:35:11.582367 waagent[1393]: 2023-10-02T19:35:11.573649Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:35:11.582367 waagent[1393]: 2023-10-02T19:35:11.575058Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-c0afe9ffb8] Oct 2 19:35:11.592661 waagent[1393]: 2023-10-02T19:35:11.592517Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-c0afe9ffb8] Oct 2 19:35:11.613406 waagent[1393]: 2023-10-02T19:35:11.595361Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:35:11.613406 waagent[1393]: 2023-10-02T19:35:11.601475Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:35:11.626866 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:35:11.627154 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:35:11.627237 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:35:11.627587 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:35:11.632944 systemd-networkd[1157]: eth0: DHCPv6 lease lost Oct 2 19:35:11.634803 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:35:11.635029 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:35:11.637833 systemd[1]: Starting systemd-networkd.service... Oct 2 19:35:11.675362 systemd-networkd[1447]: enP11363s1: Link UP Oct 2 19:35:11.675373 systemd-networkd[1447]: enP11363s1: Gained carrier Oct 2 19:35:11.676771 systemd-networkd[1447]: eth0: Link UP Oct 2 19:35:11.676780 systemd-networkd[1447]: eth0: Gained carrier Oct 2 19:35:11.677280 systemd-networkd[1447]: lo: Link UP Oct 2 19:35:11.677290 systemd-networkd[1447]: lo: Gained carrier Oct 2 19:35:11.677617 systemd-networkd[1447]: eth0: Gained IPv6LL Oct 2 19:35:11.677925 systemd-networkd[1447]: Enumeration completed Oct 2 19:35:11.683551 waagent[1393]: 2023-10-02T19:35:11.679372Z INFO Daemon Daemon Create user account if not exists Oct 2 19:35:11.678055 systemd[1]: Started systemd-networkd.service. Oct 2 19:35:11.685150 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:35:11.689360 waagent[1393]: 2023-10-02T19:35:11.689201Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:35:11.693446 waagent[1393]: 2023-10-02T19:35:11.693333Z INFO Daemon Daemon Configure sudoer Oct 2 19:35:11.693846 systemd-networkd[1447]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:35:11.697482 waagent[1393]: 2023-10-02T19:35:11.697416Z INFO Daemon Daemon Configure sshd Oct 2 19:35:11.700141 waagent[1393]: 2023-10-02T19:35:11.700061Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:35:11.731017 systemd-networkd[1447]: eth0: DHCPv4 address 10.200.8.20/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:35:11.733903 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:35:11.741204 waagent[1393]: 2023-10-02T19:35:11.741087Z INFO Daemon Daemon Decode custom data Oct 2 19:35:11.745831 waagent[1393]: 2023-10-02T19:35:11.741702Z INFO Daemon Daemon Save custom data Oct 2 19:35:12.969494 waagent[1393]: 2023-10-02T19:35:12.969389Z INFO Daemon Daemon Provisioning complete Oct 2 19:35:12.985812 waagent[1393]: 2023-10-02T19:35:12.985712Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:35:12.989585 waagent[1393]: 2023-10-02T19:35:12.989485Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:35:12.995542 waagent[1393]: 2023-10-02T19:35:12.995441Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:35:13.277318 waagent[1456]: 2023-10-02T19:35:13.277124Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:35:13.278112 waagent[1456]: 2023-10-02T19:35:13.278040Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:13.278273 waagent[1456]: 2023-10-02T19:35:13.278213Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:13.289841 waagent[1456]: 2023-10-02T19:35:13.289733Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:35:13.290064 waagent[1456]: 2023-10-02T19:35:13.289998Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:35:13.364775 waagent[1456]: 2023-10-02T19:35:13.364624Z INFO ExtHandler ExtHandler Found private key matching thumbprint 9D4810A6533E76406047BE5EB4076A6E51A0030B Oct 2 19:35:13.365059 waagent[1456]: 2023-10-02T19:35:13.364990Z INFO ExtHandler ExtHandler Certificate with thumbprint 9C6303FD490D1A95F6A9452D379388EEBA1C6337 has no matching private key. Oct 2 19:35:13.365319 waagent[1456]: 2023-10-02T19:35:13.365269Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:35:13.380597 waagent[1456]: 2023-10-02T19:35:13.380512Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 1ad52fcd-e2dc-43ee-941f-64fa82375d0f New eTag: 17703294894801778772] Oct 2 19:35:13.381295 waagent[1456]: 2023-10-02T19:35:13.381224Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:35:13.497396 waagent[1456]: 2023-10-02T19:35:13.497235Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:35:13.506951 waagent[1456]: 2023-10-02T19:35:13.506833Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1456 Oct 2 19:35:13.510946 waagent[1456]: 2023-10-02T19:35:13.510835Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:35:13.512308 waagent[1456]: 2023-10-02T19:35:13.512228Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:35:13.585481 waagent[1456]: 2023-10-02T19:35:13.585323Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:35:13.586107 waagent[1456]: 2023-10-02T19:35:13.586013Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:35:13.601409 waagent[1456]: 2023-10-02T19:35:13.601331Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:35:13.602137 waagent[1456]: 2023-10-02T19:35:13.602060Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:35:13.603479 waagent[1456]: 2023-10-02T19:35:13.603402Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:35:13.605637 waagent[1456]: 2023-10-02T19:35:13.605559Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:35:13.606450 waagent[1456]: 2023-10-02T19:35:13.606378Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:13.606648 waagent[1456]: 2023-10-02T19:35:13.606595Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:13.608277 waagent[1456]: 2023-10-02T19:35:13.608194Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:35:13.608648 waagent[1456]: 2023-10-02T19:35:13.608583Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:35:13.608648 waagent[1456]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:35:13.608648 waagent[1456]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:35:13.608648 waagent[1456]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:35:13.608648 waagent[1456]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:13.608648 waagent[1456]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:13.608648 waagent[1456]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:13.613358 waagent[1456]: 2023-10-02T19:35:13.613087Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:35:13.613633 waagent[1456]: 2023-10-02T19:35:13.613557Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:13.614144 waagent[1456]: 2023-10-02T19:35:13.614074Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:13.615328 waagent[1456]: 2023-10-02T19:35:13.615258Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:35:13.615486 waagent[1456]: 2023-10-02T19:35:13.615431Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:35:13.615625 waagent[1456]: 2023-10-02T19:35:13.615578Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:35:13.616227 waagent[1456]: 2023-10-02T19:35:13.616157Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:35:13.616723 waagent[1456]: 2023-10-02T19:35:13.616662Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:35:13.617638 waagent[1456]: 2023-10-02T19:35:13.617575Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:35:13.617725 waagent[1456]: 2023-10-02T19:35:13.617670Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:35:13.619020 waagent[1456]: 2023-10-02T19:35:13.618967Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:35:13.635112 waagent[1456]: 2023-10-02T19:35:13.634995Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:35:13.636158 waagent[1456]: 2023-10-02T19:35:13.636082Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:35:13.637431 waagent[1456]: 2023-10-02T19:35:13.637349Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:35:13.648359 waagent[1456]: 2023-10-02T19:35:13.648294Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1447' Oct 2 19:35:13.687424 waagent[1456]: 2023-10-02T19:35:13.687282Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:35:13.712143 waagent[1456]: 2023-10-02T19:35:13.712014Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:35:13.712143 waagent[1456]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:35:13.712143 waagent[1456]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:35:13.712143 waagent[1456]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:69:51:00 brd ff:ff:ff:ff:ff:ff Oct 2 19:35:13.712143 waagent[1456]: 3: enP11363s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:69:51:00 brd ff:ff:ff:ff:ff:ff\ altname enP11363p0s2 Oct 2 19:35:13.712143 waagent[1456]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:35:13.712143 waagent[1456]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:35:13.712143 waagent[1456]: 2: eth0 inet 10.200.8.20/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:35:13.712143 waagent[1456]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:35:13.712143 waagent[1456]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:35:13.712143 waagent[1456]: 2: eth0 inet6 fe80::20d:3aff:fe69:5100/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:35:13.962326 waagent[1456]: 2023-10-02T19:35:13.962180Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:35:13.966084 waagent[1456]: 2023-10-02T19:35:13.965951Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:35:13.966084 waagent[1456]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:13.966084 waagent[1456]: pkts bytes target prot opt in out source destination Oct 2 19:35:13.966084 waagent[1456]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:13.966084 waagent[1456]: pkts bytes target prot opt in out source destination Oct 2 19:35:13.966084 waagent[1456]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:13.966084 waagent[1456]: pkts bytes target prot opt in out source destination Oct 2 19:35:13.966084 waagent[1456]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:35:13.966084 waagent[1456]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:35:13.967863 waagent[1456]: 2023-10-02T19:35:13.967796Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:35:14.096500 waagent[1456]: 2023-10-02T19:35:14.096413Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:35:15.000405 waagent[1393]: 2023-10-02T19:35:15.000215Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:35:15.006825 waagent[1393]: 2023-10-02T19:35:15.006745Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:35:16.112089 waagent[1496]: 2023-10-02T19:35:16.111970Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:35:16.112894 waagent[1496]: 2023-10-02T19:35:16.112804Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:35:16.113061 waagent[1496]: 2023-10-02T19:35:16.112998Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:35:16.123539 waagent[1496]: 2023-10-02T19:35:16.123404Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:35:16.124035 waagent[1496]: 2023-10-02T19:35:16.123966Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:16.124208 waagent[1496]: 2023-10-02T19:35:16.124159Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:16.147983 waagent[1496]: 2023-10-02T19:35:16.147829Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:35:16.161724 waagent[1496]: 2023-10-02T19:35:16.161640Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:35:16.162827 waagent[1496]: 2023-10-02T19:35:16.162754Z INFO ExtHandler Oct 2 19:35:16.163026 waagent[1496]: 2023-10-02T19:35:16.162966Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 5f10296d-7dc1-49a8-b635-b967243b13c6 eTag: 17703294894801778772 source: Fabric] Oct 2 19:35:16.163756 waagent[1496]: 2023-10-02T19:35:16.163696Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:35:16.164862 waagent[1496]: 2023-10-02T19:35:16.164799Z INFO ExtHandler Oct 2 19:35:16.165022 waagent[1496]: 2023-10-02T19:35:16.164967Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:35:16.172525 waagent[1496]: 2023-10-02T19:35:16.172456Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:35:16.173072 waagent[1496]: 2023-10-02T19:35:16.173019Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:35:16.191286 waagent[1496]: 2023-10-02T19:35:16.191215Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:35:16.257954 waagent[1496]: 2023-10-02T19:35:16.257806Z INFO ExtHandler Downloaded certificate {'thumbprint': '9D4810A6533E76406047BE5EB4076A6E51A0030B', 'hasPrivateKey': True} Oct 2 19:35:16.258961 waagent[1496]: 2023-10-02T19:35:16.258891Z INFO ExtHandler Downloaded certificate {'thumbprint': '9C6303FD490D1A95F6A9452D379388EEBA1C6337', 'hasPrivateKey': False} Oct 2 19:35:16.259969 waagent[1496]: 2023-10-02T19:35:16.259907Z INFO ExtHandler Fetch goal state completed Oct 2 19:35:16.279009 waagent[1496]: 2023-10-02T19:35:16.278935Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1496 Oct 2 19:35:16.282347 waagent[1496]: 2023-10-02T19:35:16.282283Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:35:16.283829 waagent[1496]: 2023-10-02T19:35:16.283771Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:35:16.288780 waagent[1496]: 2023-10-02T19:35:16.288725Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:35:16.289153 waagent[1496]: 2023-10-02T19:35:16.289097Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:35:16.297178 waagent[1496]: 2023-10-02T19:35:16.297122Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:35:16.297645 waagent[1496]: 2023-10-02T19:35:16.297587Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:35:16.318434 waagent[1496]: 2023-10-02T19:35:16.318312Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:35:16.321408 waagent[1496]: 2023-10-02T19:35:16.321303Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:35:16.326775 waagent[1496]: 2023-10-02T19:35:16.326713Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:35:16.328184 waagent[1496]: 2023-10-02T19:35:16.328125Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:35:16.328528 waagent[1496]: 2023-10-02T19:35:16.328474Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:16.328928 waagent[1496]: 2023-10-02T19:35:16.328859Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:16.329459 waagent[1496]: 2023-10-02T19:35:16.329401Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:35:16.329732 waagent[1496]: 2023-10-02T19:35:16.329675Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:35:16.329732 waagent[1496]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:35:16.329732 waagent[1496]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:35:16.329732 waagent[1496]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:35:16.329732 waagent[1496]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:16.329732 waagent[1496]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:16.329732 waagent[1496]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:35:16.332024 waagent[1496]: 2023-10-02T19:35:16.331913Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:35:16.332977 waagent[1496]: 2023-10-02T19:35:16.332914Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:35:16.333185 waagent[1496]: 2023-10-02T19:35:16.333118Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:35:16.333469 waagent[1496]: 2023-10-02T19:35:16.333418Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:35:16.336146 waagent[1496]: 2023-10-02T19:35:16.336066Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:35:16.336628 waagent[1496]: 2023-10-02T19:35:16.336572Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:35:16.336769 waagent[1496]: 2023-10-02T19:35:16.336722Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:35:16.336941 waagent[1496]: 2023-10-02T19:35:16.336854Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:35:16.339957 waagent[1496]: 2023-10-02T19:35:16.339896Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:35:16.340311 waagent[1496]: 2023-10-02T19:35:16.340245Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:35:16.347408 waagent[1496]: 2023-10-02T19:35:16.347323Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:35:16.347408 waagent[1496]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:35:16.347408 waagent[1496]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:35:16.347408 waagent[1496]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:69:51:00 brd ff:ff:ff:ff:ff:ff Oct 2 19:35:16.347408 waagent[1496]: 3: enP11363s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:69:51:00 brd ff:ff:ff:ff:ff:ff\ altname enP11363p0s2 Oct 2 19:35:16.347408 waagent[1496]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:35:16.347408 waagent[1496]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:35:16.347408 waagent[1496]: 2: eth0 inet 10.200.8.20/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:35:16.347408 waagent[1496]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:35:16.347408 waagent[1496]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:35:16.347408 waagent[1496]: 2: eth0 inet6 fe80::20d:3aff:fe69:5100/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:35:16.348268 waagent[1496]: 2023-10-02T19:35:16.348200Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:35:16.362466 waagent[1496]: 2023-10-02T19:35:16.362362Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:35:16.411391 waagent[1496]: 2023-10-02T19:35:16.411315Z INFO ExtHandler ExtHandler Oct 2 19:35:16.417051 waagent[1496]: 2023-10-02T19:35:16.416980Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: b8070e00-2dbc-4c15-a273-e80cd6bbd8cf correlation 7cc52957-d1aa-4d44-b942-f3c8c908814e created: 2023-10-02T19:33:39.184052Z] Oct 2 19:35:16.421331 waagent[1496]: 2023-10-02T19:35:16.420922Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:35:16.429183 waagent[1496]: 2023-10-02T19:35:16.429080Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 17 ms] Oct 2 19:35:16.453366 waagent[1496]: 2023-10-02T19:35:16.453295Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:35:16.453366 waagent[1496]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:16.453366 waagent[1496]: pkts bytes target prot opt in out source destination Oct 2 19:35:16.453366 waagent[1496]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:16.453366 waagent[1496]: pkts bytes target prot opt in out source destination Oct 2 19:35:16.453366 waagent[1496]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:35:16.453366 waagent[1496]: pkts bytes target prot opt in out source destination Oct 2 19:35:16.453366 waagent[1496]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:35:16.453366 waagent[1496]: 146 19414 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:35:16.453366 waagent[1496]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:35:16.457322 waagent[1496]: 2023-10-02T19:35:16.457265Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:35:16.467111 waagent[1496]: 2023-10-02T19:35:16.467033Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 014E2F98-4D6D-4EF5-983A-7DDAF741CF35;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:35:40.914387 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:35:46.138945 systemd[1]: Created slice system-sshd.slice. Oct 2 19:35:46.141308 systemd[1]: Started sshd@0-10.200.8.20:22-10.200.12.6:48470.service. Oct 2 19:35:46.933902 sshd[1535]: Accepted publickey for core from 10.200.12.6 port 48470 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:46.935665 sshd[1535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:46.945749 systemd[1]: Started session-3.scope. Oct 2 19:35:46.946465 systemd-logind[1289]: New session 3 of user core. Oct 2 19:35:47.479496 systemd[1]: Started sshd@1-10.200.8.20:22-10.200.12.6:48472.service. Oct 2 19:35:48.104979 sshd[1540]: Accepted publickey for core from 10.200.12.6 port 48472 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:48.106623 sshd[1540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:48.111415 systemd-logind[1289]: New session 4 of user core. Oct 2 19:35:48.114417 systemd[1]: Started session-4.scope. Oct 2 19:35:48.488112 update_engine[1291]: I1002 19:35:48.488027 1291 update_attempter.cc:505] Updating boot flags... Oct 2 19:35:48.549864 sshd[1540]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:48.554858 systemd[1]: sshd@1-10.200.8.20:22-10.200.12.6:48472.service: Deactivated successfully. Oct 2 19:35:48.555845 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:35:48.557026 systemd-logind[1289]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:35:48.558162 systemd-logind[1289]: Removed session 4. Oct 2 19:35:48.656947 systemd[1]: Started sshd@2-10.200.8.20:22-10.200.12.6:35542.service. Oct 2 19:35:49.292391 sshd[1590]: Accepted publickey for core from 10.200.12.6 port 35542 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:49.294102 sshd[1590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:49.299034 systemd[1]: Started session-5.scope. Oct 2 19:35:49.299471 systemd-logind[1289]: New session 5 of user core. Oct 2 19:35:49.731305 sshd[1590]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:49.734813 systemd[1]: sshd@2-10.200.8.20:22-10.200.12.6:35542.service: Deactivated successfully. Oct 2 19:35:49.735821 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:35:49.736495 systemd-logind[1289]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:35:49.737242 systemd-logind[1289]: Removed session 5. Oct 2 19:35:49.836314 systemd[1]: Started sshd@3-10.200.8.20:22-10.200.12.6:35544.service. Oct 2 19:35:50.481402 sshd[1618]: Accepted publickey for core from 10.200.12.6 port 35544 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:50.483087 sshd[1618]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:50.488986 systemd[1]: Started session-6.scope. Oct 2 19:35:50.489861 systemd-logind[1289]: New session 6 of user core. Oct 2 19:35:50.929664 sshd[1618]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:50.932788 systemd[1]: sshd@3-10.200.8.20:22-10.200.12.6:35544.service: Deactivated successfully. Oct 2 19:35:50.933739 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:35:50.934380 systemd-logind[1289]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:35:50.935141 systemd-logind[1289]: Removed session 6. Oct 2 19:35:51.035954 systemd[1]: Started sshd@4-10.200.8.20:22-10.200.12.6:35550.service. Oct 2 19:35:51.668492 sshd[1624]: Accepted publickey for core from 10.200.12.6 port 35550 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:51.670456 sshd[1624]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:51.675823 systemd[1]: Started session-7.scope. Oct 2 19:35:51.676476 systemd-logind[1289]: New session 7 of user core. Oct 2 19:35:52.210991 sudo[1627]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:35:52.211433 sudo[1627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:52.232204 dbus-daemon[1277]: \xd0\xdd\xc0\xe2\u0014V: received setenforce notice (enforcing=588167120) Oct 2 19:35:52.234658 sudo[1627]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:52.349501 sshd[1624]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:52.352756 systemd[1]: sshd@4-10.200.8.20:22-10.200.12.6:35550.service: Deactivated successfully. Oct 2 19:35:52.353870 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:35:52.354554 systemd-logind[1289]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:35:52.355382 systemd-logind[1289]: Removed session 7. Oct 2 19:35:52.454419 systemd[1]: Started sshd@5-10.200.8.20:22-10.200.12.6:35552.service. Oct 2 19:35:53.101432 sshd[1631]: Accepted publickey for core from 10.200.12.6 port 35552 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:53.103195 sshd[1631]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:53.108551 systemd[1]: Started session-8.scope. Oct 2 19:35:53.109202 systemd-logind[1289]: New session 8 of user core. Oct 2 19:35:53.628149 sudo[1638]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:35:53.628414 sudo[1638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:53.631857 sudo[1638]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:53.636848 sudo[1637]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:35:53.637139 sudo[1637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:53.647134 systemd[1]: Stopping audit-rules.service... Oct 2 19:35:53.647000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:35:53.653662 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 19:35:53.654469 kernel: audit: type=1305 audit(1696275353.647:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:35:53.654529 auditctl[1641]: No rules Oct 2 19:35:53.667144 kernel: audit: type=1300 audit(1696275353.647:169): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdb1a22900 a2=420 a3=0 items=0 ppid=1 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:53.647000 audit[1641]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdb1a22900 a2=420 a3=0 items=0 ppid=1 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:53.655154 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:35:53.655318 systemd[1]: Stopped audit-rules.service. Oct 2 19:35:53.656975 systemd[1]: Starting audit-rules.service... Oct 2 19:35:53.647000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:35:53.708796 kernel: audit: type=1327 audit(1696275353.647:169): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:35:53.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.713113 augenrules[1658]: No rules Oct 2 19:35:53.714028 systemd[1]: Finished audit-rules.service. Oct 2 19:35:53.721293 sudo[1637]: pam_unix(sudo:session): session closed for user root Oct 2 19:35:53.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.727901 kernel: audit: type=1131 audit(1696275353.654:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.727950 kernel: audit: type=1130 audit(1696275353.713:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.720000 audit[1637]: USER_END pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.756470 kernel: audit: type=1106 audit(1696275353.720:172): pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.756903 kernel: audit: type=1104 audit(1696275353.721:173): pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.721000 audit[1637]: CRED_DISP pid=1637 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.824167 sshd[1631]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:53.824000 audit[1631]: USER_END pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.830378 systemd[1]: sshd@5-10.200.8.20:22-10.200.12.6:35552.service: Deactivated successfully. Oct 2 19:35:53.831052 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:35:53.832687 systemd-logind[1289]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:35:53.833690 systemd-logind[1289]: Removed session 8. Oct 2 19:35:53.825000 audit[1631]: CRED_DISP pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.858159 kernel: audit: type=1106 audit(1696275353.824:174): pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.858257 kernel: audit: type=1104 audit(1696275353.825:175): pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:53.858286 kernel: audit: type=1131 audit(1696275353.829:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.20:22-10.200.12.6:35552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.20:22-10.200.12.6:35552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.956513 systemd[1]: Started sshd@6-10.200.8.20:22-10.200.12.6:35558.service. Oct 2 19:35:53.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.20:22-10.200.12.6:35558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:54.588000 audit[1664]: USER_ACCT pid=1664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.590199 sshd[1664]: Accepted publickey for core from 10.200.12.6 port 35558 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:35:54.590000 audit[1664]: CRED_ACQ pid=1664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.590000 audit[1664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe04cbc270 a2=3 a3=0 items=0 ppid=1 pid=1664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:54.590000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:54.591744 sshd[1664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:54.596722 systemd[1]: Started session-9.scope. Oct 2 19:35:54.597421 systemd-logind[1289]: New session 9 of user core. Oct 2 19:35:54.601000 audit[1664]: USER_START pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:54.602000 audit[1666]: CRED_ACQ pid=1666 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:35:55.042000 audit[1667]: USER_ACCT pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:55.042000 audit[1667]: CRED_REFR pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:55.043734 sudo[1667]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:35:55.044015 sudo[1667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:35:55.044000 audit[1667]: USER_START pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:35:56.064937 systemd[1]: Starting docker.service... Oct 2 19:35:56.105952 env[1682]: time="2023-10-02T19:35:56.105892422Z" level=info msg="Starting up" Oct 2 19:35:56.107349 env[1682]: time="2023-10-02T19:35:56.107308326Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:35:56.107349 env[1682]: time="2023-10-02T19:35:56.107334726Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:35:56.107508 env[1682]: time="2023-10-02T19:35:56.107357426Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:35:56.107508 env[1682]: time="2023-10-02T19:35:56.107370026Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:35:56.109096 env[1682]: time="2023-10-02T19:35:56.109066830Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:35:56.109096 env[1682]: time="2023-10-02T19:35:56.109088930Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:35:56.109260 env[1682]: time="2023-10-02T19:35:56.109110830Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:35:56.109260 env[1682]: time="2023-10-02T19:35:56.109122530Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:35:56.280129 env[1682]: time="2023-10-02T19:35:56.280077948Z" level=info msg="Loading containers: start." Oct 2 19:35:56.316000 audit[1709]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.316000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe2009d8f0 a2=0 a3=7ffe2009d8dc items=0 ppid=1682 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.316000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:35:56.319000 audit[1711]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.319000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffeff8edae0 a2=0 a3=7ffeff8edacc items=0 ppid=1682 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.319000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:35:56.325000 audit[1713]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.325000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc05e769c0 a2=0 a3=7ffc05e769ac items=0 ppid=1682 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.325000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:35:56.327000 audit[1715]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.327000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcec96bba0 a2=0 a3=7ffcec96bb8c items=0 ppid=1682 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.327000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:35:56.329000 audit[1717]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.329000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff15df7ab0 a2=0 a3=7fff15df7a9c items=0 ppid=1682 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:35:56.332000 audit[1719]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.332000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe106bb220 a2=0 a3=7ffe106bb20c items=0 ppid=1682 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:35:56.354000 audit[1721]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.354000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffed83088a0 a2=0 a3=7ffed830888c items=0 ppid=1682 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.354000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:35:56.356000 audit[1723]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.356000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe3b20cff0 a2=0 a3=7ffe3b20cfdc items=0 ppid=1682 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.356000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:35:56.358000 audit[1725]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.358000 audit[1725]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc746c1150 a2=0 a3=7ffc746c113c items=0 ppid=1682 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:56.386000 audit[1729]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.386000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff504f1630 a2=0 a3=7fff504f161c items=0 ppid=1682 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.386000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:56.387000 audit[1730]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.387000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdccf65ae0 a2=0 a3=7ffdccf65acc items=0 ppid=1682 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.387000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:56.422915 kernel: Initializing XFRM netlink socket Oct 2 19:35:56.466562 env[1682]: time="2023-10-02T19:35:56.466517103Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:35:56.524000 audit[1738]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.524000 audit[1738]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe714a2a60 a2=0 a3=7ffe714a2a4c items=0 ppid=1682 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.524000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:35:56.547000 audit[1741]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1741 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.547000 audit[1741]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff695ba1a0 a2=0 a3=7fff695ba18c items=0 ppid=1682 pid=1741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.547000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:35:56.550000 audit[1744]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.550000 audit[1744]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcbeb421d0 a2=0 a3=7ffcbeb421bc items=0 ppid=1682 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.550000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:35:56.552000 audit[1746]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.552000 audit[1746]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd5e909250 a2=0 a3=7ffd5e90923c items=0 ppid=1682 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.552000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:35:56.555000 audit[1748]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.555000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffeb62b3b60 a2=0 a3=7ffeb62b3b4c items=0 ppid=1682 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.555000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:35:56.557000 audit[1750]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.557000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffbb968fb0 a2=0 a3=7fffbb968f9c items=0 ppid=1682 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.557000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:35:56.559000 audit[1752]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.559000 audit[1752]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff0ea5df90 a2=0 a3=7fff0ea5df7c items=0 ppid=1682 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.559000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:35:56.561000 audit[1754]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1754 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.561000 audit[1754]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd14341970 a2=0 a3=7ffd1434195c items=0 ppid=1682 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.561000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:35:56.563000 audit[1756]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.563000 audit[1756]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe99b1c950 a2=0 a3=7ffe99b1c93c items=0 ppid=1682 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.563000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:35:56.565000 audit[1758]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.565000 audit[1758]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcd6e5aac0 a2=0 a3=7ffcd6e5aaac items=0 ppid=1682 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:35:56.567000 audit[1760]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.567000 audit[1760]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffccd2ed10 a2=0 a3=7fffccd2ecfc items=0 ppid=1682 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.567000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:35:56.570147 systemd-networkd[1447]: docker0: Link UP Oct 2 19:35:56.589000 audit[1764]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.589000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff4bd27ed0 a2=0 a3=7fff4bd27ebc items=0 ppid=1682 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.589000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:56.590000 audit[1765]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:35:56.590000 audit[1765]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd8626d900 a2=0 a3=7ffd8626d8ec items=0 ppid=1682 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:56.590000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:35:56.592038 env[1682]: time="2023-10-02T19:35:56.591983810Z" level=info msg="Loading containers: done." Oct 2 19:35:56.606143 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1218199820-merged.mount: Deactivated successfully. Oct 2 19:35:56.661636 env[1682]: time="2023-10-02T19:35:56.661573980Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:35:56.661915 env[1682]: time="2023-10-02T19:35:56.661838481Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:35:56.662054 env[1682]: time="2023-10-02T19:35:56.662032081Z" level=info msg="Daemon has completed initialization" Oct 2 19:35:56.701088 systemd[1]: Started docker.service. Oct 2 19:35:56.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:56.711806 env[1682]: time="2023-10-02T19:35:56.711665103Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:35:56.732761 systemd[1]: Reloading. Oct 2 19:35:56.832575 /usr/lib/systemd/system-generators/torcx-generator[1811]: time="2023-10-02T19:35:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:35:56.832616 /usr/lib/systemd/system-generators/torcx-generator[1811]: time="2023-10-02T19:35:56Z" level=info msg="torcx already run" Oct 2 19:35:56.928414 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:35:56.928437 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:35:56.945474 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.016000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit: BPF prog-id=35 op=LOAD Oct 2 19:35:57.017000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit: BPF prog-id=36 op=LOAD Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.017000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.018000 audit: BPF prog-id=37 op=LOAD Oct 2 19:35:57.018000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:35:57.018000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.021000 audit: BPF prog-id=38 op=LOAD Oct 2 19:35:57.021000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit: BPF prog-id=39 op=LOAD Oct 2 19:35:57.024000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit: BPF prog-id=40 op=LOAD Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.024000 audit: BPF prog-id=41 op=LOAD Oct 2 19:35:57.024000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:35:57.024000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.025000 audit: BPF prog-id=42 op=LOAD Oct 2 19:35:57.025000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit: BPF prog-id=43 op=LOAD Oct 2 19:35:57.026000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit: BPF prog-id=44 op=LOAD Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.026000 audit: BPF prog-id=45 op=LOAD Oct 2 19:35:57.026000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:35:57.026000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.028000 audit: BPF prog-id=46 op=LOAD Oct 2 19:35:57.028000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit: BPF prog-id=47 op=LOAD Oct 2 19:35:57.029000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit: BPF prog-id=48 op=LOAD Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:35:57.029000 audit: BPF prog-id=49 op=LOAD Oct 2 19:35:57.029000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:35:57.029000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:35:57.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:57.043010 systemd[1]: Started kubelet.service. Oct 2 19:35:57.132737 kubelet[1873]: E1002 19:35:57.129546 1873 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:35:57.134924 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:35:57.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:35:57.135091 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:36:00.433331 env[1316]: time="2023-10-02T19:36:00.433252181Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:36:01.530510 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3168657176.mount: Deactivated successfully. Oct 2 19:36:04.054120 env[1316]: time="2023-10-02T19:36:04.054054191Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:04.063148 env[1316]: time="2023-10-02T19:36:04.063093664Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:04.071644 env[1316]: time="2023-10-02T19:36:04.071586528Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:04.083914 env[1316]: time="2023-10-02T19:36:04.083833463Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:04.084707 env[1316]: time="2023-10-02T19:36:04.084664379Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:36:04.095339 env[1316]: time="2023-10-02T19:36:04.095297684Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:36:06.694859 env[1316]: time="2023-10-02T19:36:06.694795838Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:06.701050 env[1316]: time="2023-10-02T19:36:06.700984850Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:06.707119 env[1316]: time="2023-10-02T19:36:06.707064261Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:06.712268 env[1316]: time="2023-10-02T19:36:06.712215655Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:06.712894 env[1316]: time="2023-10-02T19:36:06.712837566Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:36:06.724529 env[1316]: time="2023-10-02T19:36:06.724485878Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:36:07.202356 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:36:07.210959 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:36:07.211070 kernel: audit: type=1130 audit(1696275367.201:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.202770 systemd[1]: Stopped kubelet.service. Oct 2 19:36:07.206124 systemd[1]: Started kubelet.service. Oct 2 19:36:07.223728 kernel: audit: type=1131 audit(1696275367.201:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.247818 kernel: audit: type=1130 audit(1696275367.205:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:07.272017 kubelet[1901]: E1002 19:36:07.271961 1901 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:36:07.275466 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:36:07.275629 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:36:07.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:07.289910 kernel: audit: type=1131 audit(1696275367.275:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:08.382631 env[1316]: time="2023-10-02T19:36:08.382566475Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.391418 env[1316]: time="2023-10-02T19:36:08.391356026Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.398756 env[1316]: time="2023-10-02T19:36:08.398695553Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.405715 env[1316]: time="2023-10-02T19:36:08.405655172Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:08.406526 env[1316]: time="2023-10-02T19:36:08.406482287Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:36:08.417471 env[1316]: time="2023-10-02T19:36:08.417422475Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:36:09.543002 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2472255699.mount: Deactivated successfully. Oct 2 19:36:10.113479 env[1316]: time="2023-10-02T19:36:10.113417998Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.121251 env[1316]: time="2023-10-02T19:36:10.121198825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.126741 env[1316]: time="2023-10-02T19:36:10.126686714Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.131642 env[1316]: time="2023-10-02T19:36:10.131581194Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.132182 env[1316]: time="2023-10-02T19:36:10.132142303Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:36:10.143596 env[1316]: time="2023-10-02T19:36:10.143550789Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:36:10.609157 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount290345996.mount: Deactivated successfully. Oct 2 19:36:10.640137 env[1316]: time="2023-10-02T19:36:10.640082679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.649223 env[1316]: time="2023-10-02T19:36:10.649163627Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.656284 env[1316]: time="2023-10-02T19:36:10.656227142Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.661982 env[1316]: time="2023-10-02T19:36:10.661930435Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:10.662406 env[1316]: time="2023-10-02T19:36:10.662369342Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:36:10.677307 env[1316]: time="2023-10-02T19:36:10.677267385Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:36:11.389354 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2957483723.mount: Deactivated successfully. Oct 2 19:36:15.968561 env[1316]: time="2023-10-02T19:36:15.968496655Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.979724 env[1316]: time="2023-10-02T19:36:15.979667614Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.984535 env[1316]: time="2023-10-02T19:36:15.984470682Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.992401 env[1316]: time="2023-10-02T19:36:15.992349194Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:15.993093 env[1316]: time="2023-10-02T19:36:15.993050804Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:36:16.004093 env[1316]: time="2023-10-02T19:36:16.004050559Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:36:16.557079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount18982561.mount: Deactivated successfully. Oct 2 19:36:17.228106 env[1316]: time="2023-10-02T19:36:17.228040441Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:17.240941 env[1316]: time="2023-10-02T19:36:17.240886814Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:17.246628 env[1316]: time="2023-10-02T19:36:17.246579391Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:17.254146 env[1316]: time="2023-10-02T19:36:17.254091193Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:17.254650 env[1316]: time="2023-10-02T19:36:17.254613100Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:36:17.289110 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:36:17.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.289403 systemd[1]: Stopped kubelet.service. Oct 2 19:36:17.304907 kernel: audit: type=1130 audit(1696275377.288:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.308539 systemd[1]: Started kubelet.service. Oct 2 19:36:17.320903 kernel: audit: type=1131 audit(1696275377.288:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.336913 kernel: audit: type=1130 audit(1696275377.304:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:17.364386 kubelet[1933]: E1002 19:36:17.364335 1933 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:36:17.366582 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:36:17.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:17.366699 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:36:17.382067 kernel: audit: type=1131 audit(1696275377.366:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:36:19.955146 systemd[1]: Stopped kubelet.service. Oct 2 19:36:19.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:19.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:19.978582 systemd[1]: Reloading. Oct 2 19:36:19.986960 kernel: audit: type=1130 audit(1696275379.954:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:19.987076 kernel: audit: type=1131 audit(1696275379.959:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:20.063438 /usr/lib/systemd/system-generators/torcx-generator[2016]: time="2023-10-02T19:36:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:36:20.063478 /usr/lib/systemd/system-generators/torcx-generator[2016]: time="2023-10-02T19:36:20Z" level=info msg="torcx already run" Oct 2 19:36:20.154393 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:36:20.154415 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:36:20.170581 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.252127 kernel: audit: type=1400 audit(1696275380.237:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.282405 kernel: audit: type=1400 audit(1696275380.237:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.282485 kernel: audit: type=1400 audit(1696275380.237:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.282508 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.237000 audit: BPF prog-id=50 op=LOAD Oct 2 19:36:20.237000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:36:20.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.250000 audit: BPF prog-id=51 op=LOAD Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.251000 audit: BPF prog-id=52 op=LOAD Oct 2 19:36:20.251000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:36:20.251000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.254000 audit: BPF prog-id=53 op=LOAD Oct 2 19:36:20.254000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit: BPF prog-id=54 op=LOAD Oct 2 19:36:20.268000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.281000 audit: BPF prog-id=55 op=LOAD Oct 2 19:36:20.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.286000 audit: BPF prog-id=56 op=LOAD Oct 2 19:36:20.286000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:36:20.286000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.287000 audit: BPF prog-id=57 op=LOAD Oct 2 19:36:20.287000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:36:20.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit: BPF prog-id=58 op=LOAD Oct 2 19:36:20.288000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit: BPF prog-id=59 op=LOAD Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.288000 audit: BPF prog-id=60 op=LOAD Oct 2 19:36:20.288000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:36:20.288000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.289000 audit: BPF prog-id=61 op=LOAD Oct 2 19:36:20.289000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit: BPF prog-id=62 op=LOAD Oct 2 19:36:20.291000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit: BPF prog-id=63 op=LOAD Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.291000 audit: BPF prog-id=64 op=LOAD Oct 2 19:36:20.291000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:36:20.291000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:36:20.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:20.310081 systemd[1]: Started kubelet.service. Oct 2 19:36:20.360432 kubelet[2079]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:20.360766 kubelet[2079]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:20.360807 kubelet[2079]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:20.360953 kubelet[2079]: I1002 19:36:20.360923 2079 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:36:20.698224 kubelet[2079]: I1002 19:36:20.698110 2079 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:36:20.698224 kubelet[2079]: I1002 19:36:20.698140 2079 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:36:20.698836 kubelet[2079]: I1002 19:36:20.698815 2079 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:36:20.704758 kubelet[2079]: E1002 19:36:20.704726 2079 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.20:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.704917 kubelet[2079]: I1002 19:36:20.704793 2079 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:20.707382 kubelet[2079]: I1002 19:36:20.707358 2079 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:36:20.707631 kubelet[2079]: I1002 19:36:20.707611 2079 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:36:20.707711 kubelet[2079]: I1002 19:36:20.707698 2079 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:36:20.707841 kubelet[2079]: I1002 19:36:20.707726 2079 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:36:20.707841 kubelet[2079]: I1002 19:36:20.707742 2079 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:36:20.707953 kubelet[2079]: I1002 19:36:20.707869 2079 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:20.712037 kubelet[2079]: I1002 19:36:20.711997 2079 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:36:20.712185 kubelet[2079]: I1002 19:36:20.712174 2079 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:36:20.712282 kubelet[2079]: I1002 19:36:20.712273 2079 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:36:20.712355 kubelet[2079]: I1002 19:36:20.712347 2079 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:36:20.712568 kubelet[2079]: W1002 19:36:20.712522 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-c0afe9ffb8&limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.712645 kubelet[2079]: E1002 19:36:20.712600 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-c0afe9ffb8&limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.714455 kubelet[2079]: W1002 19:36:20.714402 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.20:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.714543 kubelet[2079]: E1002 19:36:20.714469 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.20:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.714598 kubelet[2079]: I1002 19:36:20.714557 2079 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:36:20.714892 kubelet[2079]: W1002 19:36:20.714858 2079 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:36:20.715395 kubelet[2079]: I1002 19:36:20.715373 2079 server.go:1168] "Started kubelet" Oct 2 19:36:20.717000 audit[2079]: AVC avc: denied { mac_admin } for pid=2079 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.717000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:20.717000 audit[2079]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000df1170 a1=c000b28d50 a2=c000df1140 a3=25 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.717000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:20.718000 audit[2079]: AVC avc: denied { mac_admin } for pid=2079 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.718000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:20.718000 audit[2079]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000afd9c0 a1=c000b28d68 a2=c000df1200 a3=25 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.718000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:20.719433 kubelet[2079]: I1002 19:36:20.718872 2079 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:36:20.719433 kubelet[2079]: I1002 19:36:20.718937 2079 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:36:20.719433 kubelet[2079]: I1002 19:36:20.719009 2079 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:36:20.721303 kubelet[2079]: I1002 19:36:20.721285 2079 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:36:20.722375 kubelet[2079]: I1002 19:36:20.722347 2079 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:36:20.723189 kubelet[2079]: E1002 19:36:20.722591 2079 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-c0afe9ffb8.178a6178b4c75812", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-c0afe9ffb8", UID:"ci-3510.3.0-a-c0afe9ffb8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-c0afe9ffb8"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 715345938, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 715345938, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.20:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.20:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:36:20.723993 kubelet[2079]: I1002 19:36:20.723976 2079 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:36:20.724408 kubelet[2079]: E1002 19:36:20.724392 2079 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:36:20.724537 kubelet[2079]: E1002 19:36:20.724520 2079 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:36:20.726288 kubelet[2079]: I1002 19:36:20.726268 2079 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:36:20.726632 kubelet[2079]: I1002 19:36:20.726608 2079 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:36:20.727213 kubelet[2079]: W1002 19:36:20.727174 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.727332 kubelet[2079]: E1002 19:36:20.727320 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.727507 kubelet[2079]: E1002 19:36:20.727492 2079 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-c0afe9ffb8?timeout=10s\": dial tcp 10.200.8.20:6443: connect: connection refused" interval="200ms" Oct 2 19:36:20.730000 audit[2089]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.730000 audit[2089]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff627c1210 a2=0 a3=7fff627c11fc items=0 ppid=2079 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.730000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:36:20.732000 audit[2090]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.732000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff020a72d0 a2=0 a3=7fff020a72bc items=0 ppid=2079 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.732000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:36:20.735000 audit[2092]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.735000 audit[2092]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd86d729d0 a2=0 a3=7ffd86d729bc items=0 ppid=2079 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:20.739000 audit[2094]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.739000 audit[2094]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd49ddf450 a2=0 a3=7ffd49ddf43c items=0 ppid=2079 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:20.760000 audit[2100]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.760000 audit[2100]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff16c75d60 a2=0 a3=7fff16c75d4c items=0 ppid=2079 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:36:20.761531 kubelet[2079]: I1002 19:36:20.761497 2079 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:36:20.761000 audit[2101]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:20.761000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffa8016670 a2=0 a3=7fffa801665c items=0 ppid=2079 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.761000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:36:20.763364 kubelet[2079]: I1002 19:36:20.763350 2079 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:36:20.763482 kubelet[2079]: I1002 19:36:20.763471 2079 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:36:20.763581 kubelet[2079]: I1002 19:36:20.763570 2079 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:36:20.763731 kubelet[2079]: E1002 19:36:20.763717 2079 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:36:20.764341 kubelet[2079]: W1002 19:36:20.764320 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.764486 kubelet[2079]: E1002 19:36:20.764473 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:20.763000 audit[2103]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.763000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb1ee30d0 a2=0 a3=7fffb1ee30bc items=0 ppid=2079 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:36:20.765000 audit[2105]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:20.765000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd106536c0 a2=0 a3=7ffd106536ac items=0 ppid=2079 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.765000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:36:20.765000 audit[2106]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.765000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbc3799a0 a2=0 a3=7ffdbc37998c items=0 ppid=2079 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:36:20.766000 audit[2107]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:20.766000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcecbb3df0 a2=0 a3=7ffcecbb3ddc items=0 ppid=2079 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.767000 audit[2108]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:20.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:36:20.767000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8b9d9170 a2=0 a3=7fff8b9d915c items=0 ppid=2079 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:36:20.768000 audit[2109]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:20.768000 audit[2109]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc30e13830 a2=0 a3=7ffc30e1381c items=0 ppid=2079 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:36:20.775053 kubelet[2079]: I1002 19:36:20.775034 2079 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:36:20.775152 kubelet[2079]: I1002 19:36:20.775082 2079 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:36:20.775152 kubelet[2079]: I1002 19:36:20.775099 2079 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:20.780486 kubelet[2079]: I1002 19:36:20.780461 2079 policy_none.go:49] "None policy: Start" Oct 2 19:36:20.781111 kubelet[2079]: I1002 19:36:20.781083 2079 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:36:20.781111 kubelet[2079]: I1002 19:36:20.781109 2079 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:36:20.790263 systemd[1]: Created slice kubepods.slice. Oct 2 19:36:20.794306 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:36:20.797613 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:36:20.804544 kubelet[2079]: I1002 19:36:20.804511 2079 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:36:20.803000 audit[2079]: AVC avc: denied { mac_admin } for pid=2079 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:20.803000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:20.803000 audit[2079]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fc7d70 a1=c000fd9c20 a2=c000fc7d40 a3=25 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:20.803000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:20.804976 kubelet[2079]: I1002 19:36:20.804588 2079 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:36:20.804976 kubelet[2079]: I1002 19:36:20.804777 2079 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:36:20.806221 kubelet[2079]: E1002 19:36:20.806204 2079 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-c0afe9ffb8\" not found" Oct 2 19:36:20.828678 kubelet[2079]: I1002 19:36:20.828645 2079 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:20.829089 kubelet[2079]: E1002 19:36:20.829055 2079 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.20:6443/api/v1/nodes\": dial tcp 10.200.8.20:6443: connect: connection refused" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:20.864493 kubelet[2079]: I1002 19:36:20.864434 2079 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:20.866414 kubelet[2079]: I1002 19:36:20.866384 2079 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:20.867918 kubelet[2079]: I1002 19:36:20.867893 2079 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:20.874100 systemd[1]: Created slice kubepods-burstable-pod66b795c39646b1e60af050357ed1faa5.slice. Oct 2 19:36:20.882106 systemd[1]: Created slice kubepods-burstable-pod001004ebf7e4e213d1ca5c8754b3c1d9.slice. Oct 2 19:36:20.890703 systemd[1]: Created slice kubepods-burstable-podb6a4bd3314a8a601f70c2e2e01131fba.slice. Oct 2 19:36:20.928363 kubelet[2079]: E1002 19:36:20.928198 2079 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-c0afe9ffb8?timeout=10s\": dial tcp 10.200.8.20:6443: connect: connection refused" interval="400ms" Oct 2 19:36:21.028237 kubelet[2079]: I1002 19:36:21.028184 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028519 kubelet[2079]: I1002 19:36:21.028497 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028630 kubelet[2079]: I1002 19:36:21.028537 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028630 kubelet[2079]: I1002 19:36:21.028578 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028630 kubelet[2079]: I1002 19:36:21.028610 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028768 kubelet[2079]: I1002 19:36:21.028647 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028768 kubelet[2079]: I1002 19:36:21.028680 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b6a4bd3314a8a601f70c2e2e01131fba-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"b6a4bd3314a8a601f70c2e2e01131fba\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028768 kubelet[2079]: I1002 19:36:21.028725 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.028768 kubelet[2079]: I1002 19:36:21.028765 2079 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.030575 kubelet[2079]: I1002 19:36:21.030549 2079 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.030944 kubelet[2079]: E1002 19:36:21.030915 2079 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.20:6443/api/v1/nodes\": dial tcp 10.200.8.20:6443: connect: connection refused" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.183584 env[1316]: time="2023-10-02T19:36:21.183522725Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-c0afe9ffb8,Uid:66b795c39646b1e60af050357ed1faa5,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:21.185107 env[1316]: time="2023-10-02T19:36:21.185062943Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8,Uid:001004ebf7e4e213d1ca5c8754b3c1d9,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:21.194940 env[1316]: time="2023-10-02T19:36:21.194900763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-c0afe9ffb8,Uid:b6a4bd3314a8a601f70c2e2e01131fba,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:21.329321 kubelet[2079]: E1002 19:36:21.329211 2079 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-c0afe9ffb8?timeout=10s\": dial tcp 10.200.8.20:6443: connect: connection refused" interval="800ms" Oct 2 19:36:21.435431 kubelet[2079]: I1002 19:36:21.435394 2079 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.435967 kubelet[2079]: E1002 19:36:21.435765 2079 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.20:6443/api/v1/nodes\": dial tcp 10.200.8.20:6443: connect: connection refused" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:21.722051 kubelet[2079]: W1002 19:36:21.722001 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:21.722051 kubelet[2079]: E1002 19:36:21.722052 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.20:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:21.852285 kubelet[2079]: W1002 19:36:21.852239 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-c0afe9ffb8&limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:21.852285 kubelet[2079]: E1002 19:36:21.852291 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.20:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-c0afe9ffb8&limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:21.922707 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount87940976.mount: Deactivated successfully. Oct 2 19:36:21.962243 env[1316]: time="2023-10-02T19:36:21.962190091Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:21.966557 env[1316]: time="2023-10-02T19:36:21.966518544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:21.984407 env[1316]: time="2023-10-02T19:36:21.984017156Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:21.988808 env[1316]: time="2023-10-02T19:36:21.988765714Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:21.994762 env[1316]: time="2023-10-02T19:36:21.994726587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:21.998810 env[1316]: time="2023-10-02T19:36:21.998773936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.003692 env[1316]: time="2023-10-02T19:36:22.003657494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.008955 env[1316]: time="2023-10-02T19:36:22.008921657Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.019973 env[1316]: time="2023-10-02T19:36:22.019940687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.028175 env[1316]: time="2023-10-02T19:36:22.028139184Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.056762 env[1316]: time="2023-10-02T19:36:22.056715623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.082821 env[1316]: time="2023-10-02T19:36:22.082778032Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:22.117722 kubelet[2079]: W1002 19:36:22.117638 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.20:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:22.117722 kubelet[2079]: E1002 19:36:22.117694 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.20:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:22.134584 kubelet[2079]: E1002 19:36:22.134307 2079 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.20:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-c0afe9ffb8?timeout=10s\": dial tcp 10.200.8.20:6443: connect: connection refused" interval="1.6s" Oct 2 19:36:22.144419 env[1316]: time="2023-10-02T19:36:22.144349261Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:22.144657 env[1316]: time="2023-10-02T19:36:22.144620664Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:22.144782 env[1316]: time="2023-10-02T19:36:22.144757066Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:22.145638 env[1316]: time="2023-10-02T19:36:22.145582476Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3 pid=2118 runtime=io.containerd.runc.v2 Oct 2 19:36:22.157795 env[1316]: time="2023-10-02T19:36:22.157715020Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:22.158018 env[1316]: time="2023-10-02T19:36:22.157764120Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:22.158145 env[1316]: time="2023-10-02T19:36:22.158007623Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:22.158575 env[1316]: time="2023-10-02T19:36:22.158532529Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78d32b6b5156e693b6ac3eb8dc6f9bbd218eac0df42cb0a9ba9b64a9fcd57e27 pid=2136 runtime=io.containerd.runc.v2 Oct 2 19:36:22.167020 systemd[1]: Started cri-containerd-629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3.scope. Oct 2 19:36:22.174237 kubelet[2079]: W1002 19:36:22.174126 2079 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:22.174237 kubelet[2079]: E1002 19:36:22.174209 2079 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.20:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.20:6443: connect: connection refused Oct 2 19:36:22.187499 systemd[1]: Started cri-containerd-78d32b6b5156e693b6ac3eb8dc6f9bbd218eac0df42cb0a9ba9b64a9fcd57e27.scope. Oct 2 19:36:22.200153 env[1316]: time="2023-10-02T19:36:22.200077022Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:22.200713 env[1316]: time="2023-10-02T19:36:22.200681829Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:22.200799 env[1316]: time="2023-10-02T19:36:22.200780230Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:22.201251 env[1316]: time="2023-10-02T19:36:22.201199935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138 pid=2175 runtime=io.containerd.runc.v2 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.213000 audit: BPF prog-id=65 op=LOAD Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2118 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396132613064333063343962323832363661643865643861663033 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2118 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396132613064333063343962323832363661643865643861663033 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.214000 audit: BPF prog-id=66 op=LOAD Oct 2 19:36:22.214000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e8340 items=0 ppid=2118 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396132613064333063343962323832363661643865643861663033 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit: BPF prog-id=67 op=LOAD Oct 2 19:36:22.215000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e8388 items=0 ppid=2118 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396132613064333063343962323832363661643865643861663033 Oct 2 19:36:22.215000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:36:22.215000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit: BPF prog-id=68 op=LOAD Oct 2 19:36:22.215000 audit[2137]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e8798 items=0 ppid=2118 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632396132613064333063343962323832363661643865643861663033 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.215000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.216000 audit: BPF prog-id=69 op=LOAD Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2136 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738643332623662353135366536393362366163336562386463366639 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2136 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738643332623662353135366536393362366163336562386463366639 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit: BPF prog-id=70 op=LOAD Oct 2 19:36:22.218000 audit[2154]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000216610 items=0 ppid=2136 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738643332623662353135366536393362366163336562386463366639 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit: BPF prog-id=71 op=LOAD Oct 2 19:36:22.218000 audit[2154]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000216658 items=0 ppid=2136 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738643332623662353135366536393362366163336562386463366639 Oct 2 19:36:22.218000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:36:22.218000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { perfmon } for pid=2154 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit[2154]: AVC avc: denied { bpf } for pid=2154 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.218000 audit: BPF prog-id=72 op=LOAD Oct 2 19:36:22.218000 audit[2154]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000216a68 items=0 ppid=2136 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.218000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738643332623662353135366536393362366163336562386463366639 Oct 2 19:36:22.227006 systemd[1]: Started cri-containerd-3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138.scope. Oct 2 19:36:22.241794 kubelet[2079]: I1002 19:36:22.238727 2079 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:22.241794 kubelet[2079]: E1002 19:36:22.239242 2079 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.20:6443/api/v1/nodes\": dial tcp 10.200.8.20:6443: connect: connection refused" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.269000 audit: BPF prog-id=73 op=LOAD Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2175 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346563393133353563346134333865653037623466376331396139 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2175 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346563393133353563346134333865653037623466376331396139 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.271000 audit: BPF prog-id=74 op=LOAD Oct 2 19:36:22.271000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003dc6e0 items=0 ppid=2175 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346563393133353563346134333865653037623466376331396139 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.272000 audit: BPF prog-id=75 op=LOAD Oct 2 19:36:22.272000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003dc728 items=0 ppid=2175 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.272000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346563393133353563346134333865653037623466376331396139 Oct 2 19:36:22.273000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:36:22.273000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { perfmon } for pid=2192 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit[2192]: AVC avc: denied { bpf } for pid=2192 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.273000 audit: BPF prog-id=76 op=LOAD Oct 2 19:36:22.273000 audit[2192]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003dcb38 items=0 ppid=2175 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346563393133353563346134333865653037623466376331396139 Oct 2 19:36:22.288049 env[1316]: time="2023-10-02T19:36:22.287997463Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-c0afe9ffb8,Uid:66b795c39646b1e60af050357ed1faa5,Namespace:kube-system,Attempt:0,} returns sandbox id \"78d32b6b5156e693b6ac3eb8dc6f9bbd218eac0df42cb0a9ba9b64a9fcd57e27\"" Oct 2 19:36:22.306541 env[1316]: time="2023-10-02T19:36:22.306499782Z" level=info msg="CreateContainer within sandbox \"78d32b6b5156e693b6ac3eb8dc6f9bbd218eac0df42cb0a9ba9b64a9fcd57e27\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:36:22.319803 env[1316]: time="2023-10-02T19:36:22.319754039Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-c0afe9ffb8,Uid:b6a4bd3314a8a601f70c2e2e01131fba,Namespace:kube-system,Attempt:0,} returns sandbox id \"629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3\"" Oct 2 19:36:22.331988 env[1316]: time="2023-10-02T19:36:22.331940984Z" level=info msg="CreateContainer within sandbox \"629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:36:22.337003 env[1316]: time="2023-10-02T19:36:22.336948143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8,Uid:001004ebf7e4e213d1ca5c8754b3c1d9,Namespace:kube-system,Attempt:0,} returns sandbox id \"3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138\"" Oct 2 19:36:22.340192 env[1316]: time="2023-10-02T19:36:22.340142381Z" level=info msg="CreateContainer within sandbox \"3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:36:22.391222 env[1316]: time="2023-10-02T19:36:22.391156085Z" level=info msg="CreateContainer within sandbox \"78d32b6b5156e693b6ac3eb8dc6f9bbd218eac0df42cb0a9ba9b64a9fcd57e27\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"02be1fae9e37185b590c9b87c23881618b9ad3615f1800e2a0c7773b4a611c5a\"" Oct 2 19:36:22.392033 env[1316]: time="2023-10-02T19:36:22.391994595Z" level=info msg="StartContainer for \"02be1fae9e37185b590c9b87c23881618b9ad3615f1800e2a0c7773b4a611c5a\"" Oct 2 19:36:22.412005 systemd[1]: Started cri-containerd-02be1fae9e37185b590c9b87c23881618b9ad3615f1800e2a0c7773b4a611c5a.scope. Oct 2 19:36:22.420722 env[1316]: time="2023-10-02T19:36:22.419390020Z" level=info msg="CreateContainer within sandbox \"629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b\"" Oct 2 19:36:22.422404 env[1316]: time="2023-10-02T19:36:22.422346855Z" level=info msg="StartContainer for \"57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b\"" Oct 2 19:36:22.428616 env[1316]: time="2023-10-02T19:36:22.428550428Z" level=info msg="CreateContainer within sandbox \"3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178\"" Oct 2 19:36:22.429526 env[1316]: time="2023-10-02T19:36:22.429488440Z" level=info msg="StartContainer for \"e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178\"" Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.439427 kernel: kauditd_printk_skb: 390 callbacks suppressed Oct 2 19:36:22.439544 kernel: audit: type=1400 audit(1696275382.433:636): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.483238 kernel: audit: type=1400 audit(1696275382.433:637): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.483410 kernel: audit: type=1400 audit(1696275382.433:638): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.483467 kernel: audit: type=1400 audit(1696275382.433:639): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.513114 kernel: audit: type=1400 audit(1696275382.433:640): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527948 kernel: audit: type=1400 audit(1696275382.433:641): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.533440 systemd[1]: Started cri-containerd-e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178.scope. Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.539200 systemd[1]: Started cri-containerd-57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b.scope. Oct 2 19:36:22.552943 kernel: audit: type=1400 audit(1696275382.433:642): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.571236 kernel: audit: type=1400 audit(1696275382.433:643): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.590297 kernel: audit: type=1400 audit(1696275382.433:644): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.590479 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:36:22.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.433000 audit: BPF prog-id=77 op=LOAD Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2136 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032626531666165396533373138356235393063396238376332333838 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2136 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032626531666165396533373138356235393063396238376332333838 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.452000 audit: BPF prog-id=78 op=LOAD Oct 2 19:36:22.452000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a0a60 items=0 ppid=2136 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032626531666165396533373138356235393063396238376332333838 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.517000 audit: BPF prog-id=79 op=LOAD Oct 2 19:36:22.517000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a0aa8 items=0 ppid=2136 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.517000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032626531666165396533373138356235393063396238376332333838 Oct 2 19:36:22.527000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:36:22.527000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.527000 audit: BPF prog-id=80 op=LOAD Oct 2 19:36:22.527000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a0eb8 items=0 ppid=2136 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032626531666165396533373138356235393063396238376332333838 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.569000 audit: BPF prog-id=81 op=LOAD Oct 2 19:36:22.570000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.570000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2118 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537616430333837646236363737343762316665373264373633613962 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2118 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537616430333837646236363737343762316665373264373633613962 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.584000 audit: BPF prog-id=82 op=LOAD Oct 2 19:36:22.584000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002fece0 items=0 ppid=2118 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537616430333837646236363737343762316665373264373633613962 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit: BPF prog-id=83 op=LOAD Oct 2 19:36:22.589000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002fed28 items=0 ppid=2118 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537616430333837646236363737343762316665373264373633613962 Oct 2 19:36:22.589000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:36:22.589000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.589000 audit: BPF prog-id=84 op=LOAD Oct 2 19:36:22.589000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002ff138 items=0 ppid=2118 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537616430333837646236363737343762316665373264373633613962 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.602000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.602000 audit: BPF prog-id=85 op=LOAD Oct 2 19:36:22.602000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.602000 audit[2273]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2175 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663433613232386164396631663062373031343462373330346366 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2175 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663433613232386164396631663062373031343462373330346366 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit: BPF prog-id=86 op=LOAD Oct 2 19:36:22.603000 audit[2273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003ca9c0 items=0 ppid=2175 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663433613232386164396631663062373031343462373330346366 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit: BPF prog-id=87 op=LOAD Oct 2 19:36:22.603000 audit[2273]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003caa08 items=0 ppid=2175 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663433613232386164396631663062373031343462373330346366 Oct 2 19:36:22.603000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:36:22.603000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { perfmon } for pid=2273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit[2273]: AVC avc: denied { bpf } for pid=2273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:22.603000 audit: BPF prog-id=88 op=LOAD Oct 2 19:36:22.603000 audit[2273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003cae18 items=0 ppid=2175 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:22.603000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663433613232386164396631663062373031343462373330346366 Oct 2 19:36:22.632325 env[1316]: time="2023-10-02T19:36:22.632261442Z" level=info msg="StartContainer for \"02be1fae9e37185b590c9b87c23881618b9ad3615f1800e2a0c7773b4a611c5a\" returns successfully" Oct 2 19:36:22.679442 env[1316]: time="2023-10-02T19:36:22.679378700Z" level=info msg="StartContainer for \"57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b\" returns successfully" Oct 2 19:36:22.691359 env[1316]: time="2023-10-02T19:36:22.691292741Z" level=info msg="StartContainer for \"e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178\" returns successfully" Oct 2 19:36:23.841830 kubelet[2079]: I1002 19:36:23.841798 2079 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:23.880000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.880000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0009d0060 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:23.880000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:23.881000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:23.881000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001136d00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:23.881000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:24.623000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.623000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.623000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00420c000 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.623000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00668b660 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.624000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.624000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00419f9e0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.624000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.632000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.632000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00588f6c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.632000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.632000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c003fdb8f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.632000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.636000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:24.636000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c00419fdd0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:36:24.636000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:36:24.787254 kubelet[2079]: E1002 19:36:24.787212 2079 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-c0afe9ffb8\" not found" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:24.830494 kubelet[2079]: I1002 19:36:24.830453 2079 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:24.925190 kubelet[2079]: E1002 19:36:24.923912 2079 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-c0afe9ffb8.178a6178b4c75812", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-c0afe9ffb8", UID:"ci-3510.3.0-a-c0afe9ffb8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-c0afe9ffb8"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 715345938, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 715345938, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:36:25.070564 kubelet[2079]: E1002 19:36:25.070437 2079 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-c0afe9ffb8.178a6178b55315f4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-c0afe9ffb8", UID:"ci-3510.3.0-a-c0afe9ffb8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-c0afe9ffb8"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 724504052, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 36, 20, 724504052, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:36:25.717912 kubelet[2079]: I1002 19:36:25.717854 2079 apiserver.go:52] "Watching apiserver" Oct 2 19:36:25.727502 kubelet[2079]: I1002 19:36:25.727463 2079 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:36:25.764623 kubelet[2079]: I1002 19:36:25.764586 2079 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:36:27.311999 kubelet[2079]: W1002 19:36:27.311954 2079 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:36:28.578207 systemd[1]: Reloading. Oct 2 19:36:28.684514 /usr/lib/systemd/system-generators/torcx-generator[2366]: time="2023-10-02T19:36:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:36:28.684557 /usr/lib/systemd/system-generators/torcx-generator[2366]: time="2023-10-02T19:36:28Z" level=info msg="torcx already run" Oct 2 19:36:28.797111 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:36:28.797132 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:36:28.816556 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:36:28.924998 kernel: kauditd_printk_skb: 187 callbacks suppressed Oct 2 19:36:28.925162 kernel: audit: type=1400 audit(1696275388.902:697): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.947333 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:36:28.947484 kernel: audit: type=1400 audit(1696275388.902:698): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.947521 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.970710 kernel: audit: type=1400 audit(1696275388.902:699): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.970838 kernel: audit: backlog limit exceeded Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.000802 kernel: audit: type=1400 audit(1696275388.902:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.000945 kernel: audit: type=1400 audit(1696275388.902:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.000975 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019242 kernel: audit: type=1400 audit(1696275388.902:702): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit: BPF prog-id=89 op=LOAD Oct 2 19:36:28.903000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.908000 audit: BPF prog-id=90 op=LOAD Oct 2 19:36:28.909000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit: BPF prog-id=91 op=LOAD Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.924000 audit: BPF prog-id=92 op=LOAD Oct 2 19:36:28.924000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:36:28.924000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.926000 audit: BPF prog-id=93 op=LOAD Oct 2 19:36:28.926000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.927000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:28.951000 audit: BPF prog-id=94 op=LOAD Oct 2 19:36:28.969000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:36:28.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit: BPF prog-id=96 op=LOAD Oct 2 19:36:29.020000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit: BPF prog-id=97 op=LOAD Oct 2 19:36:29.021000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.022000 audit: BPF prog-id=98 op=LOAD Oct 2 19:36:29.022000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit: BPF prog-id=99 op=LOAD Oct 2 19:36:29.025000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit: BPF prog-id=100 op=LOAD Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.025000 audit: BPF prog-id=101 op=LOAD Oct 2 19:36:29.025000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:36:29.025000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit: BPF prog-id=102 op=LOAD Oct 2 19:36:29.027000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit: BPF prog-id=103 op=LOAD Oct 2 19:36:29.028000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit: BPF prog-id=104 op=LOAD Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.028000 audit: BPF prog-id=105 op=LOAD Oct 2 19:36:29.028000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:36:29.028000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.030000 audit: BPF prog-id=106 op=LOAD Oct 2 19:36:29.030000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit: BPF prog-id=107 op=LOAD Oct 2 19:36:29.031000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit: BPF prog-id=108 op=LOAD Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.031000 audit: BPF prog-id=109 op=LOAD Oct 2 19:36:29.031000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:36:29.031000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:36:29.049640 systemd[1]: Stopping kubelet.service... Oct 2 19:36:29.050447 kubelet[2079]: I1002 19:36:29.050149 2079 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:29.069564 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:36:29.069796 systemd[1]: Stopped kubelet.service. Oct 2 19:36:29.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:29.072081 systemd[1]: Started kubelet.service. Oct 2 19:36:29.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:29.159744 kubelet[2429]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:29.163777 kubelet[2429]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:36:29.163896 kubelet[2429]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:36:29.164096 kubelet[2429]: I1002 19:36:29.164048 2429 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:36:29.169540 kubelet[2429]: I1002 19:36:29.169515 2429 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:36:29.169687 kubelet[2429]: I1002 19:36:29.169678 2429 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:36:29.170070 kubelet[2429]: I1002 19:36:29.170053 2429 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:36:29.174409 kubelet[2429]: I1002 19:36:29.174378 2429 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:36:29.176065 kubelet[2429]: I1002 19:36:29.175974 2429 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:36:29.183139 kubelet[2429]: I1002 19:36:29.183108 2429 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:36:29.183382 kubelet[2429]: I1002 19:36:29.183364 2429 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:36:29.183524 kubelet[2429]: I1002 19:36:29.183458 2429 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:36:29.183524 kubelet[2429]: I1002 19:36:29.183484 2429 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:36:29.183524 kubelet[2429]: I1002 19:36:29.183500 2429 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:36:29.183721 kubelet[2429]: I1002 19:36:29.183534 2429 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:29.186790 kubelet[2429]: I1002 19:36:29.186766 2429 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:36:29.186790 kubelet[2429]: I1002 19:36:29.186789 2429 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:36:29.186966 kubelet[2429]: I1002 19:36:29.186810 2429 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:36:29.186966 kubelet[2429]: I1002 19:36:29.186841 2429 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:36:29.192367 kubelet[2429]: I1002 19:36:29.192348 2429 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:36:29.192999 kubelet[2429]: I1002 19:36:29.192981 2429 server.go:1168] "Started kubelet" Oct 2 19:36:29.194000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.194000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:29.194000 audit[2429]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d605a0 a1=c000d346d8 a2=c000d60570 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:29.194000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:29.194000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.194000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:29.194000 audit[2429]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a666e0 a1=c000d346f0 a2=c000d60630 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:29.194000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:29.197166 kubelet[2429]: I1002 19:36:29.195014 2429 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:36:29.197166 kubelet[2429]: I1002 19:36:29.195096 2429 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:36:29.197166 kubelet[2429]: I1002 19:36:29.195120 2429 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:36:29.203270 kubelet[2429]: I1002 19:36:29.201384 2429 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:36:29.203270 kubelet[2429]: I1002 19:36:29.202148 2429 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:36:29.203540 kubelet[2429]: I1002 19:36:29.203521 2429 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:36:29.206170 kubelet[2429]: I1002 19:36:29.206148 2429 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:36:29.208082 kubelet[2429]: I1002 19:36:29.208059 2429 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:36:29.208228 kubelet[2429]: E1002 19:36:29.208211 2429 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:36:29.208285 kubelet[2429]: E1002 19:36:29.208241 2429 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:36:29.212025 kubelet[2429]: I1002 19:36:29.210071 2429 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:36:29.212025 kubelet[2429]: I1002 19:36:29.211190 2429 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:36:29.212025 kubelet[2429]: I1002 19:36:29.211211 2429 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:36:29.212025 kubelet[2429]: I1002 19:36:29.211231 2429 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:36:29.212025 kubelet[2429]: E1002 19:36:29.211283 2429 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:36:29.283925 kubelet[2429]: I1002 19:36:29.283850 2429 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:36:29.283925 kubelet[2429]: I1002 19:36:29.283887 2429 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:36:29.283925 kubelet[2429]: I1002 19:36:29.283906 2429 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:36:29.284269 kubelet[2429]: I1002 19:36:29.284114 2429 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:36:29.284269 kubelet[2429]: I1002 19:36:29.284132 2429 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:36:29.284269 kubelet[2429]: I1002 19:36:29.284141 2429 policy_none.go:49] "None policy: Start" Oct 2 19:36:29.284849 kubelet[2429]: I1002 19:36:29.284820 2429 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:36:29.284849 kubelet[2429]: I1002 19:36:29.284846 2429 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:36:29.285151 kubelet[2429]: I1002 19:36:29.285011 2429 state_mem.go:75] "Updated machine memory state" Oct 2 19:36:29.288774 kubelet[2429]: I1002 19:36:29.288751 2429 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:36:29.287000 audit[2429]: AVC avc: denied { mac_admin } for pid=2429 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:29.287000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:36:29.287000 audit[2429]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000635b30 a1=c000c5d770 a2=c000635b00 a3=25 items=0 ppid=1 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:29.287000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:36:29.289404 kubelet[2429]: I1002 19:36:29.288828 2429 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:36:29.289404 kubelet[2429]: I1002 19:36:29.289105 2429 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:36:29.309095 kubelet[2429]: I1002 19:36:29.309066 2429 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.313956 kubelet[2429]: I1002 19:36:29.311769 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:29.313956 kubelet[2429]: I1002 19:36:29.311867 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:29.313956 kubelet[2429]: I1002 19:36:29.311926 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:29.323425 kubelet[2429]: W1002 19:36:29.323385 2429 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:36:29.324046 kubelet[2429]: W1002 19:36:29.324015 2429 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:36:29.328299 kubelet[2429]: W1002 19:36:29.328281 2429 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:36:29.328470 kubelet[2429]: E1002 19:36:29.328459 2429 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-c0afe9ffb8\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.329600 kubelet[2429]: I1002 19:36:29.329583 2429 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.329756 kubelet[2429]: I1002 19:36:29.329748 2429 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509157 kubelet[2429]: I1002 19:36:29.509114 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509478 kubelet[2429]: I1002 19:36:29.509449 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509574 kubelet[2429]: I1002 19:36:29.509503 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509574 kubelet[2429]: I1002 19:36:29.509537 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b6a4bd3314a8a601f70c2e2e01131fba-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"b6a4bd3314a8a601f70c2e2e01131fba\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509574 kubelet[2429]: I1002 19:36:29.509568 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509733 kubelet[2429]: I1002 19:36:29.509601 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509733 kubelet[2429]: I1002 19:36:29.509635 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/66b795c39646b1e60af050357ed1faa5-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"66b795c39646b1e60af050357ed1faa5\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509733 kubelet[2429]: I1002 19:36:29.509664 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:29.509733 kubelet[2429]: I1002 19:36:29.509695 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/001004ebf7e4e213d1ca5c8754b3c1d9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8\" (UID: \"001004ebf7e4e213d1ca5c8754b3c1d9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:30.157000 audit[2458]: USER_ACCT pid=2458 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:30.158000 audit[2458]: CRED_REFR pid=2458 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:30.158828 sudo[2458]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:36:30.159197 sudo[2458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:36:30.160000 audit[2458]: USER_START pid=2458 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:30.192659 kubelet[2429]: I1002 19:36:30.192341 2429 apiserver.go:52] "Watching apiserver" Oct 2 19:36:30.208318 kubelet[2429]: I1002 19:36:30.208237 2429 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:36:30.213688 kubelet[2429]: I1002 19:36:30.213472 2429 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:36:30.273572 kubelet[2429]: W1002 19:36:30.273533 2429 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:36:30.273773 kubelet[2429]: E1002 19:36:30.273623 2429 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" Oct 2 19:36:30.297894 kubelet[2429]: I1002 19:36:30.297848 2429 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-c0afe9ffb8" podStartSLOduration=3.297777344 podCreationTimestamp="2023-10-02 19:36:27 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:30.285321723 +0000 UTC m=+1.204659705" watchObservedRunningTime="2023-10-02 19:36:30.297777344 +0000 UTC m=+1.217115326" Oct 2 19:36:30.313709 kubelet[2429]: I1002 19:36:30.313421 2429 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-c0afe9ffb8" podStartSLOduration=1.313368995 podCreationTimestamp="2023-10-02 19:36:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:30.298637852 +0000 UTC m=+1.217975834" watchObservedRunningTime="2023-10-02 19:36:30.313368995 +0000 UTC m=+1.232706977" Oct 2 19:36:30.332222 kubelet[2429]: I1002 19:36:30.332184 2429 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-c0afe9ffb8" podStartSLOduration=1.332130477 podCreationTimestamp="2023-10-02 19:36:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:30.314308404 +0000 UTC m=+1.233646386" watchObservedRunningTime="2023-10-02 19:36:30.332130477 +0000 UTC m=+1.251468459" Oct 2 19:36:30.725897 sudo[2458]: pam_unix(sudo:session): session closed for user root Oct 2 19:36:30.725000 audit[2458]: USER_END pid=2458 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:30.725000 audit[2458]: CRED_DISP pid=2458 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:31.992644 sudo[1667]: pam_unix(sudo:session): session closed for user root Oct 2 19:36:31.991000 audit[1667]: USER_END pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:31.991000 audit[1667]: CRED_DISP pid=1667 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:36:32.093964 sshd[1664]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:32.094000 audit[1664]: USER_END pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:32.095000 audit[1664]: CRED_DISP pid=1664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:36:32.097830 systemd[1]: sshd@6-10.200.8.20:22-10.200.12.6:35558.service: Deactivated successfully. Oct 2 19:36:32.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.20:22-10.200.12.6:35558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:32.099049 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:36:32.099320 systemd[1]: session-9.scope: Consumed 3.943s CPU time. Oct 2 19:36:32.100178 systemd-logind[1289]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:36:32.101268 systemd-logind[1289]: Removed session 9. Oct 2 19:36:38.753000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.761200 kernel: kauditd_printk_skb: 278 callbacks suppressed Oct 2 19:36:38.762107 kernel: audit: type=1400 audit(1696275398.753:946): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.753000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d529c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.811261 kernel: audit: type=1300 audit(1696275398.753:946): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d529c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.831872 kernel: audit: type=1327 audit(1696275398.753:946): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.753000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.764000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.764000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e178c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.880292 kernel: audit: type=1400 audit(1696275398.764:947): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.881372 kernel: audit: type=1300 audit(1696275398.764:947): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e178c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.882485 kernel: audit: type=1327 audit(1696275398.764:947): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.764000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.920659 kernel: audit: type=1400 audit(1696275398.764:948): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.920830 kernel: audit: type=1300 audit(1696275398.764:948): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17900 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.764000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17900 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.961493 kernel: audit: type=1327 audit(1696275398.764:948): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:38.961656 kernel: audit: type=1400 audit(1696275398.764:949): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.764000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:38.764000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e17b60 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:38.764000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:39.272000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6919 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:36:39.272000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ff0500 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:36:39.272000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:42.446059 kubelet[2429]: I1002 19:36:42.446029 2429 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:36:42.447023 env[1316]: time="2023-10-02T19:36:42.446987868Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:36:42.447506 kubelet[2429]: I1002 19:36:42.447484 2429 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:36:43.152784 kubelet[2429]: I1002 19:36:43.152745 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:43.159639 systemd[1]: Created slice kubepods-besteffort-pod7bfe1d61_ddbe_48f3_afe4_acd9b89c8b4d.slice. Oct 2 19:36:43.175666 kubelet[2429]: I1002 19:36:43.175627 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:43.186387 systemd[1]: Created slice kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice. Oct 2 19:36:43.204460 kubelet[2429]: I1002 19:36:43.204425 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-run\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204460 kubelet[2429]: I1002 19:36:43.204472 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-cgroup\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204514 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-lib-modules\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204544 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-hubble-tls\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204570 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-xtables-lock\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204596 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-xtables-lock\") pod \"kube-proxy-b559l\" (UID: \"7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d\") " pod="kube-system/kube-proxy-b559l" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204623 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-kube-proxy\") pod \"kube-proxy-b559l\" (UID: \"7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d\") " pod="kube-system/kube-proxy-b559l" Oct 2 19:36:43.204725 kubelet[2429]: I1002 19:36:43.204659 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vdn8v\" (UniqueName: \"kubernetes.io/projected/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-kube-api-access-vdn8v\") pod \"kube-proxy-b559l\" (UID: \"7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d\") " pod="kube-system/kube-proxy-b559l" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204703 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-bpf-maps\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204730 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-hostproc\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204773 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-kernel\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204802 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tc4zv\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204837 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-lib-modules\") pod \"kube-proxy-b559l\" (UID: \"7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d\") " pod="kube-system/kube-proxy-b559l" Oct 2 19:36:43.204998 kubelet[2429]: I1002 19:36:43.204867 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/483ee4f2-23de-4328-a269-56a3cb83d9dc-clustermesh-secrets\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.205227 kubelet[2429]: I1002 19:36:43.204908 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-net\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.205227 kubelet[2429]: I1002 19:36:43.204938 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cni-path\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.205227 kubelet[2429]: I1002 19:36:43.204971 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-etc-cni-netd\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.205227 kubelet[2429]: I1002 19:36:43.205002 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-config-path\") pod \"cilium-8lg8z\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " pod="kube-system/cilium-8lg8z" Oct 2 19:36:43.328934 kubelet[2429]: E1002 19:36:43.326091 2429 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:36:43.328934 kubelet[2429]: E1002 19:36:43.326133 2429 projected.go:198] Error preparing data for projected volume kube-api-access-tc4zv for pod kube-system/cilium-8lg8z: configmap "kube-root-ca.crt" not found Oct 2 19:36:43.328934 kubelet[2429]: E1002 19:36:43.326252 2429 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv podName:483ee4f2-23de-4328-a269-56a3cb83d9dc nodeName:}" failed. No retries permitted until 2023-10-02 19:36:43.826225072 +0000 UTC m=+14.745563054 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-tc4zv" (UniqueName: "kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv") pod "cilium-8lg8z" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc") : configmap "kube-root-ca.crt" not found Oct 2 19:36:43.333170 kubelet[2429]: E1002 19:36:43.333134 2429 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 19:36:43.333170 kubelet[2429]: E1002 19:36:43.333169 2429 projected.go:198] Error preparing data for projected volume kube-api-access-vdn8v for pod kube-system/kube-proxy-b559l: configmap "kube-root-ca.crt" not found Oct 2 19:36:43.333385 kubelet[2429]: E1002 19:36:43.333223 2429 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-kube-api-access-vdn8v podName:7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d nodeName:}" failed. No retries permitted until 2023-10-02 19:36:43.833201822 +0000 UTC m=+14.752539904 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-vdn8v" (UniqueName: "kubernetes.io/projected/7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d-kube-api-access-vdn8v") pod "kube-proxy-b559l" (UID: "7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d") : configmap "kube-root-ca.crt" not found Oct 2 19:36:43.409149 kubelet[2429]: I1002 19:36:43.409008 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:36:43.416951 systemd[1]: Created slice kubepods-besteffort-poded477101_3f34_4341_84ba_cfc3a8d32cf9.slice. Oct 2 19:36:43.507801 kubelet[2429]: I1002 19:36:43.507756 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed477101-3f34-4341-84ba-cfc3a8d32cf9-cilium-config-path\") pod \"cilium-operator-574c4bb98d-kxhb9\" (UID: \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\") " pod="kube-system/cilium-operator-574c4bb98d-kxhb9" Oct 2 19:36:43.508410 kubelet[2429]: I1002 19:36:43.508391 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f7j7f\" (UniqueName: \"kubernetes.io/projected/ed477101-3f34-4341-84ba-cfc3a8d32cf9-kube-api-access-f7j7f\") pod \"cilium-operator-574c4bb98d-kxhb9\" (UID: \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\") " pod="kube-system/cilium-operator-574c4bb98d-kxhb9" Oct 2 19:36:43.722018 env[1316]: time="2023-10-02T19:36:43.721962014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-kxhb9,Uid:ed477101-3f34-4341-84ba-cfc3a8d32cf9,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:43.770685 env[1316]: time="2023-10-02T19:36:43.770373662Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:43.770685 env[1316]: time="2023-10-02T19:36:43.770424463Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:43.770685 env[1316]: time="2023-10-02T19:36:43.770439263Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:43.770685 env[1316]: time="2023-10-02T19:36:43.770578264Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d pid=2504 runtime=io.containerd.runc.v2 Oct 2 19:36:43.790252 systemd[1]: Started cri-containerd-70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d.scope. Oct 2 19:36:43.842657 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:36:43.842801 kernel: audit: type=1400 audit(1696275403.816:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.858979 kernel: audit: type=1400 audit(1696275403.816:952): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.860730 kernel: audit: type=1400 audit(1696275403.816:953): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.902903 kernel: audit: type=1400 audit(1696275403.816:954): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.930516 kernel: audit: type=1400 audit(1696275403.816:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.930656 kernel: audit: type=1400 audit(1696275403.817:956): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.964126 env[1316]: time="2023-10-02T19:36:43.960812430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-kxhb9,Uid:ed477101-3f34-4341-84ba-cfc3a8d32cf9,Namespace:kube-system,Attempt:0,} returns sandbox id \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\"" Oct 2 19:36:43.964126 env[1316]: time="2023-10-02T19:36:43.962697144Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:36:43.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.978970 kernel: audit: type=1400 audit(1696275403.817:957): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.979149 kernel: audit: type=1400 audit(1696275403.817:958): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.009476 kernel: audit: type=1400 audit(1696275403.817:959): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.009641 kernel: audit: type=1400 audit(1696275403.840:960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.840000 audit: BPF prog-id=110 op=LOAD Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:43.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730653237383463333135356162666539643038323135383332663765 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:43.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730653237383463333135356162666539643038323135383332663765 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit: BPF prog-id=111 op=LOAD Oct 2 19:36:43.841000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000228510 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:43.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730653237383463333135356162666539643038323135383332663765 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit: BPF prog-id=112 op=LOAD Oct 2 19:36:43.841000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000228558 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:43.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730653237383463333135356162666539643038323135383332663765 Oct 2 19:36:43.841000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:36:43.841000 audit: BPF prog-id=111 op=UNLOAD Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { perfmon } for pid=2514 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit[2514]: AVC avc: denied { bpf } for pid=2514 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:43.841000 audit: BPF prog-id=113 op=LOAD Oct 2 19:36:43.841000 audit[2514]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000228968 items=0 ppid=2504 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:43.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730653237383463333135356162666539643038323135383332663765 Oct 2 19:36:44.073650 env[1316]: time="2023-10-02T19:36:44.073594129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-b559l,Uid:7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:44.096863 env[1316]: time="2023-10-02T19:36:44.096811393Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-8lg8z,Uid:483ee4f2-23de-4328-a269-56a3cb83d9dc,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:44.125968 env[1316]: time="2023-10-02T19:36:44.125765296Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:44.126436 env[1316]: time="2023-10-02T19:36:44.125802796Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:44.126436 env[1316]: time="2023-10-02T19:36:44.125872597Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:44.126436 env[1316]: time="2023-10-02T19:36:44.126126299Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c1b528a2111f198ea6c0405b1cb717947872fb0ff6d30230a398c3f4659f88c2 pid=2546 runtime=io.containerd.runc.v2 Oct 2 19:36:44.140534 systemd[1]: Started cri-containerd-c1b528a2111f198ea6c0405b1cb717947872fb0ff6d30230a398c3f4659f88c2.scope. Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.156000 audit: BPF prog-id=114 op=LOAD Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2546 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331623532386132313131663139386561366330343035623163623731 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2546 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331623532386132313131663139386561366330343035623163623731 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit: BPF prog-id=115 op=LOAD Oct 2 19:36:44.158000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001871d0 items=0 ppid=2546 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331623532386132313131663139386561366330343035623163623731 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit: BPF prog-id=116 op=LOAD Oct 2 19:36:44.158000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000187218 items=0 ppid=2546 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331623532386132313131663139386561366330343035623163623731 Oct 2 19:36:44.158000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:36:44.158000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.158000 audit: BPF prog-id=117 op=LOAD Oct 2 19:36:44.158000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000187628 items=0 ppid=2546 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331623532386132313131663139386561366330343035623163623731 Oct 2 19:36:44.163509 env[1316]: time="2023-10-02T19:36:44.163313360Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:44.163509 env[1316]: time="2023-10-02T19:36:44.163361760Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:44.163509 env[1316]: time="2023-10-02T19:36:44.163385161Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:44.163708 env[1316]: time="2023-10-02T19:36:44.163627462Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3 pid=2578 runtime=io.containerd.runc.v2 Oct 2 19:36:44.179477 env[1316]: time="2023-10-02T19:36:44.179425973Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-b559l,Uid:7bfe1d61-ddbe-48f3-afe4-acd9b89c8b4d,Namespace:kube-system,Attempt:0,} returns sandbox id \"c1b528a2111f198ea6c0405b1cb717947872fb0ff6d30230a398c3f4659f88c2\"" Oct 2 19:36:44.183816 systemd[1]: Started cri-containerd-120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3.scope. Oct 2 19:36:44.193790 env[1316]: time="2023-10-02T19:36:44.193742974Z" level=info msg="CreateContainer within sandbox \"c1b528a2111f198ea6c0405b1cb717947872fb0ff6d30230a398c3f4659f88c2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.199000 audit: BPF prog-id=118 op=LOAD Oct 2 19:36:44.199000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.199000 audit[2589]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2578 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132306662663935353266356338363361313763313139303636613132 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2578 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132306662663935353266356338363361313763313139303636613132 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit: BPF prog-id=119 op=LOAD Oct 2 19:36:44.200000 audit[2589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024c60 items=0 ppid=2578 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132306662663935353266356338363361313763313139303636613132 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit: BPF prog-id=120 op=LOAD Oct 2 19:36:44.200000 audit[2589]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024ca8 items=0 ppid=2578 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132306662663935353266356338363361313763313139303636613132 Oct 2 19:36:44.200000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:36:44.200000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { perfmon } for pid=2589 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit[2589]: AVC avc: denied { bpf } for pid=2589 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.200000 audit: BPF prog-id=121 op=LOAD Oct 2 19:36:44.200000 audit[2589]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000250b8 items=0 ppid=2578 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132306662663935353266356338363361313763313139303636613132 Oct 2 19:36:44.221545 env[1316]: time="2023-10-02T19:36:44.221493469Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-8lg8z,Uid:483ee4f2-23de-4328-a269-56a3cb83d9dc,Namespace:kube-system,Attempt:0,} returns sandbox id \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\"" Oct 2 19:36:44.246242 env[1316]: time="2023-10-02T19:36:44.246128442Z" level=info msg="CreateContainer within sandbox \"c1b528a2111f198ea6c0405b1cb717947872fb0ff6d30230a398c3f4659f88c2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7e30e7532f634c5c430386c428122a8e5f999a2fc58a8957ebfa57f28b9a8319\"" Oct 2 19:36:44.247906 env[1316]: time="2023-10-02T19:36:44.247843054Z" level=info msg="StartContainer for \"7e30e7532f634c5c430386c428122a8e5f999a2fc58a8957ebfa57f28b9a8319\"" Oct 2 19:36:44.267280 systemd[1]: Started cri-containerd-7e30e7532f634c5c430386c428122a8e5f999a2fc58a8957ebfa57f28b9a8319.scope. Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2546 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765333065373533326636333463356334333033383663343238313232 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit: BPF prog-id=122 op=LOAD Oct 2 19:36:44.282000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003881f0 items=0 ppid=2546 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765333065373533326636333463356334333033383663343238313232 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.282000 audit: BPF prog-id=123 op=LOAD Oct 2 19:36:44.282000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000388238 items=0 ppid=2546 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765333065373533326636333463356334333033383663343238313232 Oct 2 19:36:44.283000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:36:44.283000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:44.283000 audit: BPF prog-id=124 op=LOAD Oct 2 19:36:44.283000 audit[2626]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003882c8 items=0 ppid=2546 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765333065373533326636333463356334333033383663343238313232 Oct 2 19:36:44.310810 env[1316]: time="2023-10-02T19:36:44.310753496Z" level=info msg="StartContainer for \"7e30e7532f634c5c430386c428122a8e5f999a2fc58a8957ebfa57f28b9a8319\" returns successfully" Oct 2 19:36:44.384000 audit[2674]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.384000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffed0e19c0 a2=0 a3=7fffed0e19ac items=0 ppid=2636 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.384000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:36:44.387000 audit[2675]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.387000 audit[2675]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0307c730 a2=0 a3=7fff0307c71c items=0 ppid=2636 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.387000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:36:44.390000 audit[2676]: NETFILTER_CFG table=mangle:44 family=10 entries=1 op=nft_register_chain pid=2676 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.390000 audit[2676]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeef17fc80 a2=0 a3=7ffeef17fc6c items=0 ppid=2636 pid=2676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:36:44.393000 audit[2677]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.393000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddf7f1360 a2=0 a3=7ffddf7f134c items=0 ppid=2636 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:36:44.394000 audit[2678]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.394000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb776b4e0 a2=0 a3=7fffb776b4cc items=0 ppid=2636 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.394000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:36:44.395000 audit[2679]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2679 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.395000 audit[2679]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffebd141450 a2=0 a3=7ffebd14143c items=0 ppid=2636 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:36:44.488000 audit[2680]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.488000 audit[2680]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff51467780 a2=0 a3=7fff5146776c items=0 ppid=2636 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.488000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:36:44.492000 audit[2682]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.492000 audit[2682]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc0bd60020 a2=0 a3=7ffc0bd6000c items=0 ppid=2636 pid=2682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.492000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:36:44.496000 audit[2685]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.496000 audit[2685]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff08f255f0 a2=0 a3=7fff08f255dc items=0 ppid=2636 pid=2685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:36:44.501000 audit[2686]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.501000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd43518cd0 a2=0 a3=7ffd43518cbc items=0 ppid=2636 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:36:44.503000 audit[2688]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.503000 audit[2688]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe759f9ff0 a2=0 a3=7ffe759f9fdc items=0 ppid=2636 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:36:44.505000 audit[2689]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.505000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdef106d00 a2=0 a3=7ffdef106cec items=0 ppid=2636 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:36:44.508000 audit[2691]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2691 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.508000 audit[2691]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc91651a90 a2=0 a3=7ffc91651a7c items=0 ppid=2636 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.508000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:36:44.512000 audit[2694]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.512000 audit[2694]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc2206ab20 a2=0 a3=7ffc2206ab0c items=0 ppid=2636 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:36:44.513000 audit[2695]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.513000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd016bcd30 a2=0 a3=7ffd016bcd1c items=0 ppid=2636 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.513000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:36:44.516000 audit[2697]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.516000 audit[2697]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe984e9910 a2=0 a3=7ffe984e98fc items=0 ppid=2636 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:36:44.517000 audit[2698]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.517000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8f4ce030 a2=0 a3=7fff8f4ce01c items=0 ppid=2636 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:36:44.519000 audit[2700]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.519000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffef0f3400 a2=0 a3=7fffef0f33ec items=0 ppid=2636 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.519000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:44.523000 audit[2703]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.523000 audit[2703]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc1b704480 a2=0 a3=7ffc1b70446c items=0 ppid=2636 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:44.528000 audit[2706]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.528000 audit[2706]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe62700d00 a2=0 a3=7ffe62700cec items=0 ppid=2636 pid=2706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.528000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:36:44.529000 audit[2707]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.529000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd4fd2d5e0 a2=0 a3=7ffd4fd2d5cc items=0 ppid=2636 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:36:44.532000 audit[2709]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.532000 audit[2709]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe4586c6d0 a2=0 a3=7ffe4586c6bc items=0 ppid=2636 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.532000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:44.535000 audit[2712]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.535000 audit[2712]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff28be4000 a2=0 a3=7fff28be3fec items=0 ppid=2636 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.535000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:44.541000 audit[2717]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.541000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb25e7c10 a2=0 a3=7fffb25e7bfc items=0 ppid=2636 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:36:44.543000 audit[2719]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:36:44.543000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffe37468b0 a2=0 a3=7fffe374689c items=0 ppid=2636 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:36:44.591000 audit[2721]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:36:44.591000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffdb87f1b90 a2=0 a3=7ffdb87f1b7c items=0 ppid=2636 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:44.616000 audit[2721]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:36:44.616000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffdb87f1b90 a2=0 a3=7ffdb87f1b7c items=0 ppid=2636 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.616000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:44.618000 audit[2726]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.618000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff610bc590 a2=0 a3=7fff610bc57c items=0 ppid=2636 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.618000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:36:44.620000 audit[2728]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2728 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.620000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffddebd3a70 a2=0 a3=7ffddebd3a5c items=0 ppid=2636 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.620000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:36:44.625000 audit[2731]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.625000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd1bf57bf0 a2=0 a3=7ffd1bf57bdc items=0 ppid=2636 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.625000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:36:44.626000 audit[2732]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.626000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7a501840 a2=0 a3=7ffd7a50182c items=0 ppid=2636 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.626000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:36:44.629000 audit[2734]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.629000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff4487d040 a2=0 a3=7fff4487d02c items=0 ppid=2636 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.629000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:36:44.631000 audit[2735]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.631000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5498d110 a2=0 a3=7ffe5498d0fc items=0 ppid=2636 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.631000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:36:44.634000 audit[2737]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.634000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff53ca79a0 a2=0 a3=7fff53ca798c items=0 ppid=2636 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.634000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:36:44.638000 audit[2740]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.638000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdbf3b81c0 a2=0 a3=7ffdbf3b81ac items=0 ppid=2636 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.638000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:36:44.640000 audit[2741]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.640000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea26182b0 a2=0 a3=7ffea261829c items=0 ppid=2636 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.640000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:36:44.642000 audit[2743]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2743 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.642000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc2f9b470 a2=0 a3=7fffc2f9b45c items=0 ppid=2636 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:36:44.643000 audit[2744]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.643000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb6b14410 a2=0 a3=7ffeb6b143fc items=0 ppid=2636 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:36:44.646000 audit[2746]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.646000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc676b8ec0 a2=0 a3=7ffc676b8eac items=0 ppid=2636 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:36:44.649000 audit[2749]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2749 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.649000 audit[2749]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc6fd9f630 a2=0 a3=7ffc6fd9f61c items=0 ppid=2636 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:36:44.654000 audit[2752]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.654000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe52bee9e0 a2=0 a3=7ffe52bee9cc items=0 ppid=2636 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:36:44.657000 audit[2753]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.657000 audit[2753]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea6567050 a2=0 a3=7ffea656703c items=0 ppid=2636 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.657000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:36:44.660000 audit[2755]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2755 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.660000 audit[2755]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc4b203180 a2=0 a3=7ffc4b20316c items=0 ppid=2636 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.660000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:44.663000 audit[2758]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.663000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd23caf940 a2=0 a3=7ffd23caf92c items=0 ppid=2636 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.663000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:36:44.665000 audit[2759]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.665000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5235cab0 a2=0 a3=7ffd5235ca9c items=0 ppid=2636 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.665000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:36:44.667000 audit[2761]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.667000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc4d67370 a2=0 a3=7ffcc4d6735c items=0 ppid=2636 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:44.671000 audit[2764]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.671000 audit[2764]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe6fac3e70 a2=0 a3=7ffe6fac3e5c items=0 ppid=2636 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.671000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:36:44.672000 audit[2765]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.672000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff04242850 a2=0 a3=7fff0424283c items=0 ppid=2636 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.672000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:36:44.675000 audit[2767]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:36:44.675000 audit[2767]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff4b853e70 a2=0 a3=7fff4b853e5c items=0 ppid=2636 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.675000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:36:44.678000 audit[2769]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:36:44.678000 audit[2769]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd8cc65e00 a2=0 a3=7ffd8cc65dec items=0 ppid=2636 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.678000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:44.679000 audit[2769]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:36:44.679000 audit[2769]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd8cc65e00 a2=0 a3=7ffd8cc65dec items=0 ppid=2636 pid=2769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:44.679000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:36:45.431144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2257980615.mount: Deactivated successfully. Oct 2 19:36:46.418116 env[1316]: time="2023-10-02T19:36:46.418056038Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:46.426562 env[1316]: time="2023-10-02T19:36:46.426504595Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:46.435695 env[1316]: time="2023-10-02T19:36:46.435626456Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:46.436630 env[1316]: time="2023-10-02T19:36:46.436575763Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:36:46.439255 env[1316]: time="2023-10-02T19:36:46.439213780Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:36:46.441863 env[1316]: time="2023-10-02T19:36:46.441825398Z" level=info msg="CreateContainer within sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:36:46.484735 env[1316]: time="2023-10-02T19:36:46.484665686Z" level=info msg="CreateContainer within sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\"" Oct 2 19:36:46.485652 env[1316]: time="2023-10-02T19:36:46.485613993Z" level=info msg="StartContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\"" Oct 2 19:36:46.514384 systemd[1]: run-containerd-runc-k8s.io-e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d-runc.Gn1T9y.mount: Deactivated successfully. Oct 2 19:36:46.518064 systemd[1]: Started cri-containerd-e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d.scope. Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.530000 audit: BPF prog-id=125 op=LOAD Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2504 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:46.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536623866643838306166383739393436303739616234343666396462 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2504 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:46.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536623866643838306166383739393436303739616234343666396462 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit: BPF prog-id=126 op=LOAD Oct 2 19:36:46.531000 audit[2778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002ed410 items=0 ppid=2504 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:46.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536623866643838306166383739393436303739616234343666396462 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit: BPF prog-id=127 op=LOAD Oct 2 19:36:46.531000 audit[2778]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002ed458 items=0 ppid=2504 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:46.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536623866643838306166383739393436303739616234343666396462 Oct 2 19:36:46.531000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:36:46.531000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { perfmon } for pid=2778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit[2778]: AVC avc: denied { bpf } for pid=2778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:46.531000 audit: BPF prog-id=128 op=LOAD Oct 2 19:36:46.531000 audit[2778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002ed868 items=0 ppid=2504 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:46.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536623866643838306166383739393436303739616234343666396462 Oct 2 19:36:46.560216 env[1316]: time="2023-10-02T19:36:46.560144595Z" level=info msg="StartContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" returns successfully" Oct 2 19:36:46.576000 audit[2788]: AVC avc: denied { map_create } for pid=2788 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c558,c904 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c558,c904 tclass=bpf permissive=0 Oct 2 19:36:46.576000 audit[2788]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00060f7d0 a2=48 a3=c00060f7c0 items=0 ppid=2504 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c558,c904 key=(null) Oct 2 19:36:46.576000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:36:47.384751 kubelet[2429]: I1002 19:36:47.384710 2429 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-b559l" podStartSLOduration=4.384641295 podCreationTimestamp="2023-10-02 19:36:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:36:45.309649772 +0000 UTC m=+16.228987854" watchObservedRunningTime="2023-10-02 19:36:47.384641295 +0000 UTC m=+18.303979277" Oct 2 19:36:47.385269 kubelet[2429]: I1002 19:36:47.385139 2429 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-kxhb9" podStartSLOduration=1.909967771 podCreationTimestamp="2023-10-02 19:36:43 +0000 UTC" firstStartedPulling="2023-10-02 19:36:43.962057939 +0000 UTC m=+14.881395921" lastFinishedPulling="2023-10-02 19:36:46.437154366 +0000 UTC m=+17.356492348" observedRunningTime="2023-10-02 19:36:47.384082791 +0000 UTC m=+18.303420773" watchObservedRunningTime="2023-10-02 19:36:47.385064198 +0000 UTC m=+18.304402180" Oct 2 19:36:52.509441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3823643150.mount: Deactivated successfully. Oct 2 19:36:55.453358 env[1316]: time="2023-10-02T19:36:55.453242612Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.462850 env[1316]: time="2023-10-02T19:36:55.462797065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.472601 env[1316]: time="2023-10-02T19:36:55.472130218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:36:55.473273 env[1316]: time="2023-10-02T19:36:55.473233324Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:36:55.477847 env[1316]: time="2023-10-02T19:36:55.477802750Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:36:55.526515 env[1316]: time="2023-10-02T19:36:55.526457323Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" Oct 2 19:36:55.531062 env[1316]: time="2023-10-02T19:36:55.527686830Z" level=info msg="StartContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" Oct 2 19:36:55.570578 systemd[1]: Started cri-containerd-a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2.scope. Oct 2 19:36:55.583815 systemd[1]: cri-containerd-a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2.scope: Deactivated successfully. Oct 2 19:36:55.588566 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2-rootfs.mount: Deactivated successfully. Oct 2 19:36:57.575355 env[1316]: time="2023-10-02T19:36:57.575132521Z" level=error msg="get state for a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" error="context deadline exceeded: unknown" Oct 2 19:36:57.575355 env[1316]: time="2023-10-02T19:36:57.575336622Z" level=warning msg="unknown status" status=0 Oct 2 19:36:59.677571 env[1316]: time="2023-10-02T19:36:59.677474279Z" level=error msg="get state for a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" error="context deadline exceeded: unknown" Oct 2 19:36:59.677571 env[1316]: time="2023-10-02T19:36:59.677560879Z" level=warning msg="unknown status" status=0 Oct 2 19:36:59.704347 env[1316]: time="2023-10-02T19:36:59.703872117Z" level=info msg="shim disconnected" id=a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2 Oct 2 19:36:59.704347 env[1316]: time="2023-10-02T19:36:59.704015017Z" level=warning msg="cleaning up after shim disconnected" id=a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2 namespace=k8s.io Oct 2 19:36:59.704347 env[1316]: time="2023-10-02T19:36:59.704027017Z" level=info msg="cleaning up dead shim" Oct 2 19:36:59.715063 env[1316]: time="2023-10-02T19:36:59.715000675Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2836 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:59.715432 env[1316]: time="2023-10-02T19:36:59.715314976Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:36:59.716678 env[1316]: time="2023-10-02T19:36:59.716628883Z" level=error msg="Failed to pipe stdout of container \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" error="reading from a closed fifo" Oct 2 19:36:59.716804 env[1316]: time="2023-10-02T19:36:59.716719184Z" level=error msg="Failed to pipe stderr of container \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" error="reading from a closed fifo" Oct 2 19:36:59.724132 env[1316]: time="2023-10-02T19:36:59.724058222Z" level=error msg="StartContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:59.724552 kubelet[2429]: E1002 19:36:59.724515 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" Oct 2 19:36:59.724990 kubelet[2429]: E1002 19:36:59.724683 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:59.724990 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:59.724990 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:36:59.725138 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:59.725138 kubelet[2429]: E1002 19:36:59.724737 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:00.337992 env[1316]: time="2023-10-02T19:37:00.337928697Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:37:00.394661 env[1316]: time="2023-10-02T19:37:00.394588788Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" Oct 2 19:37:00.396672 env[1316]: time="2023-10-02T19:37:00.396620998Z" level=info msg="StartContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" Oct 2 19:37:00.442099 systemd[1]: Started cri-containerd-a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d.scope. Oct 2 19:37:00.445375 systemd[1]: run-containerd-runc-k8s.io-a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d-runc.9pneDF.mount: Deactivated successfully. Oct 2 19:37:00.487603 systemd[1]: cri-containerd-a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d.scope: Deactivated successfully. Oct 2 19:37:00.507844 env[1316]: time="2023-10-02T19:37:00.507779869Z" level=info msg="shim disconnected" id=a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d Oct 2 19:37:00.507844 env[1316]: time="2023-10-02T19:37:00.507846869Z" level=warning msg="cleaning up after shim disconnected" id=a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d namespace=k8s.io Oct 2 19:37:00.508166 env[1316]: time="2023-10-02T19:37:00.507857969Z" level=info msg="cleaning up dead shim" Oct 2 19:37:00.519583 env[1316]: time="2023-10-02T19:37:00.519520729Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2872 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:00.520118 env[1316]: time="2023-10-02T19:37:00.520074632Z" level=error msg="Failed to pipe stdout of container \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" error="reading from a closed fifo" Oct 2 19:37:00.520257 env[1316]: time="2023-10-02T19:37:00.520170132Z" level=error msg="Failed to pipe stderr of container \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" error="reading from a closed fifo" Oct 2 19:37:00.520423 env[1316]: time="2023-10-02T19:37:00.519832931Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:37:00.525319 env[1316]: time="2023-10-02T19:37:00.525250758Z" level=error msg="StartContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:00.525630 kubelet[2429]: E1002 19:37:00.525607 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d" Oct 2 19:37:00.525775 kubelet[2429]: E1002 19:37:00.525739 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:00.525775 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:00.525775 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:37:00.525775 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:00.526096 kubelet[2429]: E1002 19:37:00.525786 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:01.335637 kubelet[2429]: I1002 19:37:01.335608 2429 scope.go:115] "RemoveContainer" containerID="a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" Oct 2 19:37:01.336368 kubelet[2429]: I1002 19:37:01.336348 2429 scope.go:115] "RemoveContainer" containerID="a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" Oct 2 19:37:01.337915 env[1316]: time="2023-10-02T19:37:01.337867798Z" level=info msg="RemoveContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" Oct 2 19:37:01.339065 env[1316]: time="2023-10-02T19:37:01.339019904Z" level=info msg="RemoveContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\"" Oct 2 19:37:01.339320 env[1316]: time="2023-10-02T19:37:01.339283505Z" level=error msg="RemoveContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\" failed" error="failed to set removing state for container \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\": container is already in removing state" Oct 2 19:37:01.339607 kubelet[2429]: E1002 19:37:01.339583 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\": container is already in removing state" containerID="a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" Oct 2 19:37:01.339699 kubelet[2429]: E1002 19:37:01.339634 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2": container is already in removing state; Skipping pod "cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)" Oct 2 19:37:01.339946 kubelet[2429]: E1002 19:37:01.339928 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:01.359237 env[1316]: time="2023-10-02T19:37:01.359177906Z" level=info msg="RemoveContainer for \"a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2\" returns successfully" Oct 2 19:37:01.371692 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d-rootfs.mount: Deactivated successfully. Oct 2 19:37:02.344547 kubelet[2429]: E1002 19:37:02.344505 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:02.682538 kubelet[2429]: W1002 19:37:02.682039 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2.scope WatchSource:0}: container "a182817d39926f36b08d78d18567d3c24660a44865e31ae79c95c71a07756cc2" in namespace "k8s.io": not found Oct 2 19:37:05.788473 kubelet[2429]: W1002 19:37:05.788410 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d.scope WatchSource:0}: task a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d not found: not found Oct 2 19:37:13.216661 env[1316]: time="2023-10-02T19:37:13.216393811Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:37:13.247170 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount616382795.mount: Deactivated successfully. Oct 2 19:37:13.257953 env[1316]: time="2023-10-02T19:37:13.257907984Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" Oct 2 19:37:13.258606 env[1316]: time="2023-10-02T19:37:13.258565287Z" level=info msg="StartContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" Oct 2 19:37:13.284089 systemd[1]: Started cri-containerd-78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299.scope. Oct 2 19:37:13.300841 systemd[1]: cri-containerd-78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299.scope: Deactivated successfully. Oct 2 19:37:13.338085 env[1316]: time="2023-10-02T19:37:13.338025417Z" level=info msg="shim disconnected" id=78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299 Oct 2 19:37:13.338085 env[1316]: time="2023-10-02T19:37:13.338083118Z" level=warning msg="cleaning up after shim disconnected" id=78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299 namespace=k8s.io Oct 2 19:37:13.338398 env[1316]: time="2023-10-02T19:37:13.338096618Z" level=info msg="cleaning up dead shim" Oct 2 19:37:13.347490 env[1316]: time="2023-10-02T19:37:13.347430656Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2911 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:13.347832 env[1316]: time="2023-10-02T19:37:13.347727958Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:37:13.348106 env[1316]: time="2023-10-02T19:37:13.348064659Z" level=error msg="Failed to pipe stderr of container \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" error="reading from a closed fifo" Oct 2 19:37:13.348193 env[1316]: time="2023-10-02T19:37:13.348146259Z" level=error msg="Failed to pipe stdout of container \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" error="reading from a closed fifo" Oct 2 19:37:13.356060 env[1316]: time="2023-10-02T19:37:13.355993192Z" level=error msg="StartContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:13.356398 kubelet[2429]: E1002 19:37:13.356338 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299" Oct 2 19:37:13.357065 kubelet[2429]: E1002 19:37:13.356932 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:13.357065 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:13.357065 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:37:13.357065 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:13.357065 kubelet[2429]: E1002 19:37:13.357010 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:13.367181 kubelet[2429]: I1002 19:37:13.367148 2429 scope.go:115] "RemoveContainer" containerID="a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d" Oct 2 19:37:13.367527 kubelet[2429]: I1002 19:37:13.367508 2429 scope.go:115] "RemoveContainer" containerID="a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d" Oct 2 19:37:13.369195 env[1316]: time="2023-10-02T19:37:13.368994046Z" level=info msg="RemoveContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" Oct 2 19:37:13.369957 env[1316]: time="2023-10-02T19:37:13.369915850Z" level=info msg="RemoveContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\"" Oct 2 19:37:13.370316 env[1316]: time="2023-10-02T19:37:13.370263851Z" level=error msg="RemoveContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\" failed" error="failed to set removing state for container \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\": container is already in removing state" Oct 2 19:37:13.370624 kubelet[2429]: E1002 19:37:13.370588 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\": container is already in removing state" containerID="a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d" Oct 2 19:37:13.370946 kubelet[2429]: E1002 19:37:13.370789 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d": container is already in removing state; Skipping pod "cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)" Oct 2 19:37:13.374765 kubelet[2429]: E1002 19:37:13.372306 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:13.391129 env[1316]: time="2023-10-02T19:37:13.391073638Z" level=info msg="RemoveContainer for \"a47556c6e07d7d3b689f69d393e0b5b4998c42b46aeba3c10188458f6ad6a50d\" returns successfully" Oct 2 19:37:14.241788 systemd[1]: run-containerd-runc-k8s.io-78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299-runc.AkXnsd.mount: Deactivated successfully. Oct 2 19:37:14.241955 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299-rootfs.mount: Deactivated successfully. Oct 2 19:37:16.442704 kubelet[2429]: W1002 19:37:16.442653 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299.scope WatchSource:0}: task 78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299 not found: not found Oct 2 19:37:23.882000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.887332 kernel: kauditd_printk_skb: 417 callbacks suppressed Oct 2 19:37:23.887461 kernel: audit: type=1400 audit(1696275443.882:1081): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.882000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.921171 kernel: audit: type=1400 audit(1696275443.882:1082): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:23.921313 kernel: audit: type=1300 audit(1696275443.882:1081): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000056720 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:23.882000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000056720 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:23.882000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:23.945090 kernel: audit: type=1327 audit(1696275443.882:1081): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:23.882000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001885d80 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:23.984234 kernel: audit: type=1300 audit(1696275443.882:1082): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001885d80 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:23.984395 kernel: audit: type=1327 audit(1696275443.882:1082): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:23.882000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:24.623000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.644561 kernel: audit: type=1400 audit(1696275444.623:1083): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.644698 kernel: audit: type=1300 audit(1696275444.623:1083): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003806060 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.623000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003806060 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.663912 kernel: audit: type=1327 audit(1696275444.623:1083): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.642000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.701178 kernel: audit: type=1400 audit(1696275444.642:1084): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.642000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0012ac690 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.642000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.642000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0080cd780 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.642000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.642000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007007ea0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.642000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.642000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0038061e0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:24.642000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:24.642000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c003806210 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:37:24.642000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:37:25.213466 kubelet[2429]: E1002 19:37:25.213424 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:30.488191 update_engine[1291]: I1002 19:37:30.488121 1291 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:37:30.488191 update_engine[1291]: I1002 19:37:30.488181 1291 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:37:30.488927 update_engine[1291]: I1002 19:37:30.488353 1291 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:37:30.489021 update_engine[1291]: I1002 19:37:30.488993 1291 omaha_request_params.cc:62] Current group set to lts Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489188 1291 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489203 1291 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489225 1291 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489262 1291 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489343 1291 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489351 1291 omaha_request_action.cc:269] Request: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: Oct 2 19:37:30.489586 update_engine[1291]: I1002 19:37:30.489358 1291 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:37:30.491281 locksmithd[1377]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:37:30.491514 update_engine[1291]: I1002 19:37:30.491021 1291 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:37:30.491514 update_engine[1291]: I1002 19:37:30.491290 1291 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:37:31.550909 update_engine[1291]: I1002 19:37:31.550849 1291 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:37:31.551391 update_engine[1291]: I1002 19:37:31.551173 1291 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:37:31.551391 update_engine[1291]: I1002 19:37:31.551362 1291 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:37:31.635446 update_engine[1291]: I1002 19:37:31.635385 1291 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:37:31.636950 update_engine[1291]: I1002 19:37:31.636907 1291 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:37:31.636950 update_engine[1291]: I1002 19:37:31.636935 1291 omaha_request_action.cc:619] Omaha request response: Oct 2 19:37:31.636950 update_engine[1291]: Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715912 1291 omaha_request_action.cc:409] No update. Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715968 1291 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715975 1291 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715981 1291 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715986 1291 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:37:31.715976 update_engine[1291]: I1002 19:37:31.715988 1291 update_attempter.cc:302] Processing Done. Oct 2 19:37:31.716357 update_engine[1291]: I1002 19:37:31.716007 1291 update_attempter.cc:338] No update. Oct 2 19:37:31.716357 update_engine[1291]: I1002 19:37:31.716023 1291 update_check_scheduler.cc:74] Next update check in 50m0s Oct 2 19:37:31.716475 locksmithd[1377]: LastCheckedTime=1696275451 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:37:38.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.770900 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:37:38.771049 kernel: audit: type=1400 audit(1696275458.765:1089): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.805499 kernel: audit: type=1400 audit(1696275458.765:1090): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.805646 kernel: audit: type=1300 audit(1696275458.765:1089): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009ce3a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.765000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009ce3a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.765000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.847905 kernel: audit: type=1327 audit(1696275458.765:1089): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.847958 kernel: audit: type=1400 audit(1696275458.765:1091): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.765000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009cec60 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.885365 kernel: audit: type=1300 audit(1696275458.765:1091): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009cec60 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.885543 kernel: audit: type=1327 audit(1696275458.765:1091): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.765000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d526a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.925387 kernel: audit: type=1300 audit(1696275458.765:1090): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d526a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.925539 kernel: audit: type=1327 audit(1696275458.765:1090): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:38.770000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.959777 kernel: audit: type=1400 audit(1696275458.770:1092): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:38.770000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009ceee0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:37:38.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:40.217807 env[1316]: time="2023-10-02T19:37:40.217749618Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:37:40.245267 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3156269527.mount: Deactivated successfully. Oct 2 19:37:40.265425 env[1316]: time="2023-10-02T19:37:40.265363464Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" Oct 2 19:37:40.266274 env[1316]: time="2023-10-02T19:37:40.266225767Z" level=info msg="StartContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" Oct 2 19:37:40.298621 systemd[1]: Started cri-containerd-9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c.scope. Oct 2 19:37:40.313525 systemd[1]: cri-containerd-9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c.scope: Deactivated successfully. Oct 2 19:37:40.360847 env[1316]: time="2023-10-02T19:37:40.360783057Z" level=info msg="shim disconnected" id=9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c Oct 2 19:37:40.360847 env[1316]: time="2023-10-02T19:37:40.360844257Z" level=warning msg="cleaning up after shim disconnected" id=9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c namespace=k8s.io Oct 2 19:37:40.360847 env[1316]: time="2023-10-02T19:37:40.360857957Z" level=info msg="cleaning up dead shim" Oct 2 19:37:40.369626 env[1316]: time="2023-10-02T19:37:40.369572084Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2953 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:40Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:40.370000 env[1316]: time="2023-10-02T19:37:40.369925985Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:37:40.370231 env[1316]: time="2023-10-02T19:37:40.370184986Z" level=error msg="Failed to pipe stderr of container \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" error="reading from a closed fifo" Oct 2 19:37:40.370370 env[1316]: time="2023-10-02T19:37:40.370336386Z" level=error msg="Failed to pipe stdout of container \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" error="reading from a closed fifo" Oct 2 19:37:40.375727 env[1316]: time="2023-10-02T19:37:40.375663503Z" level=error msg="StartContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:40.376088 kubelet[2429]: E1002 19:37:40.376061 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c" Oct 2 19:37:40.377550 kubelet[2429]: E1002 19:37:40.377523 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:40.377550 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:40.377550 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:37:40.377550 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:40.377966 kubelet[2429]: E1002 19:37:40.377584 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:40.421020 kubelet[2429]: I1002 19:37:40.420987 2429 scope.go:115] "RemoveContainer" containerID="78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299" Oct 2 19:37:40.421395 kubelet[2429]: I1002 19:37:40.421379 2429 scope.go:115] "RemoveContainer" containerID="78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299" Oct 2 19:37:40.430962 env[1316]: time="2023-10-02T19:37:40.426431058Z" level=info msg="RemoveContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" Oct 2 19:37:40.430962 env[1316]: time="2023-10-02T19:37:40.427364561Z" level=info msg="RemoveContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\"" Oct 2 19:37:40.430962 env[1316]: time="2023-10-02T19:37:40.427468962Z" level=error msg="RemoveContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\" failed" error="failed to set removing state for container \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\": container is already in removing state" Oct 2 19:37:40.431250 kubelet[2429]: E1002 19:37:40.427621 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\": container is already in removing state" containerID="78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299" Oct 2 19:37:40.431250 kubelet[2429]: E1002 19:37:40.427659 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299": container is already in removing state; Skipping pod "cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)" Oct 2 19:37:40.431250 kubelet[2429]: E1002 19:37:40.428038 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:37:40.438189 env[1316]: time="2023-10-02T19:37:40.438128594Z" level=info msg="RemoveContainer for \"78d3c3d2b905860cacf46f92b68bfbffa0971a6f7067d647770ed3a9fd868299\" returns successfully" Oct 2 19:37:41.240534 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c-rootfs.mount: Deactivated successfully. Oct 2 19:37:43.466439 kubelet[2429]: W1002 19:37:43.466375 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c.scope WatchSource:0}: task 9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c not found: not found Oct 2 19:37:54.213004 kubelet[2429]: E1002 19:37:54.212911 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:09.214607 kubelet[2429]: E1002 19:38:09.214192 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:23.882000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.888629 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:38:23.888815 kernel: audit: type=1400 audit(1696275503.882:1093): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.882000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c35e30 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:23.932657 kernel: audit: type=1300 audit(1696275503.882:1093): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c35e30 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:23.932831 kernel: audit: type=1327 audit(1696275503.882:1093): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:23.882000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:23.882000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.882000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000be5d40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:23.993185 kernel: audit: type=1400 audit(1696275503.882:1094): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:23.993368 kernel: audit: type=1300 audit(1696275503.882:1094): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000be5d40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:23.993398 kernel: audit: type=1327 audit(1696275503.882:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:23.882000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:24.214723 env[1316]: time="2023-10-02T19:38:24.214661985Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:38:24.259873 env[1316]: time="2023-10-02T19:38:24.259824391Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" Oct 2 19:38:24.260424 env[1316]: time="2023-10-02T19:38:24.260387002Z" level=info msg="StartContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" Oct 2 19:38:24.286204 systemd[1]: Started cri-containerd-47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53.scope. Oct 2 19:38:24.299082 systemd[1]: cri-containerd-47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53.scope: Deactivated successfully. Oct 2 19:38:24.304303 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53-rootfs.mount: Deactivated successfully. Oct 2 19:38:24.327155 env[1316]: time="2023-10-02T19:38:24.327090140Z" level=info msg="shim disconnected" id=47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53 Oct 2 19:38:24.327155 env[1316]: time="2023-10-02T19:38:24.327153441Z" level=warning msg="cleaning up after shim disconnected" id=47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53 namespace=k8s.io Oct 2 19:38:24.327155 env[1316]: time="2023-10-02T19:38:24.327166342Z" level=info msg="cleaning up dead shim" Oct 2 19:38:24.338502 env[1316]: time="2023-10-02T19:38:24.335642412Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:38:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2997 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:38:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:38:24.338502 env[1316]: time="2023-10-02T19:38:24.335975618Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:38:24.338502 env[1316]: time="2023-10-02T19:38:24.337993959Z" level=error msg="Failed to pipe stdout of container \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" error="reading from a closed fifo" Oct 2 19:38:24.338502 env[1316]: time="2023-10-02T19:38:24.338071660Z" level=error msg="Failed to pipe stderr of container \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" error="reading from a closed fifo" Oct 2 19:38:24.343582 env[1316]: time="2023-10-02T19:38:24.343536770Z" level=error msg="StartContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:38:24.343870 kubelet[2429]: E1002 19:38:24.343846 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53" Oct 2 19:38:24.344269 kubelet[2429]: E1002 19:38:24.344001 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:38:24.344269 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:38:24.344269 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:38:24.344269 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:38:24.344269 kubelet[2429]: E1002 19:38:24.344072 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:24.517000 kubelet[2429]: I1002 19:38:24.514720 2429 scope.go:115] "RemoveContainer" containerID="9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c" Oct 2 19:38:24.517000 kubelet[2429]: I1002 19:38:24.515210 2429 scope.go:115] "RemoveContainer" containerID="9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c" Oct 2 19:38:24.521278 env[1316]: time="2023-10-02T19:38:24.521203634Z" level=info msg="RemoveContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" Oct 2 19:38:24.522368 env[1316]: time="2023-10-02T19:38:24.522330756Z" level=info msg="RemoveContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\"" Oct 2 19:38:24.522741 env[1316]: time="2023-10-02T19:38:24.522685263Z" level=error msg="RemoveContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\" failed" error="failed to set removing state for container \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\": container is already in removing state" Oct 2 19:38:24.523145 kubelet[2429]: E1002 19:38:24.523123 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\": container is already in removing state" containerID="9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c" Oct 2 19:38:24.523336 kubelet[2429]: E1002 19:38:24.523325 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c": container is already in removing state; Skipping pod "cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)" Oct 2 19:38:24.523981 kubelet[2429]: E1002 19:38:24.523944 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:24.540229 env[1316]: time="2023-10-02T19:38:24.540174414Z" level=info msg="RemoveContainer for \"9b91da50896b912583d23c5e34c9c17c47c92f5b40ecbd80379327356dca6a4c\" returns successfully" Oct 2 19:38:24.624000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.643908 kernel: audit: type=1400 audit(1696275504.624:1095): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.644037 kernel: audit: type=1300 audit(1696275504.624:1095): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00971b560 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.624000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00971b560 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.624000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.681872 kernel: audit: type=1327 audit(1696275504.624:1095): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.682035 kernel: audit: type=1400 audit(1696275504.644:1096): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.644000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.644000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00971b5c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.644000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.644000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00c338a20 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.644000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.644000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00971b620 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.644000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c009948240 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00c7dece0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:38:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:38:27.447584 kubelet[2429]: W1002 19:38:27.447537 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53.scope WatchSource:0}: task 47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53 not found: not found Oct 2 19:38:29.279080 kubelet[2429]: E1002 19:38:29.279009 2429 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:38:29.320983 kubelet[2429]: E1002 19:38:29.320935 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:34.322401 kubelet[2429]: E1002 19:38:34.322349 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:35.212872 kubelet[2429]: E1002 19:38:35.212832 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:38.766000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.774199 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:38:38.774318 kernel: audit: type=1400 audit(1696275518.766:1101): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.766000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016943a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.818686 kernel: audit: type=1300 audit(1696275518.766:1101): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016943a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.820277 kernel: audit: type=1327 audit(1696275518.766:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.766000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.769000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.839031 kernel: audit: type=1400 audit(1696275518.769:1102): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.769000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c45920 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.859263 kernel: audit: type=1300 audit(1696275518.769:1102): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c45920 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.769000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.898483 kernel: audit: type=1327 audit(1696275518.769:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.898721 kernel: audit: type=1400 audit(1696275518.771:1103): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.771000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.771000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c45960 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.937435 kernel: audit: type=1300 audit(1696275518.771:1103): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c45960 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.937588 kernel: audit: type=1327 audit(1696275518.771:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.771000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:38.775000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.971256 kernel: audit: type=1400 audit(1696275518.775:1104): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:38:38.775000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c459a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:38:38.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:38:39.323523 kubelet[2429]: E1002 19:38:39.323481 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:44.324575 kubelet[2429]: E1002 19:38:44.324536 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:49.326342 kubelet[2429]: E1002 19:38:49.326303 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:50.212457 kubelet[2429]: E1002 19:38:50.212414 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:38:54.327246 kubelet[2429]: E1002 19:38:54.327204 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:58.511869 systemd[1]: Started sshd@7-10.200.8.20:22-10.200.12.6:57462.service. Oct 2 19:38:58.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.20:22-10.200.12.6:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:58.517979 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:38:58.518119 kernel: audit: type=1130 audit(1696275538.512:1105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.20:22-10.200.12.6:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:38:59.139000 audit[3016]: USER_ACCT pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.140583 sshd[3016]: Accepted publickey for core from 10.200.12.6 port 57462 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:38:59.160901 kernel: audit: type=1101 audit(1696275539.139:1106): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.160000 audit[3016]: CRED_ACQ pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.161632 sshd[3016]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:38:59.167529 systemd[1]: Started session-10.scope. Oct 2 19:38:59.168661 systemd-logind[1289]: New session 10 of user core. Oct 2 19:38:59.180776 kernel: audit: type=1103 audit(1696275539.160:1107): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.180924 kernel: audit: type=1006 audit(1696275539.160:1108): pid=3016 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:38:59.160000 audit[3016]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd68a9310 a2=3 a3=0 items=0 ppid=1 pid=3016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:59.160000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:38:59.213078 kernel: audit: type=1300 audit(1696275539.160:1108): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd68a9310 a2=3 a3=0 items=0 ppid=1 pid=3016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:38:59.213224 kernel: audit: type=1327 audit(1696275539.160:1108): proctitle=737368643A20636F7265205B707269765D Oct 2 19:38:59.213256 kernel: audit: type=1105 audit(1696275539.173:1109): pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.173000 audit[3016]: USER_START pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.176000 audit[3018]: CRED_ACQ pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.232902 kernel: audit: type=1103 audit(1696275539.176:1110): pid=3018 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.328085 kubelet[2429]: E1002 19:38:59.328038 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:38:59.655485 sshd[3016]: pam_unix(sshd:session): session closed for user core Oct 2 19:38:59.656000 audit[3016]: USER_END pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.659166 systemd[1]: sshd@7-10.200.8.20:22-10.200.12.6:57462.service: Deactivated successfully. Oct 2 19:38:59.660055 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:38:59.661904 systemd-logind[1289]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:38:59.663076 systemd-logind[1289]: Removed session 10. Oct 2 19:38:59.656000 audit[3016]: CRED_DISP pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.693917 kernel: audit: type=1106 audit(1696275539.656:1111): pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.694086 kernel: audit: type=1104 audit(1696275539.656:1112): pid=3016 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:38:59.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.20:22-10.200.12.6:57462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:02.212226 kubelet[2429]: E1002 19:39:02.212182 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:04.329416 kubelet[2429]: E1002 19:39:04.329358 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:09.330755 kubelet[2429]: E1002 19:39:09.330690 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:09.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.20:22-10.200.12.6:35484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:09.769818 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:09.769853 kernel: audit: type=1130 audit(1696275549.760:1114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.20:22-10.200.12.6:35484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:09.761384 systemd[1]: Started sshd@8-10.200.8.20:22-10.200.12.6:35484.service. Oct 2 19:39:10.398000 audit[3029]: USER_ACCT pid=3029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.421068 kernel: audit: type=1101 audit(1696275550.398:1115): pid=3029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.421125 sshd[3029]: Accepted publickey for core from 10.200.12.6 port 35484 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:10.421007 sshd[3029]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:10.399000 audit[3029]: CRED_ACQ pid=3029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.426213 systemd[1]: Started session-11.scope. Oct 2 19:39:10.427216 systemd-logind[1289]: New session 11 of user core. Oct 2 19:39:10.439976 kernel: audit: type=1103 audit(1696275550.399:1116): pid=3029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.440087 kernel: audit: type=1006 audit(1696275550.399:1117): pid=3029 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:39:10.399000 audit[3029]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc582dfb10 a2=3 a3=0 items=0 ppid=1 pid=3029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:10.467428 kernel: audit: type=1300 audit(1696275550.399:1117): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc582dfb10 a2=3 a3=0 items=0 ppid=1 pid=3029 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:10.467582 kernel: audit: type=1327 audit(1696275550.399:1117): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:10.399000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:10.432000 audit[3029]: USER_START pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.434000 audit[3031]: CRED_ACQ pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.508717 kernel: audit: type=1105 audit(1696275550.432:1118): pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.508894 kernel: audit: type=1103 audit(1696275550.434:1119): pid=3031 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.910167 sshd[3029]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:10.910000 audit[3029]: USER_END pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.913265 systemd-logind[1289]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:39:10.914708 systemd[1]: sshd@8-10.200.8.20:22-10.200.12.6:35484.service: Deactivated successfully. Oct 2 19:39:10.915462 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:39:10.917088 systemd-logind[1289]: Removed session 11. Oct 2 19:39:10.932065 kernel: audit: type=1106 audit(1696275550.910:1120): pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.932204 kernel: audit: type=1104 audit(1696275550.910:1121): pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.910000 audit[3029]: CRED_DISP pid=3029 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:10.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.20:22-10.200.12.6:35484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:14.331892 kubelet[2429]: E1002 19:39:14.331846 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:17.213158 kubelet[2429]: E1002 19:39:17.213110 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:19.332940 kubelet[2429]: E1002 19:39:19.332893 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:21.018143 systemd[1]: Started sshd@9-10.200.8.20:22-10.200.12.6:35878.service. Oct 2 19:39:21.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.20:22-10.200.12.6:35878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:21.027936 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:21.028056 kernel: audit: type=1130 audit(1696275561.017:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.20:22-10.200.12.6:35878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:21.666000 audit[3043]: USER_ACCT pid=3043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.689451 sshd[3043]: Accepted publickey for core from 10.200.12.6 port 35878 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:21.690276 kernel: audit: type=1101 audit(1696275561.666:1124): pid=3043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.690359 kernel: audit: type=1103 audit(1696275561.688:1125): pid=3043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.688000 audit[3043]: CRED_ACQ pid=3043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.689983 sshd[3043]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:21.695712 systemd[1]: Started session-12.scope. Oct 2 19:39:21.696938 systemd-logind[1289]: New session 12 of user core. Oct 2 19:39:21.707970 kernel: audit: type=1006 audit(1696275561.688:1126): pid=3043 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:39:21.688000 audit[3043]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5b5fd10 a2=3 a3=0 items=0 ppid=1 pid=3043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:21.735951 kernel: audit: type=1300 audit(1696275561.688:1126): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5b5fd10 a2=3 a3=0 items=0 ppid=1 pid=3043 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:21.688000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:21.742131 kernel: audit: type=1327 audit(1696275561.688:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:21.702000 audit[3043]: USER_START pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.742898 kernel: audit: type=1105 audit(1696275561.702:1127): pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.704000 audit[3045]: CRED_ACQ pid=3045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:21.762229 kernel: audit: type=1103 audit(1696275561.704:1128): pid=3045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:22.180763 sshd[3043]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:22.181000 audit[3043]: USER_END pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:22.184020 systemd-logind[1289]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:39:22.191488 systemd[1]: sshd@9-10.200.8.20:22-10.200.12.6:35878.service: Deactivated successfully. Oct 2 19:39:22.192226 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:39:22.193777 systemd-logind[1289]: Removed session 12. Oct 2 19:39:22.181000 audit[3043]: CRED_DISP pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:22.231974 kernel: audit: type=1106 audit(1696275562.181:1129): pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:22.232160 kernel: audit: type=1104 audit(1696275562.181:1130): pid=3043 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:22.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.20:22-10.200.12.6:35878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:23.883000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.883000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:23.883000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024bdfa0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:23.883000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:23.883000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001aabd10 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:23.883000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:24.334419 kubelet[2429]: E1002 19:39:24.334378 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:24.625000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.625000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0039dbad0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.625000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0039dbb60 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0097d73a0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0099fc540 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:24.646000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:24.646000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0039dbd40 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.646000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c004404660 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:39:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:39:29.213277 kubelet[2429]: E1002 19:39:29.213234 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:29.335552 kubelet[2429]: E1002 19:39:29.335513 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:32.299706 systemd[1]: Started sshd@10-10.200.8.20:22-10.200.12.6:42000.service. Oct 2 19:39:32.334137 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:39:32.334323 kernel: audit: type=1130 audit(1696275572.299:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.20:22-10.200.12.6:42000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:32.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.20:22-10.200.12.6:42000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:32.942000 audit[3058]: USER_ACCT pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:32.969429 sshd[3058]: Accepted publickey for core from 10.200.12.6 port 42000 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:32.968000 audit[3058]: CRED_ACQ pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:32.970182 sshd[3058]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:32.982467 systemd-logind[1289]: New session 13 of user core. Oct 2 19:39:32.991754 systemd[1]: Started session-13.scope. Oct 2 19:39:33.003491 kernel: audit: type=1101 audit(1696275572.942:1141): pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.004304 kernel: audit: type=1103 audit(1696275572.968:1142): pid=3058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.005123 kernel: audit: type=1006 audit(1696275572.968:1143): pid=3058 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:39:33.017936 kernel: audit: type=1300 audit(1696275572.968:1143): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3293e860 a2=3 a3=0 items=0 ppid=1 pid=3058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:32.968000 audit[3058]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3293e860 a2=3 a3=0 items=0 ppid=1 pid=3058 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:33.039952 kernel: audit: type=1327 audit(1696275572.968:1143): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:32.968000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:32.999000 audit[3058]: USER_START pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.069568 kernel: audit: type=1105 audit(1696275572.999:1144): pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.070540 kernel: audit: type=1103 audit(1696275573.002:1145): pid=3060 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.002000 audit[3060]: CRED_ACQ pid=3060 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.443426 sshd[3058]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:33.445000 audit[3058]: USER_END pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.457232 systemd-logind[1289]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:39:33.458655 systemd[1]: sshd@10-10.200.8.20:22-10.200.12.6:42000.service: Deactivated successfully. Oct 2 19:39:33.459482 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:39:33.466393 systemd-logind[1289]: Removed session 13. Oct 2 19:39:33.475921 kernel: audit: type=1106 audit(1696275573.445:1146): pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.445000 audit[3058]: CRED_DISP pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:33.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.20:22-10.200.12.6:42000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:33.492965 kernel: audit: type=1104 audit(1696275573.445:1147): pid=3058 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:34.336774 kubelet[2429]: E1002 19:39:34.336740 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:38.770000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.775715 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:39:38.775862 kernel: audit: type=1400 audit(1696275578.770:1149): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.770000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.811280 kernel: audit: type=1400 audit(1696275578.770:1150): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.811438 kernel: audit: type=1300 audit(1696275578.770:1150): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe87e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.770000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe87e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.833999 kernel: audit: type=1327 audit(1696275578.770:1150): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.770000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.770000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe8a00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.889819 kernel: audit: type=1400 audit(1696275578.770:1151): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.889985 kernel: audit: type=1300 audit(1696275578.770:1151): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe8a00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.890017 kernel: audit: type=1327 audit(1696275578.770:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.770000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001884820 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.933121 kernel: audit: type=1300 audit(1696275578.770:1149): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001884820 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.770000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.775000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.954326 kernel: audit: type=1327 audit(1696275578.770:1149): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:38.954427 kernel: audit: type=1400 audit(1696275578.775:1152): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:39:38.775000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe8c40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:39:38.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:39:39.338559 kubelet[2429]: E1002 19:39:39.338520 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:42.213044 kubelet[2429]: E1002 19:39:42.212993 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:43.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.20:22-10.200.12.6:37264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:43.549176 systemd[1]: Started sshd@11-10.200.8.20:22-10.200.12.6:37264.service. Oct 2 19:39:44.339920 kubelet[2429]: E1002 19:39:44.339863 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:44.526000 audit[3071]: USER_ACCT pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.528849 sshd[3071]: Accepted publickey for core from 10.200.12.6 port 37264 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:44.532172 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:39:44.532265 kernel: audit: type=1101 audit(1696275584.526:1154): pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.532830 sshd[3071]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:44.538225 systemd[1]: Started session-14.scope. Oct 2 19:39:44.539842 systemd-logind[1289]: New session 14 of user core. Oct 2 19:39:44.531000 audit[3071]: CRED_ACQ pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.569175 kernel: audit: type=1103 audit(1696275584.531:1155): pid=3071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.569584 kernel: audit: type=1006 audit(1696275584.531:1156): pid=3071 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:39:44.531000 audit[3071]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe5b13500 a2=3 a3=0 items=0 ppid=1 pid=3071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:44.604949 kernel: audit: type=1300 audit(1696275584.531:1156): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe5b13500 a2=3 a3=0 items=0 ppid=1 pid=3071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:44.605089 kernel: audit: type=1327 audit(1696275584.531:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:44.531000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:44.544000 audit[3071]: USER_START pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.633319 kernel: audit: type=1105 audit(1696275584.544:1157): pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.545000 audit[3075]: CRED_ACQ pid=3075 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:44.651932 kernel: audit: type=1103 audit(1696275584.545:1158): pid=3075 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:45.026844 sshd[3071]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:45.027000 audit[3071]: USER_END pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:45.030950 systemd[1]: sshd@11-10.200.8.20:22-10.200.12.6:37264.service: Deactivated successfully. Oct 2 19:39:45.031720 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:39:45.033292 systemd-logind[1289]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:39:45.034252 systemd-logind[1289]: Removed session 14. Oct 2 19:39:45.048899 kernel: audit: type=1106 audit(1696275585.027:1159): pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:45.049006 kernel: audit: type=1104 audit(1696275585.027:1160): pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:45.027000 audit[3071]: CRED_DISP pid=3071 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:45.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.20:22-10.200.12.6:37264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:45.079905 kernel: audit: type=1131 audit(1696275585.027:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.20:22-10.200.12.6:37264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:49.341170 kubelet[2429]: E1002 19:39:49.341135 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:54.342074 kubelet[2429]: E1002 19:39:54.342033 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:55.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.20:22-10.200.12.6:58226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:55.131766 systemd[1]: Started sshd@12-10.200.8.20:22-10.200.12.6:58226.service. Oct 2 19:39:55.150512 kernel: audit: type=1130 audit(1696275595.131:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.20:22-10.200.12.6:58226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:56.022000 audit[3088]: USER_ACCT pid=3088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.023771 sshd[3088]: Accepted publickey for core from 10.200.12.6 port 58226 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:39:56.046000 audit[3088]: CRED_ACQ pid=3088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.047844 sshd[3088]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:39:56.070429 systemd[1]: Started session-15.scope. Oct 2 19:39:56.071855 systemd-logind[1289]: New session 15 of user core. Oct 2 19:39:56.081670 kernel: audit: type=1101 audit(1696275596.022:1163): pid=3088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.081824 kernel: audit: type=1103 audit(1696275596.046:1164): pid=3088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.046000 audit[3088]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd467921c0 a2=3 a3=0 items=0 ppid=1 pid=3088 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:56.097983 kernel: audit: type=1006 audit(1696275596.046:1165): pid=3088 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:39:56.098042 kernel: audit: type=1300 audit(1696275596.046:1165): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd467921c0 a2=3 a3=0 items=0 ppid=1 pid=3088 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:39:56.046000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:56.115974 kernel: audit: type=1327 audit(1696275596.046:1165): proctitle=737368643A20636F7265205B707269765D Oct 2 19:39:56.081000 audit[3088]: USER_START pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.122117 kernel: audit: type=1105 audit(1696275596.081:1166): pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.088000 audit[3092]: CRED_ACQ pid=3092 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.157502 kernel: audit: type=1103 audit(1696275596.088:1167): pid=3092 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.214978 env[1316]: time="2023-10-02T19:39:56.214923608Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:39:56.251410 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2525038444.mount: Deactivated successfully. Oct 2 19:39:56.258100 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1910907313.mount: Deactivated successfully. Oct 2 19:39:56.271574 env[1316]: time="2023-10-02T19:39:56.271504775Z" level=info msg="CreateContainer within sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\"" Oct 2 19:39:56.272225 env[1316]: time="2023-10-02T19:39:56.272179181Z" level=info msg="StartContainer for \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\"" Oct 2 19:39:56.295954 systemd[1]: Started cri-containerd-08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4.scope. Oct 2 19:39:56.306061 systemd[1]: cri-containerd-08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4.scope: Deactivated successfully. Oct 2 19:39:56.330371 env[1316]: time="2023-10-02T19:39:56.330313560Z" level=info msg="shim disconnected" id=08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4 Oct 2 19:39:56.330371 env[1316]: time="2023-10-02T19:39:56.330369261Z" level=warning msg="cleaning up after shim disconnected" id=08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4 namespace=k8s.io Oct 2 19:39:56.330371 env[1316]: time="2023-10-02T19:39:56.330381261Z" level=info msg="cleaning up dead shim" Oct 2 19:39:56.338599 env[1316]: time="2023-10-02T19:39:56.338540728Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:39:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3118 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:39:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:39:56.338893 env[1316]: time="2023-10-02T19:39:56.338822531Z" level=error msg="copy shim log" error="read /proc/self/fd/52: file already closed" Oct 2 19:39:56.339127 env[1316]: time="2023-10-02T19:39:56.339093733Z" level=error msg="Failed to pipe stdout of container \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\"" error="reading from a closed fifo" Oct 2 19:39:56.339226 env[1316]: time="2023-10-02T19:39:56.339194034Z" level=error msg="Failed to pipe stderr of container \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\"" error="reading from a closed fifo" Oct 2 19:39:56.344351 env[1316]: time="2023-10-02T19:39:56.344291476Z" level=error msg="StartContainer for \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:39:56.344678 kubelet[2429]: E1002 19:39:56.344655 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4" Oct 2 19:39:56.345084 kubelet[2429]: E1002 19:39:56.344784 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:39:56.345084 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:39:56.345084 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:39:56.345084 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tc4zv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:39:56.345084 kubelet[2429]: E1002 19:39:56.344833 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:56.520684 sshd[3088]: pam_unix(sshd:session): session closed for user core Oct 2 19:39:56.521000 audit[3088]: USER_END pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.524622 systemd[1]: sshd@12-10.200.8.20:22-10.200.12.6:58226.service: Deactivated successfully. Oct 2 19:39:56.525542 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:39:56.527041 systemd-logind[1289]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:39:56.528018 systemd-logind[1289]: Removed session 15. Oct 2 19:39:56.543415 kernel: audit: type=1106 audit(1696275596.521:1168): pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.543572 kernel: audit: type=1104 audit(1696275596.521:1169): pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.521000 audit[3088]: CRED_DISP pid=3088 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:39:56.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.20:22-10.200.12.6:58226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:39:56.697499 kubelet[2429]: I1002 19:39:56.697461 2429 scope.go:115] "RemoveContainer" containerID="47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53" Oct 2 19:39:56.697986 kubelet[2429]: I1002 19:39:56.697950 2429 scope.go:115] "RemoveContainer" containerID="47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53" Oct 2 19:39:56.700952 env[1316]: time="2023-10-02T19:39:56.700908418Z" level=info msg="RemoveContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" Oct 2 19:39:56.702033 env[1316]: time="2023-10-02T19:39:56.701994527Z" level=info msg="RemoveContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\"" Oct 2 19:39:56.702406 env[1316]: time="2023-10-02T19:39:56.702344930Z" level=error msg="RemoveContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\" failed" error="failed to set removing state for container \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\": container is already in removing state" Oct 2 19:39:56.702845 kubelet[2429]: E1002 19:39:56.702820 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\": container is already in removing state" containerID="47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53" Oct 2 19:39:56.702954 kubelet[2429]: E1002 19:39:56.702864 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53": container is already in removing state; Skipping pod "cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)" Oct 2 19:39:56.703251 kubelet[2429]: E1002 19:39:56.703221 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:39:56.723815 env[1316]: time="2023-10-02T19:39:56.723755507Z" level=info msg="RemoveContainer for \"47d39ac7e73121efe420a2a2359fc9d28c19126f873b4e8dece90f1448c09e53\" returns successfully" Oct 2 19:39:57.248481 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4-rootfs.mount: Deactivated successfully. Oct 2 19:39:59.342897 kubelet[2429]: E1002 19:39:59.342845 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:39:59.435302 kubelet[2429]: W1002 19:39:59.435240 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice/cri-containerd-08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4.scope WatchSource:0}: task 08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4 not found: not found Oct 2 19:40:04.344027 kubelet[2429]: E1002 19:40:04.343985 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:06.627361 systemd[1]: Started sshd@13-10.200.8.20:22-10.200.12.6:60946.service. Oct 2 19:40:06.650947 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:06.651127 kernel: audit: type=1130 audit(1696275606.627:1171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.20:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:06.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.20:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:07.255000 audit[3144]: USER_ACCT pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.275917 kernel: audit: type=1101 audit(1696275607.255:1172): pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.275992 sshd[3144]: Accepted publickey for core from 10.200.12.6 port 60946 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:07.276198 sshd[3144]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:07.274000 audit[3144]: CRED_ACQ pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.282176 systemd[1]: Started session-16.scope. Oct 2 19:40:07.283213 systemd-logind[1289]: New session 16 of user core. Oct 2 19:40:07.297907 kernel: audit: type=1103 audit(1696275607.274:1173): pid=3144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.298051 kernel: audit: type=1006 audit(1696275607.274:1174): pid=3144 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:40:07.274000 audit[3144]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8cf7c750 a2=3 a3=0 items=0 ppid=1 pid=3144 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:07.308899 kernel: audit: type=1300 audit(1696275607.274:1174): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8cf7c750 a2=3 a3=0 items=0 ppid=1 pid=3144 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:07.327504 kernel: audit: type=1327 audit(1696275607.274:1174): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:07.274000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:07.287000 audit[3144]: USER_START pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.352653 kernel: audit: type=1105 audit(1696275607.287:1175): pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.352810 kernel: audit: type=1103 audit(1696275607.290:1176): pid=3146 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.290000 audit[3146]: CRED_ACQ pid=3146 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.768763 sshd[3144]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:07.769000 audit[3144]: USER_END pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.772149 systemd-logind[1289]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:40:07.773432 systemd[1]: sshd@13-10.200.8.20:22-10.200.12.6:60946.service: Deactivated successfully. Oct 2 19:40:07.774256 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:40:07.775609 systemd-logind[1289]: Removed session 16. Oct 2 19:40:07.769000 audit[3144]: CRED_DISP pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.807065 kernel: audit: type=1106 audit(1696275607.769:1177): pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.807235 kernel: audit: type=1104 audit(1696275607.769:1178): pid=3144 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:07.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.20:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:09.344896 kubelet[2429]: E1002 19:40:09.344849 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:11.212677 kubelet[2429]: E1002 19:40:11.212635 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:40:14.346551 kubelet[2429]: E1002 19:40:14.346506 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:17.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.20:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:17.874256 systemd[1]: Started sshd@14-10.200.8.20:22-10.200.12.6:53078.service. Oct 2 19:40:17.883517 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:17.883645 kernel: audit: type=1130 audit(1696275617.872:1180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.20:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:18.517000 audit[3164]: USER_ACCT pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.521000 sshd[3164]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:18.539988 kernel: audit: type=1101 audit(1696275618.517:1181): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.540048 sshd[3164]: Accepted publickey for core from 10.200.12.6 port 53078 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:18.517000 audit[3164]: CRED_ACQ pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.544981 systemd[1]: Started session-17.scope. Oct 2 19:40:18.545950 systemd-logind[1289]: New session 17 of user core. Oct 2 19:40:18.568606 kernel: audit: type=1103 audit(1696275618.517:1182): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.568761 kernel: audit: type=1006 audit(1696275618.517:1183): pid=3164 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:40:18.568786 kernel: audit: type=1300 audit(1696275618.517:1183): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe32dc6960 a2=3 a3=0 items=0 ppid=1 pid=3164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:18.517000 audit[3164]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe32dc6960 a2=3 a3=0 items=0 ppid=1 pid=3164 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:18.517000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:18.587996 kernel: audit: type=1327 audit(1696275618.517:1183): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:18.549000 audit[3164]: USER_START pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.593892 kernel: audit: type=1105 audit(1696275618.549:1184): pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.549000 audit[3166]: CRED_ACQ pid=3166 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:18.629380 kernel: audit: type=1103 audit(1696275618.549:1185): pid=3166 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:19.034129 sshd[3164]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:19.034000 audit[3164]: USER_END pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:19.038249 systemd-logind[1289]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:40:19.040101 systemd[1]: sshd@14-10.200.8.20:22-10.200.12.6:53078.service: Deactivated successfully. Oct 2 19:40:19.040995 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:40:19.042715 systemd-logind[1289]: Removed session 17. Oct 2 19:40:19.034000 audit[3164]: CRED_DISP pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:19.056904 kernel: audit: type=1106 audit(1696275619.034:1186): pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:19.056953 kernel: audit: type=1104 audit(1696275619.034:1187): pid=3164 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:19.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.20:22-10.200.12.6:53078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:19.347334 kubelet[2429]: E1002 19:40:19.347228 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:23.883000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.892405 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:23.893991 kernel: audit: type=1400 audit(1696275623.883:1189): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.884000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.934630 kernel: audit: type=1400 audit(1696275623.884:1190): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:23.937367 kernel: audit: type=1300 audit(1696275623.884:1190): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e176e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:23.884000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e176e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:23.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:23.883000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee6510 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:24.013474 kernel: audit: type=1327 audit(1696275623.884:1190): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:24.016282 kernel: audit: type=1300 audit(1696275623.883:1189): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee6510 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:24.017332 kernel: audit: type=1327 audit(1696275623.883:1189): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:23.883000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:24.349048 kubelet[2429]: E1002 19:40:24.349008 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:24.626000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.626000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e2789f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.666005 kernel: audit: type=1400 audit(1696275624.626:1191): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.666165 kernel: audit: type=1300 audit(1696275624.626:1191): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e2789f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.666191 kernel: audit: type=1327 audit(1696275624.626:1191): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.626000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.699858 kernel: audit: type=1400 audit(1696275624.645:1192): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e79e160 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e278a50 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e79e1c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e39a060 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:24.645000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:24.645000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e39a090 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:40:24.645000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:40:25.212839 kubelet[2429]: E1002 19:40:25.212798 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:40:29.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.20:22-10.200.12.6:47886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:29.140817 systemd[1]: Started sshd@15-10.200.8.20:22-10.200.12.6:47886.service. Oct 2 19:40:29.155370 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:40:29.155460 kernel: audit: type=1130 audit(1696275629.139:1197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.20:22-10.200.12.6:47886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:29.350190 kubelet[2429]: E1002 19:40:29.350147 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:29.778000 audit[3178]: USER_ACCT pid=3178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.799599 sshd[3178]: Accepted publickey for core from 10.200.12.6 port 47886 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:29.799973 kernel: audit: type=1101 audit(1696275629.778:1198): pid=3178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.800111 sshd[3178]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:29.797000 audit[3178]: CRED_ACQ pid=3178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.807203 systemd[1]: Started session-18.scope. Oct 2 19:40:29.808317 systemd-logind[1289]: New session 18 of user core. Oct 2 19:40:29.828998 kernel: audit: type=1103 audit(1696275629.797:1199): pid=3178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.829145 kernel: audit: type=1006 audit(1696275629.797:1200): pid=3178 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 19:40:29.829175 kernel: audit: type=1300 audit(1696275629.797:1200): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc45e77160 a2=3 a3=0 items=0 ppid=1 pid=3178 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:29.797000 audit[3178]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc45e77160 a2=3 a3=0 items=0 ppid=1 pid=3178 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:29.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:29.847915 kernel: audit: type=1327 audit(1696275629.797:1200): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:29.811000 audit[3178]: USER_START pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.853997 kernel: audit: type=1105 audit(1696275629.811:1201): pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.813000 audit[3182]: CRED_ACQ pid=3182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:29.889618 kernel: audit: type=1103 audit(1696275629.813:1202): pid=3182 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:30.337753 sshd[3178]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:30.337000 audit[3178]: USER_END pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:30.341064 systemd[1]: sshd@15-10.200.8.20:22-10.200.12.6:47886.service: Deactivated successfully. Oct 2 19:40:30.341851 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:40:30.343396 systemd-logind[1289]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:40:30.344392 systemd-logind[1289]: Removed session 18. Oct 2 19:40:30.337000 audit[3178]: CRED_DISP pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:30.381176 kernel: audit: type=1106 audit(1696275630.337:1203): pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:30.381315 kernel: audit: type=1104 audit(1696275630.337:1204): pid=3178 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:30.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.20:22-10.200.12.6:47886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:34.351764 kubelet[2429]: E1002 19:40:34.351719 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:38.212912 kubelet[2429]: E1002 19:40:38.212848 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:40:38.771000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.781306 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:40:38.784208 kernel: audit: type=1400 audit(1696275638.771:1206): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.771000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17e20 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.771000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.854961 kernel: audit: type=1300 audit(1696275638.771:1206): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17e20 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.856260 kernel: audit: type=1327 audit(1696275638.771:1206): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.857048 kernel: audit: type=1400 audit(1696275638.773:1207): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.773000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.773000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17e40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.875644 kernel: audit: type=1300 audit(1696275638.773:1207): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17e40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.907433 kernel: audit: type=1327 audit(1696275638.773:1207): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.773000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.777000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.945595 kernel: audit: type=1400 audit(1696275638.777:1208): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.945774 kernel: audit: type=1300 audit(1696275638.777:1208): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001694da0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.777000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001694da0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.997158 kernel: audit: type=1327 audit(1696275638.777:1208): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:38.997775 kernel: audit: type=1400 audit(1696275638.777:1209): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.777000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:40:38.777000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e17f60 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:40:38.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:40:39.352989 kubelet[2429]: E1002 19:40:39.352952 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:40.406856 systemd[1]: Started sshd@16-10.200.8.20:22-10.200.12.6:51502.service. Oct 2 19:40:40.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.20:22-10.200.12.6:51502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:41.037000 audit[3193]: USER_ACCT pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.038839 sshd[3193]: Accepted publickey for core from 10.200.12.6 port 51502 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:41.039000 audit[3193]: CRED_ACQ pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.039000 audit[3193]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd375c1c90 a2=3 a3=0 items=0 ppid=1 pid=3193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:41.039000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:41.040434 sshd[3193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:41.045635 systemd[1]: Started session-19.scope. Oct 2 19:40:41.046006 systemd-logind[1289]: New session 19 of user core. Oct 2 19:40:41.049000 audit[3193]: USER_START pid=3193 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.051000 audit[3195]: CRED_ACQ pid=3195 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.546227 sshd[3193]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:41.546000 audit[3193]: USER_END pid=3193 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.547000 audit[3193]: CRED_DISP pid=3193 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:41.550046 systemd[1]: sshd@16-10.200.8.20:22-10.200.12.6:51502.service: Deactivated successfully. Oct 2 19:40:41.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.20:22-10.200.12.6:51502 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:41.551279 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:40:41.552119 systemd-logind[1289]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:40:41.552978 systemd-logind[1289]: Removed session 19. Oct 2 19:40:41.652445 systemd[1]: Started sshd@17-10.200.8.20:22-10.200.12.6:51508.service. Oct 2 19:40:41.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.20:22-10.200.12.6:51508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:42.275000 audit[3206]: USER_ACCT pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:42.276305 sshd[3206]: Accepted publickey for core from 10.200.12.6 port 51508 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:42.276000 audit[3206]: CRED_ACQ pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:42.276000 audit[3206]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdaae52f50 a2=3 a3=0 items=0 ppid=1 pid=3206 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:42.276000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:42.277751 sshd[3206]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:42.282947 systemd[1]: Started session-20.scope. Oct 2 19:40:42.283412 systemd-logind[1289]: New session 20 of user core. Oct 2 19:40:42.287000 audit[3206]: USER_START pid=3206 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:42.289000 audit[3208]: CRED_ACQ pid=3208 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:43.484778 sshd[3206]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:43.485000 audit[3206]: USER_END pid=3206 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:43.485000 audit[3206]: CRED_DISP pid=3206 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:43.488583 systemd[1]: sshd@17-10.200.8.20:22-10.200.12.6:51508.service: Deactivated successfully. Oct 2 19:40:43.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.20:22-10.200.12.6:51508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:43.489746 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:40:43.490554 systemd-logind[1289]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:40:43.491449 systemd-logind[1289]: Removed session 20. Oct 2 19:40:43.593350 systemd[1]: Started sshd@18-10.200.8.20:22-10.200.12.6:51514.service. Oct 2 19:40:43.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.20:22-10.200.12.6:51514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:44.354259 kubelet[2429]: E1002 19:40:44.354078 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:44.529771 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:40:44.529873 kernel: audit: type=1101 audit(1696275644.515:1229): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.515000 audit[3216]: USER_ACCT pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.529163 sshd[3216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:44.530321 sshd[3216]: Accepted publickey for core from 10.200.12.6 port 51514 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:44.546396 systemd[1]: Started session-21.scope. Oct 2 19:40:44.548660 systemd-logind[1289]: New session 21 of user core. Oct 2 19:40:44.524000 audit[3216]: CRED_ACQ pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.582899 kernel: audit: type=1103 audit(1696275644.524:1230): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.583024 kernel: audit: type=1006 audit(1696275644.525:1231): pid=3216 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:40:44.525000 audit[3216]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2a6a9700 a2=3 a3=0 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:44.616691 kernel: audit: type=1300 audit(1696275644.525:1231): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2a6a9700 a2=3 a3=0 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:44.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:44.558000 audit[3216]: USER_START pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.646872 kernel: audit: type=1327 audit(1696275644.525:1231): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:44.648033 kernel: audit: type=1105 audit(1696275644.558:1232): pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.648070 kernel: audit: type=1103 audit(1696275644.560:1233): pid=3220 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:44.560000 audit[3220]: CRED_ACQ pid=3220 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:45.040722 sshd[3216]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:45.041000 audit[3216]: USER_END pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:45.050438 systemd[1]: sshd@18-10.200.8.20:22-10.200.12.6:51514.service: Deactivated successfully. Oct 2 19:40:45.051224 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:40:45.054370 systemd-logind[1289]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:40:45.055434 systemd-logind[1289]: Removed session 21. Oct 2 19:40:45.041000 audit[3216]: CRED_DISP pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:45.092688 kernel: audit: type=1106 audit(1696275645.041:1234): pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:45.094739 kernel: audit: type=1104 audit(1696275645.041:1235): pid=3216 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:45.096576 kernel: audit: type=1131 audit(1696275645.047:1236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.20:22-10.200.12.6:51514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:45.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.20:22-10.200.12.6:51514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:49.355723 kubelet[2429]: E1002 19:40:49.355687 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:52.212565 kubelet[2429]: E1002 19:40:52.212312 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:40:54.356973 kubelet[2429]: E1002 19:40:54.356929 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:40:55.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.20:22-10.200.12.6:44342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:55.150164 systemd[1]: Started sshd@19-10.200.8.20:22-10.200.12.6:44342.service. Oct 2 19:40:55.171907 kernel: audit: type=1130 audit(1696275655.149:1237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.20:22-10.200.12.6:44342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:56.046000 audit[3230]: USER_ACCT pid=3230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.068527 sshd[3230]: Accepted publickey for core from 10.200.12.6 port 44342 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:40:56.068904 kernel: audit: type=1101 audit(1696275656.046:1238): pid=3230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.069027 sshd[3230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:40:56.067000 audit[3230]: CRED_ACQ pid=3230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.075195 systemd[1]: Started session-22.scope. Oct 2 19:40:56.076716 systemd-logind[1289]: New session 22 of user core. Oct 2 19:40:56.098276 kernel: audit: type=1103 audit(1696275656.067:1239): pid=3230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.098440 kernel: audit: type=1006 audit(1696275656.067:1240): pid=3230 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:40:56.098475 kernel: audit: type=1300 audit(1696275656.067:1240): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe37d39c90 a2=3 a3=0 items=0 ppid=1 pid=3230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:56.067000 audit[3230]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe37d39c90 a2=3 a3=0 items=0 ppid=1 pid=3230 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:40:56.067000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:56.117987 kernel: audit: type=1327 audit(1696275656.067:1240): proctitle=737368643A20636F7265205B707269765D Oct 2 19:40:56.123952 kernel: audit: type=1105 audit(1696275656.082:1241): pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.082000 audit[3230]: USER_START pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.084000 audit[3232]: CRED_ACQ pid=3232 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.162835 kernel: audit: type=1103 audit(1696275656.084:1242): pid=3232 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.571857 sshd[3230]: pam_unix(sshd:session): session closed for user core Oct 2 19:40:56.572000 audit[3230]: USER_END pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.576715 systemd[1]: sshd@19-10.200.8.20:22-10.200.12.6:44342.service: Deactivated successfully. Oct 2 19:40:56.577539 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:40:56.579230 systemd-logind[1289]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:40:56.580237 systemd-logind[1289]: Removed session 22. Oct 2 19:40:56.593910 kernel: audit: type=1106 audit(1696275656.572:1243): pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.594068 kernel: audit: type=1104 audit(1696275656.572:1244): pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.572000 audit[3230]: CRED_DISP pid=3230 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:40:56.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.20:22-10.200.12.6:44342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:40:59.358123 kubelet[2429]: E1002 19:40:59.358091 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:04.212733 kubelet[2429]: E1002 19:41:04.212690 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:41:04.359894 kubelet[2429]: E1002 19:41:04.359849 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:06.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.20:22-10.200.12.6:55514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:06.678657 systemd[1]: Started sshd@20-10.200.8.20:22-10.200.12.6:55514.service. Oct 2 19:41:06.684493 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:06.684648 kernel: audit: type=1130 audit(1696275666.678:1246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.20:22-10.200.12.6:55514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:07.306000 audit[3242]: USER_ACCT pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.311427 sshd[3242]: Accepted publickey for core from 10.200.12.6 port 55514 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:07.331923 kernel: audit: type=1101 audit(1696275667.306:1247): pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.331000 audit[3242]: CRED_ACQ pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.332707 sshd[3242]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:07.337998 systemd[1]: Started session-23.scope. Oct 2 19:41:07.339187 systemd-logind[1289]: New session 23 of user core. Oct 2 19:41:07.356086 kernel: audit: type=1103 audit(1696275667.331:1248): pid=3242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.356233 kernel: audit: type=1006 audit(1696275667.331:1249): pid=3242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:41:07.361015 kernel: audit: type=1300 audit(1696275667.331:1249): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5bd9770 a2=3 a3=0 items=0 ppid=1 pid=3242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:07.331000 audit[3242]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5bd9770 a2=3 a3=0 items=0 ppid=1 pid=3242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:07.331000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:07.344000 audit[3242]: USER_START pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.386934 kernel: audit: type=1327 audit(1696275667.331:1249): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:07.386994 kernel: audit: type=1105 audit(1696275667.344:1250): pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.419105 kernel: audit: type=1103 audit(1696275667.346:1251): pid=3244 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.346000 audit[3244]: CRED_ACQ pid=3244 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.817991 sshd[3242]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:07.819000 audit[3242]: USER_END pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.823264 systemd[1]: sshd@20-10.200.8.20:22-10.200.12.6:55514.service: Deactivated successfully. Oct 2 19:41:07.824407 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:41:07.826388 systemd-logind[1289]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:41:07.827650 systemd-logind[1289]: Removed session 23. Oct 2 19:41:07.819000 audit[3242]: CRED_DISP pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.841992 kernel: audit: type=1106 audit(1696275667.819:1252): pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.842054 kernel: audit: type=1104 audit(1696275667.819:1253): pid=3242 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:07.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.20:22-10.200.12.6:55514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:09.360611 kubelet[2429]: E1002 19:41:09.360574 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:14.361552 kubelet[2429]: E1002 19:41:14.361495 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:16.212769 kubelet[2429]: E1002 19:41:16.212719 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:41:17.924469 systemd[1]: Started sshd@21-10.200.8.20:22-10.200.12.6:55212.service. Oct 2 19:41:17.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.20:22-10.200.12.6:55212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:17.934889 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:17.934985 kernel: audit: type=1130 audit(1696275677.923:1255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.20:22-10.200.12.6:55212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:18.568000 audit[3256]: USER_ACCT pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.569628 sshd[3256]: Accepted publickey for core from 10.200.12.6 port 55212 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:18.588908 kernel: audit: type=1101 audit(1696275678.568:1256): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.588000 audit[3256]: CRED_ACQ pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.589668 sshd[3256]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:18.599627 systemd[1]: Started session-24.scope. Oct 2 19:41:18.600778 systemd-logind[1289]: New session 24 of user core. Oct 2 19:41:18.608621 kernel: audit: type=1103 audit(1696275678.588:1257): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.608723 kernel: audit: type=1006 audit(1696275678.588:1258): pid=3256 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:41:18.588000 audit[3256]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25dc48c0 a2=3 a3=0 items=0 ppid=1 pid=3256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:18.637250 kernel: audit: type=1300 audit(1696275678.588:1258): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25dc48c0 a2=3 a3=0 items=0 ppid=1 pid=3256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:18.638099 kernel: audit: type=1327 audit(1696275678.588:1258): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:18.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:18.604000 audit[3256]: USER_START pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.662143 kernel: audit: type=1105 audit(1696275678.604:1259): pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.607000 audit[3258]: CRED_ACQ pid=3258 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:18.678134 kernel: audit: type=1103 audit(1696275678.607:1260): pid=3258 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:19.081506 sshd[3256]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:19.082000 audit[3256]: USER_END pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:19.085442 systemd-logind[1289]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:41:19.087074 systemd[1]: sshd@21-10.200.8.20:22-10.200.12.6:55212.service: Deactivated successfully. Oct 2 19:41:19.087846 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:41:19.089477 systemd-logind[1289]: Removed session 24. Oct 2 19:41:19.082000 audit[3256]: CRED_DISP pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:19.104978 kernel: audit: type=1106 audit(1696275679.082:1261): pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:19.105025 kernel: audit: type=1104 audit(1696275679.082:1262): pid=3256 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:19.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.20:22-10.200.12.6:55212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:19.363342 kubelet[2429]: E1002 19:41:19.363234 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:23.887000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.892743 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:23.892840 kernel: audit: type=1400 audit(1696275683.887:1264): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.887000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00226a820 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:23.939587 kernel: audit: type=1300 audit(1696275683.887:1264): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00226a820 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:23.940011 kernel: audit: type=1327 audit(1696275683.887:1264): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:23.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:23.890000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.981217 kernel: audit: type=1400 audit(1696275683.890:1265): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:23.982416 kernel: audit: type=1300 audit(1696275683.890:1265): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f7a3c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:23.890000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f7a3c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:23.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:24.025981 kernel: audit: type=1327 audit(1696275683.890:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:24.364210 kubelet[2429]: E1002 19:41:24.364175 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:24.627000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.627000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0090bc360 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.673964 kernel: audit: type=1400 audit(1696275684.627:1266): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.674145 kernel: audit: type=1300 audit(1696275684.627:1266): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0090bc360 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.684100 kernel: audit: type=1327 audit(1696275684.627:1266): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.627000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.648000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.718000 kernel: audit: type=1400 audit(1696275684.648:1267): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.648000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0090bc3c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.648000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.648000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0090bc3f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.648000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.648000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0092f9f60 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.648000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.648000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0090bc480 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:24.648000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:24.648000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c008ffb520 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:41:24.648000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:41:28.212174 kubelet[2429]: E1002 19:41:28.212119 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:41:29.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.20:22-10.200.12.6:55522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:29.188239 systemd[1]: Started sshd@22-10.200.8.20:22-10.200.12.6:55522.service. Oct 2 19:41:29.193836 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:41:29.193965 kernel: audit: type=1130 audit(1696275689.187:1272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.20:22-10.200.12.6:55522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:29.366112 kubelet[2429]: E1002 19:41:29.366074 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:29.820000 audit[3268]: USER_ACCT pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.821671 sshd[3268]: Accepted publickey for core from 10.200.12.6 port 55522 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:29.840000 audit[3268]: CRED_ACQ pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.841915 sshd[3268]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:29.847317 systemd[1]: Started session-25.scope. Oct 2 19:41:29.848287 systemd-logind[1289]: New session 25 of user core. Oct 2 19:41:29.858995 kernel: audit: type=1101 audit(1696275689.820:1273): pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.859137 kernel: audit: type=1103 audit(1696275689.840:1274): pid=3268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.859171 kernel: audit: type=1006 audit(1696275689.840:1275): pid=3268 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:41:29.840000 audit[3268]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddbe72d90 a2=3 a3=0 items=0 ppid=1 pid=3268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:29.888777 kernel: audit: type=1300 audit(1696275689.840:1275): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddbe72d90 a2=3 a3=0 items=0 ppid=1 pid=3268 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:29.840000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:29.853000 audit[3268]: USER_START pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.915777 kernel: audit: type=1327 audit(1696275689.840:1275): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:29.915947 kernel: audit: type=1105 audit(1696275689.853:1276): pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.915988 kernel: audit: type=1103 audit(1696275689.855:1277): pid=3272 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:29.855000 audit[3272]: CRED_ACQ pid=3272 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:30.337433 sshd[3268]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:30.337000 audit[3268]: USER_END pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:30.341943 systemd[1]: sshd@22-10.200.8.20:22-10.200.12.6:55522.service: Deactivated successfully. Oct 2 19:41:30.342870 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:41:30.344654 systemd-logind[1289]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:41:30.345697 systemd-logind[1289]: Removed session 25. Oct 2 19:41:30.339000 audit[3268]: CRED_DISP pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:30.375427 kernel: audit: type=1106 audit(1696275690.337:1278): pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:30.375569 kernel: audit: type=1104 audit(1696275690.339:1279): pid=3268 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:30.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.20:22-10.200.12.6:55522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:34.367759 kubelet[2429]: E1002 19:41:34.367714 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:38.774000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.780512 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:41:38.780661 kernel: audit: type=1400 audit(1696275698.774:1281): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.774000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.820218 kernel: audit: type=1400 audit(1696275698.774:1282): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.821155 kernel: audit: type=1300 audit(1696275698.774:1282): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b780 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.774000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b780 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.845528 kernel: audit: type=1327 audit(1696275698.774:1282): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.774000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.884787 kernel: audit: type=1400 audit(1696275698.774:1283): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.884962 kernel: audit: type=1300 audit(1696275698.774:1283): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b9a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.774000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b9a0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.933148 kernel: audit: type=1327 audit(1696275698.774:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.774000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.774000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b9c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.951972 kernel: audit: type=1400 audit(1696275698.774:1284): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:41:38.952082 kernel: audit: type=1300 audit(1696275698.774:1284): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00226b9c0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.990883 kernel: audit: type=1327 audit(1696275698.774:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:38.774000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002289140 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:41:38.774000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:41:39.369482 kubelet[2429]: E1002 19:41:39.369445 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:40.443170 systemd[1]: Started sshd@23-10.200.8.20:22-10.200.12.6:52332.service. Oct 2 19:41:40.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.20:22-10.200.12.6:52332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:41.067000 audit[3283]: USER_ACCT pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.068577 sshd[3283]: Accepted publickey for core from 10.200.12.6 port 52332 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:41.068000 audit[3283]: CRED_ACQ pid=3283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.068000 audit[3283]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3a2e9f50 a2=3 a3=0 items=0 ppid=1 pid=3283 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:41.068000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:41.070109 sshd[3283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:41.075525 systemd-logind[1289]: New session 26 of user core. Oct 2 19:41:41.076117 systemd[1]: Started session-26.scope. Oct 2 19:41:41.080000 audit[3283]: USER_START pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.082000 audit[3285]: CRED_ACQ pid=3285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.570503 sshd[3283]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:41.571000 audit[3283]: USER_END pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.571000 audit[3283]: CRED_DISP pid=3283 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:41.573997 systemd[1]: sshd@23-10.200.8.20:22-10.200.12.6:52332.service: Deactivated successfully. Oct 2 19:41:41.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.20:22-10.200.12.6:52332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:41.575264 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:41:41.576110 systemd-logind[1289]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:41:41.577002 systemd-logind[1289]: Removed session 26. Oct 2 19:41:42.212917 kubelet[2429]: E1002 19:41:42.212856 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:41:44.370756 kubelet[2429]: E1002 19:41:44.370709 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:49.371598 kubelet[2429]: E1002 19:41:49.371555 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:51.674303 systemd[1]: Started sshd@24-10.200.8.20:22-10.200.12.6:41374.service. Oct 2 19:41:51.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.20:22-10.200.12.6:41374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:51.679903 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:41:51.680029 kernel: audit: type=1130 audit(1696275711.673:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.20:22-10.200.12.6:41374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:52.301000 audit[3297]: USER_ACCT pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.303504 sshd[3297]: Accepted publickey for core from 10.200.12.6 port 41374 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:41:52.323000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.325005 sshd[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:41:52.330060 systemd[1]: Started session-27.scope. Oct 2 19:41:52.331285 systemd-logind[1289]: New session 27 of user core. Oct 2 19:41:52.343000 kernel: audit: type=1101 audit(1696275712.301:1295): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.343107 kernel: audit: type=1103 audit(1696275712.323:1296): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.343165 kernel: audit: type=1006 audit(1696275712.323:1297): pid=3297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:41:52.353426 kernel: audit: type=1300 audit(1696275712.323:1297): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeeb7dd370 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:52.323000 audit[3297]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeeb7dd370 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:41:52.323000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:52.372020 kernel: audit: type=1327 audit(1696275712.323:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 19:41:52.336000 audit[3297]: USER_START pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.377921 kernel: audit: type=1105 audit(1696275712.336:1298): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.338000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.417413 kernel: audit: type=1103 audit(1696275712.338:1299): pid=3299 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.818151 sshd[3297]: pam_unix(sshd:session): session closed for user core Oct 2 19:41:52.818000 audit[3297]: USER_END pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.822112 systemd[1]: sshd@24-10.200.8.20:22-10.200.12.6:41374.service: Deactivated successfully. Oct 2 19:41:52.823070 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:41:52.825161 systemd-logind[1289]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:41:52.826420 systemd-logind[1289]: Removed session 27. Oct 2 19:41:52.819000 audit[3297]: CRED_DISP pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.855204 kernel: audit: type=1106 audit(1696275712.818:1300): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.855369 kernel: audit: type=1104 audit(1696275712.819:1301): pid=3297 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:41:52.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.20:22-10.200.12.6:41374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:41:54.372926 kubelet[2429]: E1002 19:41:54.372895 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:41:55.212595 kubelet[2429]: E1002 19:41:55.212550 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:41:59.374711 kubelet[2429]: E1002 19:41:59.374677 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:02.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.20:22-10.200.12.6:38654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:02.925330 systemd[1]: Started sshd@25-10.200.8.20:22-10.200.12.6:38654.service. Oct 2 19:42:02.935476 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:02.937349 kernel: audit: type=1130 audit(1696275722.924:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.20:22-10.200.12.6:38654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.562000 audit[3309]: USER_ACCT pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.584661 sshd[3309]: Accepted publickey for core from 10.200.12.6 port 38654 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:03.585085 kernel: audit: type=1101 audit(1696275723.562:1304): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.585257 sshd[3309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:03.583000 audit[3309]: CRED_ACQ pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.590750 systemd[1]: Started session-28.scope. Oct 2 19:42:03.591983 systemd-logind[1289]: New session 28 of user core. Oct 2 19:42:03.606993 kernel: audit: type=1103 audit(1696275723.583:1305): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.607135 kernel: audit: type=1006 audit(1696275723.583:1306): pid=3309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:42:03.583000 audit[3309]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc97d37800 a2=3 a3=0 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:03.617990 kernel: audit: type=1300 audit(1696275723.583:1306): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc97d37800 a2=3 a3=0 items=0 ppid=1 pid=3309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:03.636157 kernel: audit: type=1327 audit(1696275723.583:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:03.583000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:03.597000 audit[3309]: USER_START pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.641897 kernel: audit: type=1105 audit(1696275723.597:1307): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.599000 audit[3311]: CRED_ACQ pid=3311 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:03.677912 kernel: audit: type=1103 audit(1696275723.599:1308): pid=3311 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:04.174134 sshd[3309]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:04.174000 audit[3309]: USER_END pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:04.184133 systemd-logind[1289]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:42:04.184835 systemd[1]: sshd@25-10.200.8.20:22-10.200.12.6:38654.service: Deactivated successfully. Oct 2 19:42:04.185525 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:42:04.187149 systemd-logind[1289]: Removed session 28. Oct 2 19:42:04.180000 audit[3309]: CRED_DISP pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:04.223516 kernel: audit: type=1106 audit(1696275724.174:1309): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:04.223776 kernel: audit: type=1104 audit(1696275724.180:1310): pid=3309 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:04.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.20:22-10.200.12.6:38654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.376046 kubelet[2429]: E1002 19:42:04.375997 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:06.212457 kubelet[2429]: E1002 19:42:06.212405 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:42:09.378233 kubelet[2429]: E1002 19:42:09.378193 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:14.379022 kubelet[2429]: E1002 19:42:14.378973 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:14.490415 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:14.490679 kernel: audit: type=1130 audit(1696275734.456:1312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.20:22-10.200.12.6:41826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:14.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.20:22-10.200.12.6:41826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:14.457191 systemd[1]: Started sshd@26-10.200.8.20:22-10.200.12.6:41826.service. Oct 2 19:42:15.090000 audit[3323]: USER_ACCT pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.097069 sshd[3323]: Accepted publickey for core from 10.200.12.6 port 41826 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:15.113000 audit[3323]: CRED_ACQ pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.114888 sshd[3323]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:15.121037 systemd[1]: Started session-29.scope. Oct 2 19:42:15.121994 systemd-logind[1289]: New session 29 of user core. Oct 2 19:42:15.131666 kernel: audit: type=1101 audit(1696275735.090:1313): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.131782 kernel: audit: type=1103 audit(1696275735.113:1314): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.131812 kernel: audit: type=1006 audit(1696275735.113:1315): pid=3323 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:42:15.113000 audit[3323]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeba45e7d0 a2=3 a3=0 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:15.142901 kernel: audit: type=1300 audit(1696275735.113:1315): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeba45e7d0 a2=3 a3=0 items=0 ppid=1 pid=3323 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:15.113000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:15.163957 kernel: audit: type=1327 audit(1696275735.113:1315): proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:15.126000 audit[3323]: USER_START pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.188054 kernel: audit: type=1105 audit(1696275735.126:1316): pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.128000 audit[3325]: CRED_ACQ pid=3325 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.188915 kernel: audit: type=1103 audit(1696275735.128:1317): pid=3325 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.678961 sshd[3323]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:15.679000 audit[3323]: USER_END pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.683056 systemd-logind[1289]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:42:15.684814 systemd[1]: sshd@26-10.200.8.20:22-10.200.12.6:41826.service: Deactivated successfully. Oct 2 19:42:15.685723 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:42:15.687899 systemd-logind[1289]: Removed session 29. Oct 2 19:42:15.679000 audit[3323]: CRED_DISP pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.717830 kernel: audit: type=1106 audit(1696275735.679:1318): pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.718014 kernel: audit: type=1104 audit(1696275735.679:1319): pid=3323 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:15.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.20:22-10.200.12.6:41826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.380538 kubelet[2429]: E1002 19:42:19.380491 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:21.212369 kubelet[2429]: E1002 19:42:21.212273 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-8lg8z_kube-system(483ee4f2-23de-4328-a269-56a3cb83d9dc)\"" pod="kube-system/cilium-8lg8z" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc Oct 2 19:42:23.890000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.896066 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:42:23.896178 kernel: audit: type=1400 audit(1696275743.890:1321): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.890000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001182120 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:23.936832 kernel: audit: type=1300 audit(1696275743.890:1321): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001182120 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:23.936976 kernel: audit: type=1327 audit(1696275743.890:1321): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:23.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:23.955129 kernel: audit: type=1400 audit(1696275743.891:1322): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.891000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:23.891000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe9b00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:23.970895 kernel: audit: type=1300 audit(1696275743.891:1322): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe9b00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:23.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:24.008948 kernel: audit: type=1327 audit(1696275743.891:1322): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:24.382225 kubelet[2429]: E1002 19:42:24.382185 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:24.630000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.630000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0084b7230 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.675685 kernel: audit: type=1400 audit(1696275744.630:1323): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.676199 kernel: audit: type=1300 audit(1696275744.630:1323): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0084b7230 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.676232 kernel: audit: type=1327 audit(1696275744.630:1323): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.630000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.650000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.714356 kernel: audit: type=1400 audit(1696275744.650:1324): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.650000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0084b7290 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.650000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.651000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.651000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0058f04c0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.651000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.651000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0058f0500 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.651000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.651000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c008625080 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:24.651000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:24.651000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c008625110 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:42:24.651000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:42:25.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.20:22-10.200.12.6:38454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:25.872740 systemd[1]: Started sshd@27-10.200.8.20:22-10.200.12.6:38454.service. Oct 2 19:42:26.517000 audit[3336]: USER_ACCT pid=3336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:26.519259 sshd[3336]: Accepted publickey for core from 10.200.12.6 port 38454 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:26.519000 audit[3336]: CRED_ACQ pid=3336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:26.519000 audit[3336]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff21894920 a2=3 a3=0 items=0 ppid=1 pid=3336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:26.519000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:26.520818 sshd[3336]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:26.526776 systemd[1]: Started session-30.scope. Oct 2 19:42:26.527244 systemd-logind[1289]: New session 30 of user core. Oct 2 19:42:26.531000 audit[3336]: USER_START pid=3336 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:26.533000 audit[3338]: CRED_ACQ pid=3338 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.022402 sshd[3336]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:27.023000 audit[3336]: USER_END pid=3336 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.023000 audit[3336]: CRED_DISP pid=3336 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.025750 systemd[1]: sshd@27-10.200.8.20:22-10.200.12.6:38454.service: Deactivated successfully. Oct 2 19:42:27.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.20:22-10.200.12.6:38454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:27.026733 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:42:27.027475 systemd-logind[1289]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:42:27.028279 systemd-logind[1289]: Removed session 30. Oct 2 19:42:27.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.20:22-10.200.12.6:38468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:27.126980 systemd[1]: Started sshd@28-10.200.8.20:22-10.200.12.6:38468.service. Oct 2 19:42:27.753000 audit[3348]: USER_ACCT pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.754873 sshd[3348]: Accepted publickey for core from 10.200.12.6 port 38468 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:27.755000 audit[3348]: CRED_ACQ pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.755000 audit[3348]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec2e63a80 a2=3 a3=0 items=0 ppid=1 pid=3348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:27.755000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:27.756697 sshd[3348]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:27.761592 systemd[1]: Started session-31.scope. Oct 2 19:42:27.762634 systemd-logind[1289]: New session 31 of user core. Oct 2 19:42:27.766000 audit[3348]: USER_START pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:27.767000 audit[3350]: CRED_ACQ pid=3350 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:29.365686 env[1316]: time="2023-10-02T19:42:29.365625647Z" level=info msg="StopPodSandbox for \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\"" Oct 2 19:42:29.366177 env[1316]: time="2023-10-02T19:42:29.365721448Z" level=info msg="Container to stop \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:29.368291 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3-shm.mount: Deactivated successfully. Oct 2 19:42:29.382016 systemd[1]: cri-containerd-120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3.scope: Deactivated successfully. Oct 2 19:42:29.392926 kernel: kauditd_printk_skb: 33 callbacks suppressed Oct 2 19:42:29.393077 kernel: audit: type=1334 audit(1696275749.381:1344): prog-id=118 op=UNLOAD Oct 2 19:42:29.381000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:42:29.394014 kubelet[2429]: E1002 19:42:29.393990 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:29.395505 env[1316]: time="2023-10-02T19:42:29.395461295Z" level=info msg="StopContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" with timeout 30 (s)" Oct 2 19:42:29.396271 env[1316]: time="2023-10-02T19:42:29.396153998Z" level=info msg="Stop container \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" with signal terminated" Oct 2 19:42:29.395000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:42:29.407904 kernel: audit: type=1334 audit(1696275749.395:1345): prog-id=121 op=UNLOAD Oct 2 19:42:29.428584 systemd[1]: cri-containerd-e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d.scope: Deactivated successfully. Oct 2 19:42:29.427000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:42:29.435990 kernel: audit: type=1334 audit(1696275749.427:1346): prog-id=125 op=UNLOAD Oct 2 19:42:29.441000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:42:29.441938 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3-rootfs.mount: Deactivated successfully. Oct 2 19:42:29.448111 kernel: audit: type=1334 audit(1696275749.441:1347): prog-id=128 op=UNLOAD Oct 2 19:42:29.460002 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d-rootfs.mount: Deactivated successfully. Oct 2 19:42:29.520208 env[1316]: time="2023-10-02T19:42:29.520132313Z" level=info msg="shim disconnected" id=120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3 Oct 2 19:42:29.520208 env[1316]: time="2023-10-02T19:42:29.520197613Z" level=warning msg="cleaning up after shim disconnected" id=120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3 namespace=k8s.io Oct 2 19:42:29.520208 env[1316]: time="2023-10-02T19:42:29.520211913Z" level=info msg="cleaning up dead shim" Oct 2 19:42:29.520882 env[1316]: time="2023-10-02T19:42:29.520825416Z" level=info msg="shim disconnected" id=e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d Oct 2 19:42:29.520991 env[1316]: time="2023-10-02T19:42:29.520870916Z" level=warning msg="cleaning up after shim disconnected" id=e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d namespace=k8s.io Oct 2 19:42:29.520991 env[1316]: time="2023-10-02T19:42:29.520894016Z" level=info msg="cleaning up dead shim" Oct 2 19:42:29.533064 env[1316]: time="2023-10-02T19:42:29.533024776Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3399 runtime=io.containerd.runc.v2\n" Oct 2 19:42:29.533487 env[1316]: time="2023-10-02T19:42:29.533454179Z" level=info msg="TearDown network for sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" successfully" Oct 2 19:42:29.533627 env[1316]: time="2023-10-02T19:42:29.533600479Z" level=info msg="StopPodSandbox for \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" returns successfully" Oct 2 19:42:29.538131 env[1316]: time="2023-10-02T19:42:29.537441698Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3400 runtime=io.containerd.runc.v2\n" Oct 2 19:42:29.545992 env[1316]: time="2023-10-02T19:42:29.545934040Z" level=info msg="StopContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" returns successfully" Oct 2 19:42:29.546525 env[1316]: time="2023-10-02T19:42:29.546477243Z" level=info msg="StopPodSandbox for \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\"" Oct 2 19:42:29.549409 env[1316]: time="2023-10-02T19:42:29.546551143Z" level=info msg="Container to stop \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:42:29.549160 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d-shm.mount: Deactivated successfully. Oct 2 19:42:29.562317 systemd[1]: cri-containerd-70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d.scope: Deactivated successfully. Oct 2 19:42:29.561000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:42:29.568897 kernel: audit: type=1334 audit(1696275749.561:1348): prog-id=110 op=UNLOAD Oct 2 19:42:29.570000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:42:29.579341 kernel: audit: type=1334 audit(1696275749.570:1349): prog-id=113 op=UNLOAD Oct 2 19:42:29.589835 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d-rootfs.mount: Deactivated successfully. Oct 2 19:42:29.609099 env[1316]: time="2023-10-02T19:42:29.609031853Z" level=info msg="shim disconnected" id=70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d Oct 2 19:42:29.609345 env[1316]: time="2023-10-02T19:42:29.609101853Z" level=warning msg="cleaning up after shim disconnected" id=70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d namespace=k8s.io Oct 2 19:42:29.609345 env[1316]: time="2023-10-02T19:42:29.609116553Z" level=info msg="cleaning up dead shim" Oct 2 19:42:29.619064 env[1316]: time="2023-10-02T19:42:29.618936302Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3444 runtime=io.containerd.runc.v2\n" Oct 2 19:42:29.620236 env[1316]: time="2023-10-02T19:42:29.620198508Z" level=info msg="TearDown network for sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" successfully" Oct 2 19:42:29.620362 env[1316]: time="2023-10-02T19:42:29.620254709Z" level=info msg="StopPodSandbox for \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" returns successfully" Oct 2 19:42:29.680320 kubelet[2429]: I1002 19:42:29.680280 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cni-path\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680590 kubelet[2429]: I1002 19:42:29.680570 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-run\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680693 kubelet[2429]: I1002 19:42:29.680604 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-kernel\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680693 kubelet[2429]: I1002 19:42:29.680637 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-config-path\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680693 kubelet[2429]: I1002 19:42:29.680665 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-net\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680693 kubelet[2429]: I1002 19:42:29.680691 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-xtables-lock\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680718 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-cgroup\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680748 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-hubble-tls\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680775 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-hostproc\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680806 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-tc4zv\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680834 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-etc-cni-netd\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.680899 kubelet[2429]: I1002 19:42:29.680866 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/483ee4f2-23de-4328-a269-56a3cb83d9dc-clustermesh-secrets\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.680909 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-bpf-maps\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.680939 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-lib-modules\") pod \"483ee4f2-23de-4328-a269-56a3cb83d9dc\" (UID: \"483ee4f2-23de-4328-a269-56a3cb83d9dc\") " Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.680994 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.680326 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cni-path" (OuterVolumeSpecName: "cni-path") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.681042 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.681160 kubelet[2429]: I1002 19:42:29.681063 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.681486 kubelet[2429]: W1002 19:42:29.681259 2429 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/483ee4f2-23de-4328-a269-56a3cb83d9dc/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:29.683603 kubelet[2429]: I1002 19:42:29.681570 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-hostproc" (OuterVolumeSpecName: "hostproc") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.683603 kubelet[2429]: I1002 19:42:29.681608 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.683603 kubelet[2429]: I1002 19:42:29.681630 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.683603 kubelet[2429]: I1002 19:42:29.681653 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.683869 kubelet[2429]: I1002 19:42:29.683783 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:29.684194 kubelet[2429]: I1002 19:42:29.684169 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.684362 kubelet[2429]: I1002 19:42:29.684338 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:42:29.686601 kubelet[2429]: I1002 19:42:29.686573 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:29.687595 kubelet[2429]: I1002 19:42:29.687568 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/483ee4f2-23de-4328-a269-56a3cb83d9dc-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:42:29.689574 kubelet[2429]: I1002 19:42:29.689550 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv" (OuterVolumeSpecName: "kube-api-access-tc4zv") pod "483ee4f2-23de-4328-a269-56a3cb83d9dc" (UID: "483ee4f2-23de-4328-a269-56a3cb83d9dc"). InnerVolumeSpecName "kube-api-access-tc4zv". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:29.782163 kubelet[2429]: I1002 19:42:29.782094 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed477101-3f34-4341-84ba-cfc3a8d32cf9-cilium-config-path\") pod \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\" (UID: \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\") " Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782207 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f7j7f\" (UniqueName: \"kubernetes.io/projected/ed477101-3f34-4341-84ba-cfc3a8d32cf9-kube-api-access-f7j7f\") pod \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\" (UID: \"ed477101-3f34-4341-84ba-cfc3a8d32cf9\") " Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782259 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-cgroup\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782281 2429 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-hubble-tls\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782299 2429 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-hostproc\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782316 2429 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-tc4zv\" (UniqueName: \"kubernetes.io/projected/483ee4f2-23de-4328-a269-56a3cb83d9dc-kube-api-access-tc4zv\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782336 2429 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/483ee4f2-23de-4328-a269-56a3cb83d9dc-clustermesh-secrets\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782354 2429 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-etc-cni-netd\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782370 2429 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-bpf-maps\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782385 2429 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-lib-modules\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.782394 kubelet[2429]: I1002 19:42:29.782400 2429 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cni-path\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783002 kubelet[2429]: I1002 19:42:29.782420 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-config-path\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783002 kubelet[2429]: I1002 19:42:29.782439 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-cilium-run\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783002 kubelet[2429]: I1002 19:42:29.782458 2429 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783002 kubelet[2429]: I1002 19:42:29.782478 2429 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-xtables-lock\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783002 kubelet[2429]: I1002 19:42:29.782496 2429 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/483ee4f2-23de-4328-a269-56a3cb83d9dc-host-proc-sys-net\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.783605 kubelet[2429]: W1002 19:42:29.783552 2429 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/ed477101-3f34-4341-84ba-cfc3a8d32cf9/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:42:29.787011 kubelet[2429]: I1002 19:42:29.786967 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ed477101-3f34-4341-84ba-cfc3a8d32cf9-kube-api-access-f7j7f" (OuterVolumeSpecName: "kube-api-access-f7j7f") pod "ed477101-3f34-4341-84ba-cfc3a8d32cf9" (UID: "ed477101-3f34-4341-84ba-cfc3a8d32cf9"). InnerVolumeSpecName "kube-api-access-f7j7f". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:42:29.787364 kubelet[2429]: I1002 19:42:29.787329 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ed477101-3f34-4341-84ba-cfc3a8d32cf9-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "ed477101-3f34-4341-84ba-cfc3a8d32cf9" (UID: "ed477101-3f34-4341-84ba-cfc3a8d32cf9"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:42:29.883605 kubelet[2429]: I1002 19:42:29.883464 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed477101-3f34-4341-84ba-cfc3a8d32cf9-cilium-config-path\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:29.883605 kubelet[2429]: I1002 19:42:29.883520 2429 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-f7j7f\" (UniqueName: \"kubernetes.io/projected/ed477101-3f34-4341-84ba-cfc3a8d32cf9-kube-api-access-f7j7f\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:42:30.015968 kubelet[2429]: I1002 19:42:30.015938 2429 scope.go:115] "RemoveContainer" containerID="08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4" Oct 2 19:42:30.017705 env[1316]: time="2023-10-02T19:42:30.017601077Z" level=info msg="RemoveContainer for \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\"" Oct 2 19:42:30.029362 systemd[1]: Removed slice kubepods-burstable-pod483ee4f2_23de_4328_a269_56a3cb83d9dc.slice. Oct 2 19:42:30.031392 env[1316]: time="2023-10-02T19:42:30.031265344Z" level=info msg="RemoveContainer for \"08d6d32b972078fd68bb0d3141d94265faaec978c93c7a7ccc7085e87bc998a4\" returns successfully" Oct 2 19:42:30.037085 kubelet[2429]: I1002 19:42:30.036064 2429 scope.go:115] "RemoveContainer" containerID="e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d" Oct 2 19:42:30.037778 env[1316]: time="2023-10-02T19:42:30.037737476Z" level=info msg="RemoveContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\"" Oct 2 19:42:30.047861 systemd[1]: Removed slice kubepods-besteffort-poded477101_3f34_4341_84ba_cfc3a8d32cf9.slice. Oct 2 19:42:30.048903 env[1316]: time="2023-10-02T19:42:30.048810531Z" level=info msg="RemoveContainer for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" returns successfully" Oct 2 19:42:30.049238 kubelet[2429]: I1002 19:42:30.049214 2429 scope.go:115] "RemoveContainer" containerID="e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d" Oct 2 19:42:30.049659 env[1316]: time="2023-10-02T19:42:30.049568635Z" level=error msg="ContainerStatus for \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\": not found" Oct 2 19:42:30.049859 kubelet[2429]: E1002 19:42:30.049837 2429 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\": not found" containerID="e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d" Oct 2 19:42:30.049974 kubelet[2429]: I1002 19:42:30.049896 2429 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d} err="failed to get container status \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\": rpc error: code = NotFound desc = an error occurred when try to find container \"e6b8fd880af879946079ab446f9db78fc8f75b16bc520dc73bc71d1102a3cc9d\": not found" Oct 2 19:42:30.370178 systemd[1]: var-lib-kubelet-pods-483ee4f2\x2d23de\x2d4328\x2da269\x2d56a3cb83d9dc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtc4zv.mount: Deactivated successfully. Oct 2 19:42:30.370345 systemd[1]: var-lib-kubelet-pods-ed477101\x2d3f34\x2d4341\x2d84ba\x2dcfc3a8d32cf9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df7j7f.mount: Deactivated successfully. Oct 2 19:42:30.370416 systemd[1]: var-lib-kubelet-pods-483ee4f2\x2d23de\x2d4328\x2da269\x2d56a3cb83d9dc-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:42:30.370478 systemd[1]: var-lib-kubelet-pods-483ee4f2\x2d23de\x2d4328\x2da269\x2d56a3cb83d9dc-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:42:31.215011 kubelet[2429]: I1002 19:42:31.214970 2429 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=483ee4f2-23de-4328-a269-56a3cb83d9dc path="/var/lib/kubelet/pods/483ee4f2-23de-4328-a269-56a3cb83d9dc/volumes" Oct 2 19:42:31.215799 kubelet[2429]: I1002 19:42:31.215769 2429 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=ed477101-3f34-4341-84ba-cfc3a8d32cf9 path="/var/lib/kubelet/pods/ed477101-3f34-4341-84ba-cfc3a8d32cf9/volumes" Oct 2 19:42:31.434634 sshd[3348]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:31.434000 audit[3348]: USER_END pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:31.437984 systemd[1]: sshd@28-10.200.8.20:22-10.200.12.6:38468.service: Deactivated successfully. Oct 2 19:42:31.438726 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 19:42:31.440075 systemd-logind[1289]: Session 31 logged out. Waiting for processes to exit. Oct 2 19:42:31.441255 systemd-logind[1289]: Removed session 31. Oct 2 19:42:31.435000 audit[3348]: CRED_DISP pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:31.478042 kernel: audit: type=1106 audit(1696275751.434:1350): pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:31.480774 kernel: audit: type=1104 audit(1696275751.435:1351): pid=3348 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:31.482139 kernel: audit: type=1131 audit(1696275751.437:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.20:22-10.200.12.6:38468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:31.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.20:22-10.200.12.6:38468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:31.539766 systemd[1]: Started sshd@29-10.200.8.20:22-10.200.12.6:39410.service. Oct 2 19:42:31.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.20:22-10.200.12.6:39410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:31.560972 kernel: audit: type=1130 audit(1696275751.539:1353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.20:22-10.200.12.6:39410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:32.164000 audit[3462]: USER_ACCT pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:32.165759 sshd[3462]: Accepted publickey for core from 10.200.12.6 port 39410 ssh2: RSA SHA256:QTj/0Yd7w+agvpAJ3ZvxSnjeGijkbUdqm8sftt8AuvE Oct 2 19:42:32.166000 audit[3462]: CRED_ACQ pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:32.166000 audit[3462]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdae0539e0 a2=3 a3=0 items=0 ppid=1 pid=3462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:32.166000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:32.167624 sshd[3462]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:32.172866 systemd[1]: Started session-32.scope. Oct 2 19:42:32.173393 systemd-logind[1289]: New session 32 of user core. Oct 2 19:42:32.177000 audit[3462]: USER_START pid=3462 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:32.179000 audit[3464]: CRED_ACQ pid=3464 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:42:33.298659 kubelet[2429]: I1002 19:42:33.298612 2429 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298705 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298718 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298727 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed477101-3f34-4341-84ba-cfc3a8d32cf9" containerName="cilium-operator" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298737 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298745 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298788 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298798 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298806 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298815 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed477101-3f34-4341-84ba-cfc3a8d32cf9" containerName="cilium-operator" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298826 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298888 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: E1002 19:42:33.298899 2429 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298920 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.299188 kubelet[2429]: I1002 19:42:33.298931 2429 memory_manager.go:346] "RemoveStaleState removing state" podUID="483ee4f2-23de-4328-a269-56a3cb83d9dc" containerName="mount-cgroup" Oct 2 19:42:33.309337 systemd[1]: Created slice kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice. Oct 2 19:42:33.410721 kubelet[2429]: I1002 19:42:33.410675 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-bpf-maps\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410735 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-xtables-lock\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410767 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-hubble-tls\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410792 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-cgroup\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410820 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-clustermesh-secrets\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410849 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ca001424-49f8-4413-a329-fab6f859c83d-cilium-config-path\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410885 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-hostproc\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410912 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-lib-modules\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410938 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dzlqt\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-kube-api-access-dzlqt\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.410968 kubelet[2429]: I1002 19:42:33.410962 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-run\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.411370 kubelet[2429]: I1002 19:42:33.410998 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-kernel\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.411370 kubelet[2429]: I1002 19:42:33.411031 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-net\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.411370 kubelet[2429]: I1002 19:42:33.411061 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cni-path\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.411370 kubelet[2429]: I1002 19:42:33.411092 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-etc-cni-netd\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.411370 kubelet[2429]: I1002 19:42:33.411123 2429 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-cilium-ipsec-secrets\") pod \"cilium-4rjrm\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " pod="kube-system/cilium-4rjrm" Oct 2 19:42:33.616113 env[1316]: time="2023-10-02T19:42:33.615990460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4rjrm,Uid:ca001424-49f8-4413-a329-fab6f859c83d,Namespace:kube-system,Attempt:0,}" Oct 2 19:42:33.669188 env[1316]: time="2023-10-02T19:42:33.669107422Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:42:33.669188 env[1316]: time="2023-10-02T19:42:33.669147522Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:42:33.669506 env[1316]: time="2023-10-02T19:42:33.669161923Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:42:33.669842 env[1316]: time="2023-10-02T19:42:33.669785726Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094 pid=3481 runtime=io.containerd.runc.v2 Oct 2 19:42:33.687353 systemd[1]: Started cri-containerd-ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094.scope. Oct 2 19:42:33.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit: BPF prog-id=129 op=LOAD Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3481 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261393264386664363331343766373731323336393237626134636637 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3481 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261393264386664363331343766373731323336393237626134636637 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.701000 audit: BPF prog-id=130 op=LOAD Oct 2 19:42:33.701000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001e5dd0 items=0 ppid=3481 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261393264386664363331343766373731323336393237626134636637 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit: BPF prog-id=131 op=LOAD Oct 2 19:42:33.702000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001e5e18 items=0 ppid=3481 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261393264386664363331343766373731323336393237626134636637 Oct 2 19:42:33.702000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:42:33.702000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { perfmon } for pid=3491 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit[3491]: AVC avc: denied { bpf } for pid=3491 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:33.702000 audit: BPF prog-id=132 op=LOAD Oct 2 19:42:33.702000 audit[3491]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003ac228 items=0 ppid=3481 pid=3491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261393264386664363331343766373731323336393237626134636637 Oct 2 19:42:33.720260 env[1316]: time="2023-10-02T19:42:33.720214374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4rjrm,Uid:ca001424-49f8-4413-a329-fab6f859c83d,Namespace:kube-system,Attempt:0,} returns sandbox id \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\"" Oct 2 19:42:33.724597 env[1316]: time="2023-10-02T19:42:33.723989493Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:42:33.767376 env[1316]: time="2023-10-02T19:42:33.767316707Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" Oct 2 19:42:33.768224 env[1316]: time="2023-10-02T19:42:33.768185211Z" level=info msg="StartContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" Oct 2 19:42:33.792293 systemd[1]: Started cri-containerd-7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975.scope. Oct 2 19:42:33.807844 systemd[1]: cri-containerd-7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975.scope: Deactivated successfully. Oct 2 19:42:33.903968 env[1316]: time="2023-10-02T19:42:33.903793480Z" level=info msg="shim disconnected" id=7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975 Oct 2 19:42:33.903968 env[1316]: time="2023-10-02T19:42:33.903857481Z" level=warning msg="cleaning up after shim disconnected" id=7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975 namespace=k8s.io Oct 2 19:42:33.903968 env[1316]: time="2023-10-02T19:42:33.903868381Z" level=info msg="cleaning up dead shim" Oct 2 19:42:33.915115 env[1316]: time="2023-10-02T19:42:33.915051736Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3544 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:33.915424 env[1316]: time="2023-10-02T19:42:33.915357837Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:42:33.915657 env[1316]: time="2023-10-02T19:42:33.915610738Z" level=error msg="Failed to pipe stdout of container \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" error="reading from a closed fifo" Oct 2 19:42:33.921013 env[1316]: time="2023-10-02T19:42:33.920947865Z" level=error msg="Failed to pipe stderr of container \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" error="reading from a closed fifo" Oct 2 19:42:33.926661 env[1316]: time="2023-10-02T19:42:33.926591093Z" level=error msg="StartContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:33.927081 kubelet[2429]: E1002 19:42:33.927050 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975" Oct 2 19:42:33.927253 kubelet[2429]: E1002 19:42:33.927188 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:33.927253 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:33.927253 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:42:33.927253 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dzlqt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:33.927253 kubelet[2429]: E1002 19:42:33.927240 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:42:34.032643 env[1316]: time="2023-10-02T19:42:34.032588016Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:42:34.076692 env[1316]: time="2023-10-02T19:42:34.076630533Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" Oct 2 19:42:34.077419 env[1316]: time="2023-10-02T19:42:34.077371336Z" level=info msg="StartContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" Oct 2 19:42:34.095430 systemd[1]: Started cri-containerd-f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6.scope. Oct 2 19:42:34.109488 systemd[1]: cri-containerd-f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6.scope: Deactivated successfully. Oct 2 19:42:34.127535 env[1316]: time="2023-10-02T19:42:34.127445983Z" level=info msg="shim disconnected" id=f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6 Oct 2 19:42:34.127535 env[1316]: time="2023-10-02T19:42:34.127527683Z" level=warning msg="cleaning up after shim disconnected" id=f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6 namespace=k8s.io Oct 2 19:42:34.127918 env[1316]: time="2023-10-02T19:42:34.127552884Z" level=info msg="cleaning up dead shim" Oct 2 19:42:34.137378 env[1316]: time="2023-10-02T19:42:34.137320432Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3581 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:34.137694 env[1316]: time="2023-10-02T19:42:34.137622333Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:42:34.137986 env[1316]: time="2023-10-02T19:42:34.137941735Z" level=error msg="Failed to pipe stderr of container \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" error="reading from a closed fifo" Oct 2 19:42:34.138067 env[1316]: time="2023-10-02T19:42:34.138018035Z" level=error msg="Failed to pipe stdout of container \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" error="reading from a closed fifo" Oct 2 19:42:34.143173 env[1316]: time="2023-10-02T19:42:34.143109260Z" level=error msg="StartContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:34.143451 kubelet[2429]: E1002 19:42:34.143425 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6" Oct 2 19:42:34.143618 kubelet[2429]: E1002 19:42:34.143599 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:34.143618 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:34.143618 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:42:34.143618 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dzlqt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:34.143832 kubelet[2429]: E1002 19:42:34.143650 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:42:34.395293 kubelet[2429]: E1002 19:42:34.395244 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:35.033766 kubelet[2429]: I1002 19:42:35.033729 2429 scope.go:115] "RemoveContainer" containerID="7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975" Oct 2 19:42:35.034903 kubelet[2429]: I1002 19:42:35.034854 2429 scope.go:115] "RemoveContainer" containerID="7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975" Oct 2 19:42:35.036169 env[1316]: time="2023-10-02T19:42:35.036126162Z" level=info msg="RemoveContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" Oct 2 19:42:35.036598 env[1316]: time="2023-10-02T19:42:35.036572064Z" level=info msg="RemoveContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\"" Oct 2 19:42:35.036706 env[1316]: time="2023-10-02T19:42:35.036670165Z" level=error msg="RemoveContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\" failed" error="failed to set removing state for container \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\": container is already in removing state" Oct 2 19:42:35.036855 kubelet[2429]: E1002 19:42:35.036834 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\": container is already in removing state" containerID="7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975" Oct 2 19:42:35.036964 kubelet[2429]: E1002 19:42:35.036942 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975": container is already in removing state; Skipping pod "cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)" Oct 2 19:42:35.037303 kubelet[2429]: E1002 19:42:35.037280 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:42:35.048270 env[1316]: time="2023-10-02T19:42:35.048196221Z" level=info msg="RemoveContainer for \"7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975\" returns successfully" Oct 2 19:42:37.009440 kubelet[2429]: W1002 19:42:37.009382 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice/cri-containerd-7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975.scope WatchSource:0}: container "7084e952f472050a39f11d3217e6b754e2c9c9e9f6b40a939afb5c33ffc61975" in namespace "k8s.io": not found Oct 2 19:42:38.777000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.782628 kernel: kauditd_printk_skb: 64 callbacks suppressed Oct 2 19:42:38.782775 kernel: audit: type=1400 audit(1696275758.777:1377): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.777000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001623120 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.821484 kernel: audit: type=1300 audit(1696275758.777:1377): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001623120 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.821649 kernel: audit: type=1327 audit(1696275758.777:1377): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.782000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.855923 kernel: audit: type=1400 audit(1696275758.782:1378): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.856086 kernel: audit: type=1300 audit(1696275758.782:1378): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002849ae0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.782000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002849ae0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.895802 kernel: audit: type=1327 audit(1696275758.782:1378): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.782000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.782000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016233e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.934742 kernel: audit: type=1400 audit(1696275758.782:1379): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.934933 kernel: audit: type=1300 audit(1696275758.782:1379): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0016233e0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.934970 kernel: audit: type=1327 audit(1696275758.782:1379): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:38.782000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.969123 kernel: audit: type=1400 audit(1696275758.782:1380): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:42:38.782000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001623400 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:42:38.782000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:42:39.396739 kubelet[2429]: E1002 19:42:39.396686 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:40.116706 kubelet[2429]: W1002 19:42:40.116654 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice/cri-containerd-f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6.scope WatchSource:0}: task f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6 not found: not found Oct 2 19:42:44.398662 kubelet[2429]: E1002 19:42:44.398603 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:46.214792 env[1316]: time="2023-10-02T19:42:46.214738157Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:42:46.260101 env[1316]: time="2023-10-02T19:42:46.260039378Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" Oct 2 19:42:46.261036 env[1316]: time="2023-10-02T19:42:46.261003083Z" level=info msg="StartContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" Oct 2 19:42:46.290942 systemd[1]: Started cri-containerd-7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079.scope. Oct 2 19:42:46.305034 systemd[1]: cri-containerd-7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079.scope: Deactivated successfully. Oct 2 19:42:46.342873 env[1316]: time="2023-10-02T19:42:46.342804482Z" level=info msg="shim disconnected" id=7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079 Oct 2 19:42:46.342873 env[1316]: time="2023-10-02T19:42:46.342866582Z" level=warning msg="cleaning up after shim disconnected" id=7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079 namespace=k8s.io Oct 2 19:42:46.343245 env[1316]: time="2023-10-02T19:42:46.342904582Z" level=info msg="cleaning up dead shim" Oct 2 19:42:46.352816 env[1316]: time="2023-10-02T19:42:46.352754731Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:42:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3620 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:42:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:42:46.353136 env[1316]: time="2023-10-02T19:42:46.353063532Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:42:46.353348 env[1316]: time="2023-10-02T19:42:46.353300433Z" level=error msg="Failed to pipe stdout of container \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" error="reading from a closed fifo" Oct 2 19:42:46.353503 env[1316]: time="2023-10-02T19:42:46.353451334Z" level=error msg="Failed to pipe stderr of container \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" error="reading from a closed fifo" Oct 2 19:42:46.358263 env[1316]: time="2023-10-02T19:42:46.358204357Z" level=error msg="StartContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:42:46.358585 kubelet[2429]: E1002 19:42:46.358563 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079" Oct 2 19:42:46.359017 kubelet[2429]: E1002 19:42:46.358695 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:42:46.359017 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:42:46.359017 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:42:46.359017 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dzlqt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:42:46.359017 kubelet[2429]: E1002 19:42:46.358747 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:42:47.065505 kubelet[2429]: I1002 19:42:47.065475 2429 scope.go:115] "RemoveContainer" containerID="f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6" Oct 2 19:42:47.066194 kubelet[2429]: I1002 19:42:47.066123 2429 scope.go:115] "RemoveContainer" containerID="f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6" Oct 2 19:42:47.068464 env[1316]: time="2023-10-02T19:42:47.068415521Z" level=info msg="RemoveContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" Oct 2 19:42:47.070267 env[1316]: time="2023-10-02T19:42:47.069399626Z" level=info msg="RemoveContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\"" Oct 2 19:42:47.070267 env[1316]: time="2023-10-02T19:42:47.069535826Z" level=error msg="RemoveContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\" failed" error="failed to set removing state for container \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\": container is already in removing state" Oct 2 19:42:47.070554 kubelet[2429]: E1002 19:42:47.069725 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\": container is already in removing state" containerID="f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6" Oct 2 19:42:47.070554 kubelet[2429]: E1002 19:42:47.069775 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6": container is already in removing state; Skipping pod "cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)" Oct 2 19:42:47.071411 kubelet[2429]: E1002 19:42:47.070843 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:42:47.079857 env[1316]: time="2023-10-02T19:42:47.079800176Z" level=info msg="RemoveContainer for \"f1c5a7d172e42924ae0dd55391895e9e997120b4b924f13a7b186775f19c3da6\" returns successfully" Oct 2 19:42:47.242430 systemd[1]: run-containerd-runc-k8s.io-7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079-runc.P5GVaR.mount: Deactivated successfully. Oct 2 19:42:47.242562 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079-rootfs.mount: Deactivated successfully. Oct 2 19:42:49.399869 kubelet[2429]: E1002 19:42:49.399812 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:49.449206 kubelet[2429]: W1002 19:42:49.449159 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice/cri-containerd-7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079.scope WatchSource:0}: task 7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079 not found: not found Oct 2 19:42:54.401215 kubelet[2429]: E1002 19:42:54.401160 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:42:59.402251 kubelet[2429]: E1002 19:42:59.402206 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:02.212806 kubelet[2429]: E1002 19:43:02.212458 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:43:04.403707 kubelet[2429]: E1002 19:43:04.403672 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:09.405405 kubelet[2429]: E1002 19:43:09.405350 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:14.407060 kubelet[2429]: E1002 19:43:14.407021 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:17.215849 env[1316]: time="2023-10-02T19:43:17.215784675Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:43:17.255828 env[1316]: time="2023-10-02T19:43:17.255770966Z" level=info msg="CreateContainer within sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\"" Oct 2 19:43:17.256506 env[1316]: time="2023-10-02T19:43:17.256465569Z" level=info msg="StartContainer for \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\"" Oct 2 19:43:17.284609 systemd[1]: Started cri-containerd-f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665.scope. Oct 2 19:43:17.295678 systemd[1]: cri-containerd-f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665.scope: Deactivated successfully. Oct 2 19:43:17.300396 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665-rootfs.mount: Deactivated successfully. Oct 2 19:43:17.317701 env[1316]: time="2023-10-02T19:43:17.317632162Z" level=info msg="shim disconnected" id=f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665 Oct 2 19:43:17.317701 env[1316]: time="2023-10-02T19:43:17.317698162Z" level=warning msg="cleaning up after shim disconnected" id=f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665 namespace=k8s.io Oct 2 19:43:17.317701 env[1316]: time="2023-10-02T19:43:17.317708762Z" level=info msg="cleaning up dead shim" Oct 2 19:43:17.329943 env[1316]: time="2023-10-02T19:43:17.329870420Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3660 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:17.330365 env[1316]: time="2023-10-02T19:43:17.330297522Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:43:17.332974 env[1316]: time="2023-10-02T19:43:17.332909235Z" level=error msg="Failed to pipe stderr of container \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\"" error="reading from a closed fifo" Oct 2 19:43:17.333209 env[1316]: time="2023-10-02T19:43:17.333169336Z" level=error msg="Failed to pipe stdout of container \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\"" error="reading from a closed fifo" Oct 2 19:43:17.339438 env[1316]: time="2023-10-02T19:43:17.339368466Z" level=error msg="StartContainer for \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:17.339695 kubelet[2429]: E1002 19:43:17.339671 2429 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665" Oct 2 19:43:17.340133 kubelet[2429]: E1002 19:43:17.339799 2429 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:17.340133 kubelet[2429]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:17.340133 kubelet[2429]: rm /hostbin/cilium-mount Oct 2 19:43:17.340133 kubelet[2429]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dzlqt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:17.340133 kubelet[2429]: E1002 19:43:17.339848 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:43:18.131812 kubelet[2429]: I1002 19:43:18.131777 2429 scope.go:115] "RemoveContainer" containerID="7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079" Oct 2 19:43:18.132709 kubelet[2429]: I1002 19:43:18.132361 2429 scope.go:115] "RemoveContainer" containerID="7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079" Oct 2 19:43:18.134745 env[1316]: time="2023-10-02T19:43:18.134666868Z" level=info msg="RemoveContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" Oct 2 19:43:18.135590 env[1316]: time="2023-10-02T19:43:18.135558372Z" level=info msg="RemoveContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\"" Oct 2 19:43:18.135837 env[1316]: time="2023-10-02T19:43:18.135794073Z" level=error msg="RemoveContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\" failed" error="failed to set removing state for container \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\": container is already in removing state" Oct 2 19:43:18.136169 kubelet[2429]: E1002 19:43:18.136149 2429 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\": container is already in removing state" containerID="7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079" Oct 2 19:43:18.136281 kubelet[2429]: E1002 19:43:18.136187 2429 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079": container is already in removing state; Skipping pod "cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)" Oct 2 19:43:18.136505 kubelet[2429]: E1002 19:43:18.136480 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:43:18.147654 env[1316]: time="2023-10-02T19:43:18.147599330Z" level=info msg="RemoveContainer for \"7b264a87e697bdd2b5b90b80e94016c551fae0a2df29e30ed1fcdf1819119079\" returns successfully" Oct 2 19:43:19.408786 kubelet[2429]: E1002 19:43:19.408739 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:20.424146 kubelet[2429]: W1002 19:43:20.424072 2429 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice/cri-containerd-f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665.scope WatchSource:0}: task f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665 not found: not found Oct 2 19:43:23.892000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.899073 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:43:23.899312 kernel: audit: type=1400 audit(1696275803.892:1381): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.892000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.945696 kernel: audit: type=1400 audit(1696275803.892:1382): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:23.946241 kernel: audit: type=1300 audit(1696275803.892:1381): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f11500 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:23.892000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f11500 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:23.973227 kernel: audit: type=1327 audit(1696275803.892:1381): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:23.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:23.892000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001136ac0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:24.021624 kernel: audit: type=1300 audit(1696275803.892:1382): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001136ac0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:24.022826 kernel: audit: type=1327 audit(1696275803.892:1382): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:23.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:24.410086 kubelet[2429]: E1002 19:43:24.410051 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:24.630000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.654825 kernel: audit: type=1400 audit(1696275804.630:1383): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.657019 kernel: audit: type=1300 audit(1696275804.630:1383): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f830b0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.630000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f830b0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.630000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.685922 kernel: audit: type=1327 audit(1696275804.630:1383): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.706341 kernel: audit: type=1400 audit(1696275804.657:1384): avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.657000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.657000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c964740 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.657000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.657000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.657000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f83440 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.657000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.662000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.662000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c964860 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.662000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.662000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.662000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009f83590 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.662000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:24.662000 audit[2252]: AVC avc: denied { watch } for pid=2252 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:24.662000 audit[2252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009e5e0f0 a2=fc6 a3=0 items=0 ppid=2136 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c51,c470 key=(null) Oct 2 19:43:24.662000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:43:29.258778 env[1316]: time="2023-10-02T19:43:29.258733597Z" level=info msg="StopPodSandbox for \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\"" Oct 2 19:43:29.259226 env[1316]: time="2023-10-02T19:43:29.258861398Z" level=info msg="TearDown network for sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" successfully" Oct 2 19:43:29.259226 env[1316]: time="2023-10-02T19:43:29.258925798Z" level=info msg="StopPodSandbox for \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" returns successfully" Oct 2 19:43:29.259671 env[1316]: time="2023-10-02T19:43:29.259636301Z" level=info msg="RemovePodSandbox for \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\"" Oct 2 19:43:29.259808 env[1316]: time="2023-10-02T19:43:29.259674701Z" level=info msg="Forcibly stopping sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\"" Oct 2 19:43:29.259808 env[1316]: time="2023-10-02T19:43:29.259770402Z" level=info msg="TearDown network for sandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" successfully" Oct 2 19:43:29.273341 env[1316]: time="2023-10-02T19:43:29.273297266Z" level=info msg="RemovePodSandbox \"70e2784c3155abfe9d08215832f7ea5fc240a3108263c50a9f9164fc2a99374d\" returns successfully" Oct 2 19:43:29.273803 env[1316]: time="2023-10-02T19:43:29.273765868Z" level=info msg="StopPodSandbox for \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\"" Oct 2 19:43:29.273929 env[1316]: time="2023-10-02T19:43:29.273851069Z" level=info msg="TearDown network for sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" successfully" Oct 2 19:43:29.273929 env[1316]: time="2023-10-02T19:43:29.273910369Z" level=info msg="StopPodSandbox for \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" returns successfully" Oct 2 19:43:29.274294 env[1316]: time="2023-10-02T19:43:29.274257871Z" level=info msg="RemovePodSandbox for \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\"" Oct 2 19:43:29.274394 env[1316]: time="2023-10-02T19:43:29.274286871Z" level=info msg="Forcibly stopping sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\"" Oct 2 19:43:29.274394 env[1316]: time="2023-10-02T19:43:29.274365971Z" level=info msg="TearDown network for sandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" successfully" Oct 2 19:43:29.285438 env[1316]: time="2023-10-02T19:43:29.285397024Z" level=info msg="RemovePodSandbox \"120fbf9552f5c863a17c119066a129cf89fafdcf4f2d2543841cf6287286dab3\" returns successfully" Oct 2 19:43:29.411014 kubelet[2429]: E1002 19:43:29.410965 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:33.213369 kubelet[2429]: E1002 19:43:33.213328 2429 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4rjrm_kube-system(ca001424-49f8-4413-a329-fab6f859c83d)\"" pod="kube-system/cilium-4rjrm" podUID=ca001424-49f8-4413-a329-fab6f859c83d Oct 2 19:43:34.412126 kubelet[2429]: E1002 19:43:34.412088 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:34.550021 env[1316]: time="2023-10-02T19:43:34.549966331Z" level=info msg="StopPodSandbox for \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\"" Oct 2 19:43:34.550743 env[1316]: time="2023-10-02T19:43:34.550693434Z" level=info msg="Container to stop \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:43:34.553281 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094-shm.mount: Deactivated successfully. Oct 2 19:43:34.580960 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:34.581116 kernel: audit: type=1334 audit(1696275814.565:1389): prog-id=129 op=UNLOAD Oct 2 19:43:34.565000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:43:34.566634 systemd[1]: cri-containerd-ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094.scope: Deactivated successfully. Oct 2 19:43:34.590000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:43:34.602958 kernel: audit: type=1334 audit(1696275814.590:1390): prog-id=132 op=UNLOAD Oct 2 19:43:34.625886 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094-rootfs.mount: Deactivated successfully. Oct 2 19:43:34.664908 env[1316]: time="2023-10-02T19:43:34.664604875Z" level=info msg="shim disconnected" id=ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094 Oct 2 19:43:34.664908 env[1316]: time="2023-10-02T19:43:34.664671175Z" level=warning msg="cleaning up after shim disconnected" id=ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094 namespace=k8s.io Oct 2 19:43:34.664908 env[1316]: time="2023-10-02T19:43:34.664682175Z" level=info msg="cleaning up dead shim" Oct 2 19:43:34.673578 env[1316]: time="2023-10-02T19:43:34.673533417Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3694 runtime=io.containerd.runc.v2\n" Oct 2 19:43:34.673910 env[1316]: time="2023-10-02T19:43:34.673862819Z" level=info msg="TearDown network for sandbox \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" successfully" Oct 2 19:43:34.673910 env[1316]: time="2023-10-02T19:43:34.673906019Z" level=info msg="StopPodSandbox for \"ba92d8fd63147f771236927ba4cf744a7e314e59bf3d337a2309dccb06544094\" returns successfully" Oct 2 19:43:34.737020 sshd[3462]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:34.737000 audit[3462]: USER_END pid=3462 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:34.741294 systemd[1]: sshd@29-10.200.8.20:22-10.200.12.6:39410.service: Deactivated successfully. Oct 2 19:43:34.742245 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 19:43:34.742444 systemd[1]: session-32.scope: Consumed 1.152s CPU time. Oct 2 19:43:34.745731 systemd-logind[1289]: Session 32 logged out. Waiting for processes to exit. Oct 2 19:43:34.748239 systemd-logind[1289]: Removed session 32. Oct 2 19:43:34.737000 audit[3462]: CRED_DISP pid=3462 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:34.774773 kernel: audit: type=1106 audit(1696275814.737:1391): pid=3462 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:34.774954 kernel: audit: type=1104 audit(1696275814.737:1392): pid=3462 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:43:34.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.20:22-10.200.12.6:39410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:34.790950 kernel: audit: type=1131 audit(1696275814.737:1393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.20:22-10.200.12.6:39410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:34.791079 kubelet[2429]: I1002 19:43:34.791031 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-clustermesh-secrets\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791079 kubelet[2429]: I1002 19:43:34.791077 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-hostproc\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791250 kubelet[2429]: I1002 19:43:34.791112 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-cilium-ipsec-secrets\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791250 kubelet[2429]: I1002 19:43:34.791141 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-cgroup\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791250 kubelet[2429]: I1002 19:43:34.791172 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-hubble-tls\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791250 kubelet[2429]: I1002 19:43:34.791201 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ca001424-49f8-4413-a329-fab6f859c83d-cilium-config-path\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791250 kubelet[2429]: I1002 19:43:34.791230 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-kernel\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791256 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-net\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791286 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-etc-cni-netd\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791312 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-xtables-lock\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791339 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-lib-modules\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791367 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-run\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791398 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dzlqt\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-kube-api-access-dzlqt\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791424 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cni-path\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791461 kubelet[2429]: I1002 19:43:34.791449 2429 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-bpf-maps\") pod \"ca001424-49f8-4413-a329-fab6f859c83d\" (UID: \"ca001424-49f8-4413-a329-fab6f859c83d\") " Oct 2 19:43:34.791775 kubelet[2429]: I1002 19:43:34.791514 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.792628 kubelet[2429]: I1002 19:43:34.791935 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.792628 kubelet[2429]: I1002 19:43:34.791996 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-hostproc" (OuterVolumeSpecName: "hostproc") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.792628 kubelet[2429]: I1002 19:43:34.792242 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.792628 kubelet[2429]: I1002 19:43:34.792276 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.795335 kubelet[2429]: I1002 19:43:34.792317 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.795335 kubelet[2429]: I1002 19:43:34.793269 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.795335 kubelet[2429]: I1002 19:43:34.793293 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.795335 kubelet[2429]: I1002 19:43:34.793538 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cni-path" (OuterVolumeSpecName: "cni-path") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.795335 kubelet[2429]: W1002 19:43:34.793766 2429 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/ca001424-49f8-4413-a329-fab6f859c83d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:43:34.796080 kubelet[2429]: I1002 19:43:34.796056 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:43:34.797784 kubelet[2429]: I1002 19:43:34.797758 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ca001424-49f8-4413-a329-fab6f859c83d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:43:34.798529 systemd[1]: var-lib-kubelet-pods-ca001424\x2d49f8\x2d4413\x2da329\x2dfab6f859c83d-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:34.802909 systemd[1]: var-lib-kubelet-pods-ca001424\x2d49f8\x2d4413\x2da329\x2dfab6f859c83d-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:43:34.804186 kubelet[2429]: I1002 19:43:34.804154 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:34.804674 kubelet[2429]: I1002 19:43:34.804647 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:34.808770 systemd[1]: var-lib-kubelet-pods-ca001424\x2d49f8\x2d4413\x2da329\x2dfab6f859c83d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddzlqt.mount: Deactivated successfully. Oct 2 19:43:34.808907 systemd[1]: var-lib-kubelet-pods-ca001424\x2d49f8\x2d4413\x2da329\x2dfab6f859c83d-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:43:34.810380 kubelet[2429]: I1002 19:43:34.810352 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-kube-api-access-dzlqt" (OuterVolumeSpecName: "kube-api-access-dzlqt") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "kube-api-access-dzlqt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:43:34.810461 kubelet[2429]: I1002 19:43:34.810364 2429 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "ca001424-49f8-4413-a329-fab6f859c83d" (UID: "ca001424-49f8-4413-a329-fab6f859c83d"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:43:34.892692 kubelet[2429]: I1002 19:43:34.892630 2429 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-xtables-lock\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.892692 kubelet[2429]: I1002 19:43:34.892691 2429 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-lib-modules\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.892692 kubelet[2429]: I1002 19:43:34.892709 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-run\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892724 2429 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-bpf-maps\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892745 2429 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-dzlqt\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-kube-api-access-dzlqt\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892763 2429 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cni-path\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892778 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892794 2429 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ca001424-49f8-4413-a329-fab6f859c83d-clustermesh-secrets\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892811 2429 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-hostproc\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892826 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-cilium-cgroup\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892845 2429 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ca001424-49f8-4413-a329-fab6f859c83d-hubble-tls\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892861 2429 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ca001424-49f8-4413-a329-fab6f859c83d-cilium-config-path\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892918 2429 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892938 2429 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-host-proc-sys-net\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:34.893094 kubelet[2429]: I1002 19:43:34.892956 2429 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ca001424-49f8-4413-a329-fab6f859c83d-etc-cni-netd\") on node \"ci-3510.3.0-a-c0afe9ffb8\" DevicePath \"\"" Oct 2 19:43:35.168873 kubelet[2429]: I1002 19:43:35.168839 2429 scope.go:115] "RemoveContainer" containerID="f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665" Oct 2 19:43:35.174391 env[1316]: time="2023-10-02T19:43:35.173950891Z" level=info msg="RemoveContainer for \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\"" Oct 2 19:43:35.176274 systemd[1]: Removed slice kubepods-burstable-podca001424_49f8_4413_a329_fab6f859c83d.slice. Oct 2 19:43:35.184928 env[1316]: time="2023-10-02T19:43:35.184869343Z" level=info msg="RemoveContainer for \"f06b03af61c76a02063f0e525c72680fa7507153f253039197068e70ebf5a665\" returns successfully" Oct 2 19:43:37.215136 kubelet[2429]: I1002 19:43:37.215102 2429 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=ca001424-49f8-4413-a329-fab6f859c83d path="/var/lib/kubelet/pods/ca001424-49f8-4413-a329-fab6f859c83d/volumes" Oct 2 19:43:38.778000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.778000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5cc0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.817368 kernel: audit: type=1400 audit(1696275818.778:1394): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.817472 kernel: audit: type=1300 audit(1696275818.778:1394): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5cc0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.817502 kernel: audit: type=1327 audit(1696275818.778:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:38.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:38.783000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.851133 kernel: audit: type=1400 audit(1696275818.783:1395): avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.783000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5ce0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.851914 kernel: audit: type=1300 audit(1696275818.783:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5ce0 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:38.783000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.783000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5d00 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:38.783000 audit[2294]: AVC avc: denied { watch } for pid=2294 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:38.783000 audit[2294]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ee5d40 a2=fc6 a3=0 items=0 ppid=2175 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:38.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:39.413307 kubelet[2429]: E1002 19:43:39.413272 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:44.414673 kubelet[2429]: E1002 19:43:44.414631 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:49.415776 kubelet[2429]: E1002 19:43:49.415722 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:49.447529 systemd[1]: cri-containerd-e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178.scope: Deactivated successfully. Oct 2 19:43:49.447839 systemd[1]: cri-containerd-e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178.scope: Consumed 5.041s CPU time. Oct 2 19:43:49.461917 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:43:49.462076 kernel: audit: type=1334 audit(1696275829.452:1398): prog-id=88 op=UNLOAD Oct 2 19:43:49.452000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:43:49.452000 audit: BPF prog-id=94 op=UNLOAD Oct 2 19:43:49.468403 kernel: audit: type=1334 audit(1696275829.452:1399): prog-id=94 op=UNLOAD Oct 2 19:43:49.483251 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178-rootfs.mount: Deactivated successfully. Oct 2 19:43:49.559401 env[1316]: time="2023-10-02T19:43:49.559343260Z" level=info msg="shim disconnected" id=e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178 Oct 2 19:43:49.559401 env[1316]: time="2023-10-02T19:43:49.559405860Z" level=warning msg="cleaning up after shim disconnected" id=e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178 namespace=k8s.io Oct 2 19:43:49.560075 env[1316]: time="2023-10-02T19:43:49.559417160Z" level=info msg="cleaning up dead shim" Oct 2 19:43:49.567939 env[1316]: time="2023-10-02T19:43:49.567873800Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3726 runtime=io.containerd.runc.v2\n" Oct 2 19:43:49.883357 kubelet[2429]: E1002 19:43:49.881871 2429 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.20:41300->10.200.8.13:2379: read: connection timed out" Oct 2 19:43:50.199286 kubelet[2429]: I1002 19:43:50.199115 2429 scope.go:115] "RemoveContainer" containerID="e6f43a228ad9f1f0b70144b7304cf2b7cf5a6f39d92879a152455ce5e76c8178" Oct 2 19:43:50.202336 env[1316]: time="2023-10-02T19:43:50.202207594Z" level=info msg="CreateContainer within sandbox \"3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:43:50.230561 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1213813895.mount: Deactivated successfully. Oct 2 19:43:50.249451 env[1316]: time="2023-10-02T19:43:50.249385017Z" level=info msg="CreateContainer within sandbox \"3a4ec91355c4a438ee07b4f7c19a94c3605af343c386a340de0ac1377eb52138\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"8613941dd630c8f358ed61fa92d0bf424af59744ad7644642b8612caf2a29cd7\"" Oct 2 19:43:50.250143 env[1316]: time="2023-10-02T19:43:50.250107020Z" level=info msg="StartContainer for \"8613941dd630c8f358ed61fa92d0bf424af59744ad7644642b8612caf2a29cd7\"" Oct 2 19:43:50.270542 systemd[1]: Started cri-containerd-8613941dd630c8f358ed61fa92d0bf424af59744ad7644642b8612caf2a29cd7.scope. Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.304112 kernel: audit: type=1400 audit(1696275830.286:1400): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.334730 kernel: audit: type=1400 audit(1696275830.286:1401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.334911 kernel: audit: type=1400 audit(1696275830.286:1402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.334954 kernel: audit: type=1400 audit(1696275830.286:1403): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361559 kernel: audit: type=1400 audit(1696275830.286:1404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.389458 kernel: audit: type=1400 audit(1696275830.286:1405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.389862 kernel: audit: type=1400 audit(1696275830.286:1406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.403793 kernel: audit: type=1400 audit(1696275830.286:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.319000 audit: BPF prog-id=133 op=LOAD Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2175 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:50.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836313339343164643633306338663335386564363166613932643062 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2175 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:50.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836313339343164643633306338663335386564363166613932643062 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.321000 audit: BPF prog-id=134 op=LOAD Oct 2 19:43:50.321000 audit[3746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a1700 items=0 ppid=2175 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:50.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836313339343164643633306338663335386564363166613932643062 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.347000 audit: BPF prog-id=135 op=LOAD Oct 2 19:43:50.347000 audit[3746]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a1748 items=0 ppid=2175 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:50.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836313339343164643633306338663335386564363166613932643062 Oct 2 19:43:50.361000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:43:50.361000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { perfmon } for pid=3746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit[3746]: AVC avc: denied { bpf } for pid=3746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:50.361000 audit: BPF prog-id=136 op=LOAD Oct 2 19:43:50.361000 audit[3746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a1b58 items=0 ppid=2175 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:50.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836313339343164643633306338663335386564363166613932643062 Oct 2 19:43:50.441659 env[1316]: time="2023-10-02T19:43:50.441566324Z" level=info msg="StartContainer for \"8613941dd630c8f358ed61fa92d0bf424af59744ad7644642b8612caf2a29cd7\" returns successfully" Oct 2 19:43:51.176000 audit[3757]: AVC avc: denied { watch } for pid=3757 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:51.176000 audit[3757]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000866810 a2=fc6 a3=0 items=0 ppid=2175 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:51.176000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:51.179000 audit[3757]: AVC avc: denied { watch } for pid=3757 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6884 scontext=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:51.179000 audit[3757]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0002524e0 a2=fc6 a3=0 items=0 ppid=2175 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c559,c617 key=(null) Oct 2 19:43:51.179000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:54.361216 kubelet[2429]: E1002 19:43:54.361111 2429 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8.178a61dfe6bf5ee8", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-c0afe9ffb8", UID:"66b795c39646b1e60af050357ed1faa5", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-c0afe9ffb8"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 43, 43, 935315688, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 43, 43, 935315688, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.20:41100->10.200.8.13:2379: read: connection timed out' (will not retry!) Oct 2 19:43:54.417135 kubelet[2429]: E1002 19:43:54.417103 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:43:55.970245 systemd[1]: cri-containerd-57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b.scope: Deactivated successfully. Oct 2 19:43:55.970665 systemd[1]: cri-containerd-57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b.scope: Consumed 1.621s CPU time. Oct 2 19:43:55.987600 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 19:43:55.987746 kernel: audit: type=1334 audit(1696275835.975:1420): prog-id=84 op=UNLOAD Oct 2 19:43:55.975000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:43:55.975000 audit: BPF prog-id=96 op=UNLOAD Oct 2 19:43:55.998246 kernel: audit: type=1334 audit(1696275835.975:1421): prog-id=96 op=UNLOAD Oct 2 19:43:56.012320 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b-rootfs.mount: Deactivated successfully. Oct 2 19:43:56.078248 env[1316]: time="2023-10-02T19:43:56.078186302Z" level=info msg="shim disconnected" id=57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b Oct 2 19:43:56.078248 env[1316]: time="2023-10-02T19:43:56.078244502Z" level=warning msg="cleaning up after shim disconnected" id=57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b namespace=k8s.io Oct 2 19:43:56.078248 env[1316]: time="2023-10-02T19:43:56.078256102Z" level=info msg="cleaning up dead shim" Oct 2 19:43:56.087006 env[1316]: time="2023-10-02T19:43:56.086949843Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3786 runtime=io.containerd.runc.v2\n" Oct 2 19:43:56.215425 kubelet[2429]: I1002 19:43:56.215389 2429 scope.go:115] "RemoveContainer" containerID="57ad0387db667747b1fe72d763a9bdfea02257f16bdb5590f8f3bb5afcb0c38b" Oct 2 19:43:56.217444 env[1316]: time="2023-10-02T19:43:56.217404058Z" level=info msg="CreateContainer within sandbox \"629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:43:56.255750 env[1316]: time="2023-10-02T19:43:56.255618638Z" level=info msg="CreateContainer within sandbox \"629a2a0d30c49b28266ad8ed8af036d18e977e456dbfeee607ad0fed324a30c3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"387f114c814bfd10efeaf3cda8399e2bbc316d1ce28bda091e2765102394fbc7\"" Oct 2 19:43:56.256715 env[1316]: time="2023-10-02T19:43:56.256669643Z" level=info msg="StartContainer for \"387f114c814bfd10efeaf3cda8399e2bbc316d1ce28bda091e2765102394fbc7\"" Oct 2 19:43:56.286961 systemd[1]: Started cri-containerd-387f114c814bfd10efeaf3cda8399e2bbc316d1ce28bda091e2765102394fbc7.scope. Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.324152 kernel: audit: type=1400 audit(1696275836.304:1422): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.359006 kernel: audit: type=1400 audit(1696275836.304:1423): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.359167 kernel: audit: type=1400 audit(1696275836.304:1424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.392830 kernel: audit: type=1400 audit(1696275836.304:1425): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.393039 kernel: audit: type=1400 audit(1696275836.304:1426): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.423903 kernel: audit: type=1400 audit(1696275836.304:1427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.424864 kernel: audit: type=1400 audit(1696275836.304:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.424933 kernel: audit: type=1400 audit(1696275836.304:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit: BPF prog-id=137 op=LOAD Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2118 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338376631313463383134626664313065666561663363646138333939 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2118 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338376631313463383134626664313065666561663363646138333939 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.323000 audit: BPF prog-id=138 op=LOAD Oct 2 19:43:56.323000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000b79c0 items=0 ppid=2118 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:56.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338376631313463383134626664313065666561663363646138333939 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit: BPF prog-id=139 op=LOAD Oct 2 19:43:56.341000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000b7a08 items=0 ppid=2118 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338376631313463383134626664313065666561663363646138333939 Oct 2 19:43:56.341000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:43:56.341000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { perfmon } for pid=3804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit[3804]: AVC avc: denied { bpf } for pid=3804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:56.341000 audit: BPF prog-id=140 op=LOAD Oct 2 19:43:56.341000 audit[3804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000b7e18 items=0 ppid=2118 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338376631313463383134626664313065666561663363646138333939 Oct 2 19:43:56.479114 env[1316]: time="2023-10-02T19:43:56.479055390Z" level=info msg="StartContainer for \"387f114c814bfd10efeaf3cda8399e2bbc316d1ce28bda091e2765102394fbc7\" returns successfully" Oct 2 19:43:57.013636 systemd[1]: run-containerd-runc-k8s.io-387f114c814bfd10efeaf3cda8399e2bbc316d1ce28bda091e2765102394fbc7-runc.l7VQVL.mount: Deactivated successfully. Oct 2 19:43:59.418916 kubelet[2429]: E1002 19:43:59.418862 2429 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"