Oct 2 19:51:14.027724 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:51:14.027752 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:14.027765 kernel: BIOS-provided physical RAM map: Oct 2 19:51:14.027775 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:51:14.027783 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:51:14.027792 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:51:14.027806 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:51:14.027816 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:51:14.027826 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:51:14.027835 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:51:14.027845 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:51:14.027855 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:51:14.027864 kernel: NX (Execute Disable) protection: active Oct 2 19:51:14.027875 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:51:14.027892 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 19:51:14.027907 kernel: random: crng init done Oct 2 19:51:14.027919 kernel: SMBIOS 3.1.0 present. Oct 2 19:51:14.027931 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:51:14.027942 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:51:14.027951 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:51:14.027961 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:51:14.027971 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:51:14.027983 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:51:14.027992 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:51:14.028002 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:51:14.028012 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:51:14.028036 kernel: tsc: Detected 2593.905 MHz processor Oct 2 19:51:14.028047 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:51:14.028058 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:51:14.028069 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:51:14.028079 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:51:14.028090 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:51:14.028103 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:51:14.028114 kernel: Using GB pages for direct mapping Oct 2 19:51:14.028125 kernel: Secure boot disabled Oct 2 19:51:14.028136 kernel: ACPI: Early table checksum verification disabled Oct 2 19:51:14.028148 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:51:14.028160 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028172 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028184 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:51:14.028202 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:51:14.028215 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028227 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028239 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028252 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028264 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028279 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028292 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:14.028304 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:51:14.028317 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:51:14.028329 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:51:14.028341 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:51:14.028353 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:51:14.028366 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:51:14.028381 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:51:14.028392 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:51:14.028404 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:51:14.028417 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:51:14.028429 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:51:14.028441 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:51:14.028454 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:51:14.028466 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:51:14.028478 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:51:14.028492 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:51:14.028505 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:51:14.028517 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:51:14.028529 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:51:14.028541 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:51:14.028553 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:51:14.028566 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:51:14.028578 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:51:14.028590 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:51:14.028605 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:51:14.028617 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:51:14.028630 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:51:14.028642 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:51:14.028654 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:51:14.028666 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:51:14.028679 kernel: Zone ranges: Oct 2 19:51:14.028691 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:51:14.028703 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:51:14.028718 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:14.028731 kernel: Movable zone start for each node Oct 2 19:51:14.028743 kernel: Early memory node ranges Oct 2 19:51:14.028755 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:51:14.028768 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:51:14.028780 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:51:14.028792 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:14.028804 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:51:14.028816 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:51:14.028831 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:51:14.028843 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:51:14.028855 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:51:14.028867 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:51:14.028879 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:51:14.028892 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:51:14.028904 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:51:14.028916 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:51:14.028934 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:51:14.028949 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:51:14.028961 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:51:14.028974 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:51:14.028986 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:51:14.029002 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:51:14.029024 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:51:14.029037 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:51:14.029049 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:51:14.029061 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:51:14.029077 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:51:14.029089 kernel: Policy zone: Normal Oct 2 19:51:14.029103 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:14.029115 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:51:14.029127 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:51:14.029140 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:51:14.029152 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:51:14.029165 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:51:14.029179 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:51:14.029194 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:51:14.029215 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:51:14.029231 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:51:14.029244 kernel: rcu: RCU event tracing is enabled. Oct 2 19:51:14.029257 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:51:14.029271 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:51:14.029283 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:51:14.029296 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:51:14.029309 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:51:14.029322 kernel: Using NULL legacy PIC Oct 2 19:51:14.029337 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:51:14.029350 kernel: Console: colour dummy device 80x25 Oct 2 19:51:14.029363 kernel: printk: console [tty1] enabled Oct 2 19:51:14.029376 kernel: printk: console [ttyS0] enabled Oct 2 19:51:14.029389 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:51:14.029404 kernel: ACPI: Core revision 20210730 Oct 2 19:51:14.029417 kernel: Failed to register legacy timer interrupt Oct 2 19:51:14.029430 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:51:14.029443 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:51:14.029455 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Oct 2 19:51:14.029468 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:51:14.038051 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:51:14.038071 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:51:14.038085 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:51:14.038098 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:51:14.038115 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:51:14.038129 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:51:14.038143 kernel: RETBleed: Vulnerable Oct 2 19:51:14.038156 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:51:14.038169 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:14.038182 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:14.038195 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:51:14.038208 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:51:14.038221 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:51:14.038234 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:51:14.038249 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:51:14.038263 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:51:14.038276 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:51:14.038289 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:51:14.038301 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:51:14.038314 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:51:14.038327 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:51:14.038340 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:51:14.038353 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:51:14.038367 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:51:14.038380 kernel: LSM: Security Framework initializing Oct 2 19:51:14.038393 kernel: SELinux: Initializing. Oct 2 19:51:14.038409 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:14.038422 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:14.038436 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:51:14.038449 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:51:14.038463 kernel: signal: max sigframe size: 3632 Oct 2 19:51:14.038477 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:51:14.038490 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:51:14.038503 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:51:14.038517 kernel: x86: Booting SMP configuration: Oct 2 19:51:14.038530 kernel: .... node #0, CPUs: #1 Oct 2 19:51:14.038545 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:51:14.038559 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:51:14.038572 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:51:14.038585 kernel: smpboot: Max logical packages: 1 Oct 2 19:51:14.038598 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:51:14.038612 kernel: devtmpfs: initialized Oct 2 19:51:14.038625 kernel: x86/mm: Memory block size: 128MB Oct 2 19:51:14.038638 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:51:14.038654 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:51:14.038667 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:51:14.038680 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:51:14.038693 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:51:14.038706 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:51:14.038718 kernel: audit: type=2000 audit(1696276273.023:1): state=initialized audit_enabled=0 res=1 Oct 2 19:51:14.038730 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:51:14.038742 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:51:14.038755 kernel: cpuidle: using governor menu Oct 2 19:51:14.038770 kernel: ACPI: bus type PCI registered Oct 2 19:51:14.038782 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:51:14.038794 kernel: dca service started, version 1.12.1 Oct 2 19:51:14.038808 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:51:14.038820 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:51:14.038832 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:51:14.038845 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:51:14.038857 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:51:14.038869 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:51:14.038883 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:51:14.038895 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:51:14.038907 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:51:14.038920 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:51:14.038933 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:51:14.038945 kernel: ACPI: Interpreter enabled Oct 2 19:51:14.038957 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:51:14.038969 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:51:14.038982 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:51:14.038996 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:51:14.039009 kernel: iommu: Default domain type: Translated Oct 2 19:51:14.039038 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:51:14.039051 kernel: vgaarb: loaded Oct 2 19:51:14.039063 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:51:14.039075 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:51:14.039088 kernel: PTP clock support registered Oct 2 19:51:14.039100 kernel: Registered efivars operations Oct 2 19:51:14.039112 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:51:14.039125 kernel: PCI: System does not support PCI Oct 2 19:51:14.039139 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:51:14.039151 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:51:14.039164 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:51:14.039176 kernel: pnp: PnP ACPI init Oct 2 19:51:14.039188 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:51:14.039200 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:51:14.039213 kernel: NET: Registered PF_INET protocol family Oct 2 19:51:14.039225 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:51:14.039239 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:51:14.039252 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:51:14.039264 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:51:14.039276 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:51:14.039289 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:51:14.039301 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:14.039313 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:14.039326 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:51:14.039338 kernel: NET: Registered PF_XDP protocol family Oct 2 19:51:14.039352 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:51:14.039365 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:51:14.039378 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:51:14.039390 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:51:14.039402 kernel: Initialise system trusted keyrings Oct 2 19:51:14.039414 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:51:14.039426 kernel: Key type asymmetric registered Oct 2 19:51:14.039438 kernel: Asymmetric key parser 'x509' registered Oct 2 19:51:14.039451 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:51:14.039465 kernel: io scheduler mq-deadline registered Oct 2 19:51:14.039478 kernel: io scheduler kyber registered Oct 2 19:51:14.039491 kernel: io scheduler bfq registered Oct 2 19:51:14.039519 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:51:14.039531 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:51:14.039544 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:51:14.039557 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:51:14.039572 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:51:14.039733 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:51:14.039847 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:51:13 UTC (1696276273) Oct 2 19:51:14.039954 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:51:14.039970 kernel: fail to initialize ptp_kvm Oct 2 19:51:14.039984 kernel: intel_pstate: CPU model not supported Oct 2 19:51:14.039996 kernel: efifb: probing for efifb Oct 2 19:51:14.040008 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:51:14.040037 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:51:14.040049 kernel: efifb: scrolling: redraw Oct 2 19:51:14.040064 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:51:14.040075 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:51:14.040086 kernel: fb0: EFI VGA frame buffer device Oct 2 19:51:14.040097 kernel: pstore: Registered efi as persistent store backend Oct 2 19:51:14.040105 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:51:14.040112 kernel: Segment Routing with IPv6 Oct 2 19:51:14.040120 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:51:14.040127 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:51:14.040134 kernel: Key type dns_resolver registered Oct 2 19:51:14.040143 kernel: IPI shorthand broadcast: enabled Oct 2 19:51:14.040151 kernel: sched_clock: Marking stable (764370800, 22520200)->(977379800, -190488800) Oct 2 19:51:14.040158 kernel: registered taskstats version 1 Oct 2 19:51:14.040165 kernel: Loading compiled-in X.509 certificates Oct 2 19:51:14.040173 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:51:14.040180 kernel: Key type .fscrypt registered Oct 2 19:51:14.040187 kernel: Key type fscrypt-provisioning registered Oct 2 19:51:14.040194 kernel: pstore: Using crash dump compression: deflate Oct 2 19:51:14.040203 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:51:14.040210 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:51:14.040218 kernel: ima: No architecture policies found Oct 2 19:51:14.040225 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:51:14.040236 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:51:14.040243 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:51:14.040252 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:51:14.040261 kernel: Run /init as init process Oct 2 19:51:14.040268 kernel: with arguments: Oct 2 19:51:14.040279 kernel: /init Oct 2 19:51:14.040289 kernel: with environment: Oct 2 19:51:14.040296 kernel: HOME=/ Oct 2 19:51:14.040304 kernel: TERM=linux Oct 2 19:51:14.040312 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:51:14.040324 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:51:14.040333 systemd[1]: Detected virtualization microsoft. Oct 2 19:51:14.040342 systemd[1]: Detected architecture x86-64. Oct 2 19:51:14.040353 systemd[1]: Running in initrd. Oct 2 19:51:14.040364 systemd[1]: No hostname configured, using default hostname. Oct 2 19:51:14.040372 systemd[1]: Hostname set to . Oct 2 19:51:14.040382 systemd[1]: Initializing machine ID from random generator. Oct 2 19:51:14.040390 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:51:14.040401 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:51:14.040408 systemd[1]: Reached target cryptsetup.target. Oct 2 19:51:14.040418 systemd[1]: Reached target paths.target. Oct 2 19:51:14.040426 systemd[1]: Reached target slices.target. Oct 2 19:51:14.040439 systemd[1]: Reached target swap.target. Oct 2 19:51:14.040446 systemd[1]: Reached target timers.target. Oct 2 19:51:14.040456 systemd[1]: Listening on iscsid.socket. Oct 2 19:51:14.040464 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:51:14.040475 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:51:14.040483 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:51:14.040492 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:51:14.040503 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:51:14.040513 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:51:14.040521 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:51:14.040531 systemd[1]: Reached target sockets.target. Oct 2 19:51:14.040540 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:51:14.040550 systemd[1]: Finished network-cleanup.service. Oct 2 19:51:14.040558 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:51:14.040566 systemd[1]: Starting systemd-journald.service... Oct 2 19:51:14.040576 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:51:14.040588 systemd[1]: Starting systemd-resolved.service... Oct 2 19:51:14.040596 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:51:14.040604 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:51:14.040618 systemd-journald[183]: Journal started Oct 2 19:51:14.040667 systemd-journald[183]: Runtime Journal (/run/log/journal/3c64f7f3ae224c75882324a60fd6b11c) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:14.037892 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:51:14.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.069024 kernel: audit: type=1130 audit(1696276274.058:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.069043 systemd[1]: Started systemd-journald.service. Oct 2 19:51:14.078527 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:51:14.080895 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:51:14.084266 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:51:14.103973 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:51:14.128505 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:51:14.128531 kernel: Bridge firewalling registered Oct 2 19:51:14.128547 kernel: audit: type=1130 audit(1696276274.115:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.115117 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:51:14.128541 systemd[1]: Started systemd-resolved.service. Oct 2 19:51:14.134516 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:51:14.138353 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:51:14.142890 systemd[1]: Reached target nss-lookup.target. Oct 2 19:51:14.147480 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:51:14.152191 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:51:14.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.170036 kernel: audit: type=1130 audit(1696276274.132:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.170068 kernel: audit: type=1130 audit(1696276274.134:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.189669 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:51:14.192668 kernel: audit: type=1130 audit(1696276274.142:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.207589 kernel: audit: type=1130 audit(1696276274.192:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.212028 kernel: SCSI subsystem initialized Oct 2 19:51:14.222644 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:51:14.257788 kernel: audit: type=1130 audit(1696276274.225:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.257811 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:51:14.257822 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:51:14.257839 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:51:14.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.237315 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:51:14.252209 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:51:14.259278 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:51:14.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.267113 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:51:14.282379 kernel: audit: type=1130 audit(1696276274.266:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.282406 dracut-cmdline[200]: dracut-dracut-053 Oct 2 19:51:14.284368 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:14.306753 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:51:14.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.323035 kernel: audit: type=1130 audit(1696276274.309:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.356034 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:51:14.369039 kernel: iscsi: registered transport (tcp) Oct 2 19:51:14.397661 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:51:14.397706 kernel: QLogic iSCSI HBA Driver Oct 2 19:51:14.426828 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:51:14.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.429956 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:51:14.481039 kernel: raid6: avx512x4 gen() 18364 MB/s Oct 2 19:51:14.501030 kernel: raid6: avx512x4 xor() 7543 MB/s Oct 2 19:51:14.520039 kernel: raid6: avx512x2 gen() 18295 MB/s Oct 2 19:51:14.540034 kernel: raid6: avx512x2 xor() 29529 MB/s Oct 2 19:51:14.560028 kernel: raid6: avx512x1 gen() 18292 MB/s Oct 2 19:51:14.580026 kernel: raid6: avx512x1 xor() 27362 MB/s Oct 2 19:51:14.601055 kernel: raid6: avx2x4 gen() 18306 MB/s Oct 2 19:51:14.621041 kernel: raid6: avx2x4 xor() 6574 MB/s Oct 2 19:51:14.641042 kernel: raid6: avx2x2 gen() 17264 MB/s Oct 2 19:51:14.662045 kernel: raid6: avx2x2 xor() 21692 MB/s Oct 2 19:51:14.682041 kernel: raid6: avx2x1 gen() 13116 MB/s Oct 2 19:51:14.702045 kernel: raid6: avx2x1 xor() 17627 MB/s Oct 2 19:51:14.728044 kernel: raid6: sse2x4 gen() 11455 MB/s Oct 2 19:51:14.748028 kernel: raid6: sse2x4 xor() 6613 MB/s Oct 2 19:51:14.768031 kernel: raid6: sse2x2 gen() 12890 MB/s Oct 2 19:51:14.788034 kernel: raid6: sse2x2 xor() 7718 MB/s Oct 2 19:51:14.808030 kernel: raid6: sse2x1 gen() 11578 MB/s Oct 2 19:51:14.831359 kernel: raid6: sse2x1 xor() 5959 MB/s Oct 2 19:51:14.831385 kernel: raid6: using algorithm avx512x4 gen() 18364 MB/s Oct 2 19:51:14.831397 kernel: raid6: .... xor() 7543 MB/s, rmw enabled Oct 2 19:51:14.834879 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:51:14.853041 kernel: xor: automatically using best checksumming function avx Oct 2 19:51:14.948037 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:51:14.955839 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:51:14.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.960000 audit: BPF prog-id=7 op=LOAD Oct 2 19:51:14.960000 audit: BPF prog-id=8 op=LOAD Oct 2 19:51:14.961109 systemd[1]: Starting systemd-udevd.service... Oct 2 19:51:14.976260 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 19:51:14.983065 systemd[1]: Started systemd-udevd.service. Oct 2 19:51:14.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:14.989797 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:51:15.004925 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Oct 2 19:51:15.031798 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:51:15.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:15.037572 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:51:15.071156 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:51:15.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:15.120034 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:51:15.153674 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:51:15.153743 kernel: AES CTR mode by8 optimization enabled Oct 2 19:51:15.154031 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:51:15.170035 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:51:15.187130 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:51:15.191162 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:51:15.197095 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:51:15.205031 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:51:15.210032 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:51:15.216041 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:51:15.225073 kernel: scsi host0: storvsc_host_t Oct 2 19:51:15.225270 kernel: hid-generic 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:51:15.225381 kernel: scsi host1: storvsc_host_t Oct 2 19:51:15.228804 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:51:15.239044 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:51:15.261122 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:51:15.261336 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:51:15.262038 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:51:15.262218 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:51:15.269532 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:51:15.269734 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:51:15.278182 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:51:15.278404 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:51:15.283032 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:15.291905 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:51:15.359144 kernel: hv_netvsc 000d3ab1-cc7a-000d-3ab1-cc7a000d3ab1 eth0: VF slot 1 added Oct 2 19:51:15.369038 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:51:15.375032 kernel: hv_pci 8d1e97a4-d0a7-4913-8932-4559e01e5887: PCI VMBus probing: Using version 0x10004 Oct 2 19:51:15.386193 kernel: hv_pci 8d1e97a4-d0a7-4913-8932-4559e01e5887: PCI host bridge to bus d0a7:00 Oct 2 19:51:15.386352 kernel: pci_bus d0a7:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:51:15.386487 kernel: pci_bus d0a7:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:51:15.396396 kernel: pci d0a7:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:51:15.408412 kernel: pci d0a7:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:15.428031 kernel: pci d0a7:00:02.0: enabling Extended Tags Oct 2 19:51:15.441044 kernel: pci d0a7:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at d0a7:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:51:15.450286 kernel: pci_bus d0a7:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:51:15.450575 kernel: pci d0a7:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:15.552049 kernel: mlx5_core d0a7:00:02.0: firmware version: 14.30.1224 Oct 2 19:51:15.637607 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:51:15.715037 kernel: mlx5_core d0a7:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:51:15.725042 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (429) Oct 2 19:51:15.743177 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:51:15.768391 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:51:15.797479 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:51:15.807793 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:51:15.817229 systemd[1]: Starting disk-uuid.service... Oct 2 19:51:15.832034 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:15.839029 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:15.899589 kernel: mlx5_core d0a7:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:51:15.899878 kernel: mlx5_core d0a7:00:02.0: mlx5e_tc_post_act_init:40:(pid 16): firmware level support is missing Oct 2 19:51:15.917041 kernel: hv_netvsc 000d3ab1-cc7a-000d-3ab1-cc7a000d3ab1 eth0: VF registering: eth1 Oct 2 19:51:15.924046 kernel: mlx5_core d0a7:00:02.0 eth1: joined to eth0 Oct 2 19:51:15.941045 kernel: mlx5_core d0a7:00:02.0 enP53415s1: renamed from eth1 Oct 2 19:51:16.849039 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:16.849639 disk-uuid[541]: The operation has completed successfully. Oct 2 19:51:16.921004 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:51:16.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.921121 systemd[1]: Finished disk-uuid.service. Oct 2 19:51:16.932895 systemd[1]: Starting verity-setup.service... Oct 2 19:51:16.966098 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:51:17.114496 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:51:17.119553 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:51:17.123352 systemd[1]: Finished verity-setup.service. Oct 2 19:51:17.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.201871 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:51:17.205601 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:51:17.205734 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:51:17.209891 systemd[1]: Starting ignition-setup.service... Oct 2 19:51:17.214685 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:51:17.234793 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:17.234833 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:17.234844 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:17.281303 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:51:17.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.285000 audit: BPF prog-id=9 op=LOAD Oct 2 19:51:17.286532 systemd[1]: Starting systemd-networkd.service... Oct 2 19:51:17.309431 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:51:17.315464 systemd-networkd[780]: lo: Link UP Oct 2 19:51:17.316049 systemd-networkd[780]: lo: Gained carrier Oct 2 19:51:17.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.316912 systemd-networkd[780]: Enumeration completed Oct 2 19:51:17.316979 systemd[1]: Started systemd-networkd.service. Oct 2 19:51:17.319759 systemd[1]: Reached target network.target. Oct 2 19:51:17.323198 systemd-networkd[780]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:51:17.326305 systemd[1]: Starting iscsiuio.service... Oct 2 19:51:17.340407 systemd[1]: Started iscsiuio.service. Oct 2 19:51:17.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.344674 systemd[1]: Starting iscsid.service... Oct 2 19:51:17.348318 iscsid[792]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:17.348318 iscsid[792]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 19:51:17.348318 iscsid[792]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:51:17.348318 iscsid[792]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:51:17.348318 iscsid[792]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:51:17.348318 iscsid[792]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:17.348318 iscsid[792]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:51:17.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.349637 systemd[1]: Started iscsid.service. Oct 2 19:51:17.354418 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:51:17.387747 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:51:17.398864 kernel: mlx5_core d0a7:00:02.0 enP53415s1: Link up Oct 2 19:51:17.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.388759 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:51:17.402822 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:51:17.406939 systemd[1]: Reached target remote-fs.target. Oct 2 19:51:17.411748 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:51:17.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.419883 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:51:17.435914 systemd[1]: Finished ignition-setup.service. Oct 2 19:51:17.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:17.440690 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:51:17.478486 kernel: hv_netvsc 000d3ab1-cc7a-000d-3ab1-cc7a000d3ab1 eth0: Data path switched to VF: enP53415s1 Oct 2 19:51:17.478739 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:51:17.478897 systemd-networkd[780]: enP53415s1: Link UP Oct 2 19:51:17.479061 systemd-networkd[780]: eth0: Link UP Oct 2 19:51:17.479590 systemd-networkd[780]: eth0: Gained carrier Oct 2 19:51:17.487561 systemd-networkd[780]: enP53415s1: Gained carrier Oct 2 19:51:17.512095 systemd-networkd[780]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:51:19.310173 systemd-networkd[780]: eth0: Gained IPv6LL Oct 2 19:51:19.900499 ignition[807]: Ignition 2.14.0 Oct 2 19:51:19.900515 ignition[807]: Stage: fetch-offline Oct 2 19:51:19.900622 ignition[807]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:19.900671 ignition[807]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:19.970099 ignition[807]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:19.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.971879 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:51:19.996896 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:51:19.996938 kernel: audit: type=1130 audit(1696276279.975:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.970335 ignition[807]: parsed url from cmdline: "" Oct 2 19:51:19.976932 systemd[1]: Starting ignition-fetch.service... Oct 2 19:51:19.970339 ignition[807]: no config URL provided Oct 2 19:51:19.970350 ignition[807]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:19.970359 ignition[807]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:19.970364 ignition[807]: failed to fetch config: resource requires networking Oct 2 19:51:19.970905 ignition[807]: Ignition finished successfully Oct 2 19:51:19.986063 ignition[813]: Ignition 2.14.0 Oct 2 19:51:19.986070 ignition[813]: Stage: fetch Oct 2 19:51:19.986182 ignition[813]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:19.986206 ignition[813]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:19.991741 ignition[813]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:19.992114 ignition[813]: parsed url from cmdline: "" Oct 2 19:51:19.992121 ignition[813]: no config URL provided Oct 2 19:51:19.992135 ignition[813]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:19.992152 ignition[813]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:19.992234 ignition[813]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:51:20.010211 ignition[813]: GET result: OK Oct 2 19:51:20.010229 ignition[813]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 19:51:20.100066 ignition[813]: opening config device: "/dev/sr0" Oct 2 19:51:20.100498 ignition[813]: getting drive status for "/dev/sr0" Oct 2 19:51:20.100545 ignition[813]: drive status: OK Oct 2 19:51:20.100603 ignition[813]: mounting config device Oct 2 19:51:20.100614 ignition[813]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure3839236390" Oct 2 19:51:20.124778 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 19:51:20.123935 ignition[813]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure3839236390" Oct 2 19:51:20.123947 ignition[813]: checking for config drive Oct 2 19:51:20.124249 ignition[813]: reading config Oct 2 19:51:20.124740 ignition[813]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure3839236390" Oct 2 19:51:20.124831 ignition[813]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure3839236390" Oct 2 19:51:20.124847 ignition[813]: config has been read from custom data Oct 2 19:51:20.124935 ignition[813]: parsing config with SHA512: fd3336fdd3e9e4ee637550dfe8f6787dfbd9c6176c27c6661feab41b1cfb79ca6a8b4b57059762b8d7b16e77200c1b7c3c5bba0d7ecc69900a459919d83b5901 Oct 2 19:51:20.134812 systemd[1]: tmp-ignition\x2dazure3839236390.mount: Deactivated successfully. Oct 2 19:51:20.155888 unknown[813]: fetched base config from "system" Oct 2 19:51:20.155900 unknown[813]: fetched base config from "system" Oct 2 19:51:20.155908 unknown[813]: fetched user config from "azure" Oct 2 19:51:20.162425 ignition[813]: fetch: fetch complete Oct 2 19:51:20.162435 ignition[813]: fetch: fetch passed Oct 2 19:51:20.162501 ignition[813]: Ignition finished successfully Oct 2 19:51:20.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.166666 systemd[1]: Finished ignition-fetch.service. Oct 2 19:51:20.183650 kernel: audit: type=1130 audit(1696276280.170:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.172137 systemd[1]: Starting ignition-kargs.service... Oct 2 19:51:20.192879 ignition[820]: Ignition 2.14.0 Oct 2 19:51:20.192888 ignition[820]: Stage: kargs Oct 2 19:51:20.193038 ignition[820]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:20.193086 ignition[820]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:20.201637 ignition[820]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:20.205599 ignition[820]: kargs: kargs passed Oct 2 19:51:20.205665 ignition[820]: Ignition finished successfully Oct 2 19:51:20.209816 systemd[1]: Finished ignition-kargs.service. Oct 2 19:51:20.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.214746 systemd[1]: Starting ignition-disks.service... Oct 2 19:51:20.229758 kernel: audit: type=1130 audit(1696276280.213:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.229772 ignition[826]: Ignition 2.14.0 Oct 2 19:51:20.229782 ignition[826]: Stage: disks Oct 2 19:51:20.229931 ignition[826]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:20.229966 ignition[826]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:20.235520 ignition[826]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:20.236930 ignition[826]: disks: disks passed Oct 2 19:51:20.239011 systemd[1]: Finished ignition-disks.service. Oct 2 19:51:20.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.256057 kernel: audit: type=1130 audit(1696276280.242:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.236982 ignition[826]: Ignition finished successfully Oct 2 19:51:20.253849 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:51:20.257779 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:51:20.268836 systemd[1]: Reached target local-fs.target. Oct 2 19:51:20.274213 systemd[1]: Reached target sysinit.target. Oct 2 19:51:20.276319 systemd[1]: Reached target basic.target. Oct 2 19:51:20.278219 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:51:20.323511 systemd-fsck[834]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:51:20.329375 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:51:20.350310 kernel: audit: type=1130 audit(1696276280.334:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.339156 systemd[1]: Mounting sysroot.mount... Oct 2 19:51:20.364032 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:51:20.364150 systemd[1]: Mounted sysroot.mount. Oct 2 19:51:20.367893 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:51:20.395898 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:51:20.399756 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:51:20.405688 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:51:20.406746 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:51:20.416423 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:51:20.449297 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:20.455238 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:51:20.471157 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (844) Oct 2 19:51:20.478392 initrd-setup-root[849]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:51:20.487074 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:20.487104 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:20.487115 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:20.491849 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:20.502234 initrd-setup-root[875]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:51:20.519460 initrd-setup-root[883]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:51:20.526194 initrd-setup-root[891]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:51:20.875745 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:51:20.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.890854 systemd[1]: Starting ignition-mount.service... Oct 2 19:51:20.893959 kernel: audit: type=1130 audit(1696276280.877:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.897459 systemd[1]: Starting sysroot-boot.service... Oct 2 19:51:20.919934 systemd[1]: Finished sysroot-boot.service. Oct 2 19:51:20.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.937036 kernel: audit: type=1130 audit(1696276280.924:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.939974 ignition[911]: INFO : Ignition 2.14.0 Oct 2 19:51:20.939974 ignition[911]: INFO : Stage: mount Oct 2 19:51:20.944465 ignition[911]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:20.944465 ignition[911]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:20.944465 ignition[911]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:20.958572 ignition[911]: INFO : mount: mount passed Oct 2 19:51:20.958572 ignition[911]: INFO : Ignition finished successfully Oct 2 19:51:20.973743 kernel: audit: type=1130 audit(1696276280.955:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:20.947897 systemd[1]: Finished ignition-mount.service. Oct 2 19:51:21.125259 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:21.125365 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:21.790984 coreos-metadata[843]: Oct 02 19:51:21.790 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:51:21.806374 coreos-metadata[843]: Oct 02 19:51:21.806 INFO Fetch successful Oct 2 19:51:21.848760 coreos-metadata[843]: Oct 02 19:51:21.848 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:51:21.866281 coreos-metadata[843]: Oct 02 19:51:21.866 INFO Fetch successful Oct 2 19:51:21.880170 coreos-metadata[843]: Oct 02 19:51:21.880 INFO wrote hostname ci-3510.3.0-a-8915d29de4 to /sysroot/etc/hostname Oct 2 19:51:21.881937 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:51:21.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.903098 kernel: audit: type=1130 audit(1696276281.886:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.900754 systemd[1]: Starting ignition-files.service... Oct 2 19:51:21.908746 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:21.920222 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (922) Oct 2 19:51:21.920254 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:21.928640 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:21.928665 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:21.937240 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:21.950616 ignition[941]: INFO : Ignition 2.14.0 Oct 2 19:51:21.950616 ignition[941]: INFO : Stage: files Oct 2 19:51:21.954683 ignition[941]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.954683 ignition[941]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.954683 ignition[941]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.969382 ignition[941]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:51:21.972568 ignition[941]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:51:21.975820 ignition[941]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:51:22.023463 ignition[941]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:51:22.027830 ignition[941]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:51:22.027830 ignition[941]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:51:22.027830 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:51:22.027830 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:51:22.025385 unknown[941]: wrote ssh authorized keys file for user: core Oct 2 19:51:22.400333 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:51:22.580717 ignition[941]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:51:22.588518 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:51:22.588518 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:51:22.588518 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:22.944347 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:51:23.340041 ignition[941]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:51:23.349433 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:51:23.349433 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:23.349433 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:51:23.545436 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:51:25.539675 ignition[941]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:51:25.549787 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:25.549787 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:25.549787 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:51:25.665253 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:51:30.067347 ignition[941]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:51:30.076506 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:30.076506 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:30.076506 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:51:30.224328 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:51:32.192229 ignition[941]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:51:32.200925 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:32.200925 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:32.200925 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:32.200925 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:32.200925 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:32.541459 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:51:33.012574 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:33.012574 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:33.022363 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:33.022363 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:33.022363 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:33.048563 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:33.054464 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:33.064750 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (946) Oct 2 19:51:33.064784 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3318840695" Oct 2 19:51:33.064784 ignition[941]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3318840695": device or resource busy Oct 2 19:51:33.064784 ignition[941]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3318840695", trying btrfs: device or resource busy Oct 2 19:51:33.064784 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3318840695" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3318840695" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem3318840695" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem3318840695" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:33.086601 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:33.076140 systemd[1]: mnt-oem3318840695.mount: Deactivated successfully. Oct 2 19:51:33.135484 kernel: audit: type=1130 audit(1696276293.119:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2670086472" Oct 2 19:51:33.135559 ignition[941]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2670086472": device or resource busy Oct 2 19:51:33.135559 ignition[941]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2670086472", trying btrfs: device or resource busy Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2670086472" Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2670086472" Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2670086472" Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2670086472" Oct 2 19:51:33.135559 ignition[941]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:51:33.135559 ignition[941]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:51:33.106271 systemd[1]: Finished ignition-files.service. Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:33.142478 ignition[941]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:33.142478 ignition[941]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:33.142478 ignition[941]: INFO : files: files passed Oct 2 19:51:33.142478 ignition[941]: INFO : Ignition finished successfully Oct 2 19:51:33.131743 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:51:33.260602 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:51:33.261583 systemd[1]: Starting ignition-quench.service... Oct 2 19:51:33.274622 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:51:33.276890 systemd[1]: Finished ignition-quench.service. Oct 2 19:51:33.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.300029 kernel: audit: type=1130 audit(1696276293.281:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.300139 initrd-setup-root-after-ignition[966]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:51:33.316145 kernel: audit: type=1131 audit(1696276293.281:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.300963 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:51:33.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.320346 systemd[1]: Reached target ignition-complete.target. Oct 2 19:51:33.337423 kernel: audit: type=1130 audit(1696276293.320:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.338263 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:51:33.352107 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:51:33.352191 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:51:33.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.368530 systemd[1]: Reached target initrd-fs.target. Oct 2 19:51:33.384004 kernel: audit: type=1130 audit(1696276293.357:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.384042 kernel: audit: type=1131 audit(1696276293.357:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.386269 systemd[1]: Reached target initrd.target. Oct 2 19:51:33.390092 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:51:33.393962 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:51:33.404583 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:51:33.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.409285 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:51:33.421072 kernel: audit: type=1130 audit(1696276293.408:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.429279 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:51:33.433321 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:51:33.437644 systemd[1]: Stopped target timers.target. Oct 2 19:51:33.441396 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:51:33.441975 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:51:33.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.449114 systemd[1]: Stopped target initrd.target. Oct 2 19:51:33.463972 kernel: audit: type=1131 audit(1696276293.448:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.464115 systemd[1]: Stopped target basic.target. Oct 2 19:51:33.466121 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:51:33.470005 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:51:33.474123 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:51:33.478599 systemd[1]: Stopped target remote-fs.target. Oct 2 19:51:33.484998 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:51:33.490915 systemd[1]: Stopped target sysinit.target. Oct 2 19:51:33.499660 systemd[1]: Stopped target local-fs.target. Oct 2 19:51:33.503104 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:51:33.510210 systemd[1]: Stopped target swap.target. Oct 2 19:51:33.513718 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:51:33.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.513871 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:51:33.531726 kernel: audit: type=1131 audit(1696276293.517:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.530411 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:51:33.536743 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:51:33.539540 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:51:33.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.544029 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:51:33.561718 kernel: audit: type=1131 audit(1696276293.543:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.544177 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:51:33.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.563125 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:51:33.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.563235 systemd[1]: Stopped ignition-files.service. Oct 2 19:51:33.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.580732 iscsid[792]: iscsid shutting down. Oct 2 19:51:33.566285 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:51:33.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.566386 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:51:33.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.603558 ignition[979]: INFO : Ignition 2.14.0 Oct 2 19:51:33.603558 ignition[979]: INFO : Stage: umount Oct 2 19:51:33.573293 systemd[1]: Stopping ignition-mount.service... Oct 2 19:51:33.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.620471 ignition[979]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:33.620471 ignition[979]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:33.620471 ignition[979]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:33.620471 ignition[979]: INFO : umount: umount passed Oct 2 19:51:33.620471 ignition[979]: INFO : Ignition finished successfully Oct 2 19:51:33.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.578037 systemd[1]: Stopping iscsid.service... Oct 2 19:51:33.580844 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:51:33.588457 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:51:33.588925 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:51:33.593352 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:51:33.593477 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:51:33.607755 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:51:33.607867 systemd[1]: Stopped iscsid.service. Oct 2 19:51:33.610540 systemd[1]: Stopping iscsiuio.service... Oct 2 19:51:33.612563 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:51:33.612656 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:51:33.614994 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:51:33.615113 systemd[1]: Stopped iscsiuio.service. Oct 2 19:51:33.621246 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:51:33.621333 systemd[1]: Stopped ignition-mount.service. Oct 2 19:51:33.625600 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:51:33.625641 systemd[1]: Stopped ignition-disks.service. Oct 2 19:51:33.632512 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:51:33.632559 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:51:33.637443 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:51:33.637484 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:51:33.641138 systemd[1]: Stopped target network.target. Oct 2 19:51:33.645197 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:51:33.645251 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:51:33.647373 systemd[1]: Stopped target paths.target. Oct 2 19:51:33.649301 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:51:33.654053 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:51:33.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.666369 systemd[1]: Stopped target slices.target. Oct 2 19:51:33.718000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:51:33.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.666405 systemd[1]: Stopped target sockets.target. Oct 2 19:51:33.666832 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:51:33.666868 systemd[1]: Closed iscsid.socket. Oct 2 19:51:33.667260 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:51:33.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.667289 systemd[1]: Closed iscsiuio.socket. Oct 2 19:51:33.667681 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:51:33.667721 systemd[1]: Stopped ignition-setup.service. Oct 2 19:51:33.668416 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:51:33.668612 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:51:33.675279 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:51:33.675367 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:51:33.714092 systemd-networkd[780]: eth0: DHCPv6 lease lost Oct 2 19:51:33.737000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:51:33.718483 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:51:33.718592 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:51:33.724275 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:51:33.724312 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:51:33.729096 systemd[1]: Stopping network-cleanup.service... Oct 2 19:51:33.731575 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:51:33.731644 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:51:33.735933 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:51:33.735986 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:51:33.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.772550 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:51:33.772628 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:51:33.779000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.780052 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:51:33.785138 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:51:33.790512 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:51:33.790669 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:51:33.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.797347 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:51:33.797408 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:51:33.802329 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:51:33.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.802377 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:51:33.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.806999 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:51:33.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.807072 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:51:33.811741 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:51:33.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.835000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.811793 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:51:33.815932 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:51:33.815980 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:51:33.821588 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:51:33.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.825026 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:51:33.825089 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:51:33.827745 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:51:33.863138 kernel: hv_netvsc 000d3ab1-cc7a-000d-3ab1-cc7a000d3ab1 eth0: Data path switched from VF: enP53415s1 Oct 2 19:51:33.827796 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:51:33.830151 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:51:33.830207 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:51:33.837565 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:51:33.843242 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:51:33.881184 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:51:33.883491 systemd[1]: Stopped network-cleanup.service. Oct 2 19:51:33.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.944194 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:51:33.944333 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:51:33.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.950736 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:51:33.955331 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:51:33.957755 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:51:33.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:33.961038 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:51:33.974515 systemd[1]: Switching root. Oct 2 19:51:33.998704 systemd-journald[183]: Journal stopped Oct 2 19:52:01.042753 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 19:52:01.042794 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:52:01.042815 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:52:01.042828 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:52:01.042840 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:52:01.042851 kernel: SELinux: policy capability open_perms=1 Oct 2 19:52:01.042867 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:52:01.042881 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:52:01.042891 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:52:01.042900 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:52:01.042912 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:52:01.042920 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:52:01.042931 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:52:01.042941 kernel: audit: type=1403 audit(1696276303.088:82): auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:52:01.042957 systemd[1]: Successfully loaded SELinux policy in 1.126950s. Oct 2 19:52:01.042968 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 21.115ms. Oct 2 19:52:01.042981 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:52:01.042990 systemd[1]: Detected virtualization microsoft. Oct 2 19:52:01.043004 systemd[1]: Detected architecture x86-64. Oct 2 19:52:01.043021 systemd[1]: Detected first boot. Oct 2 19:52:01.043032 systemd[1]: Hostname set to . Oct 2 19:52:01.043043 systemd[1]: Initializing machine ID from random generator. Oct 2 19:52:01.043053 kernel: audit: type=1400 audit(1696276305.435:83): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:52:01.043065 kernel: audit: type=1400 audit(1696276305.453:84): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:52:01.043074 kernel: audit: type=1400 audit(1696276305.453:85): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:52:01.043087 kernel: audit: type=1334 audit(1696276305.467:86): prog-id=10 op=LOAD Oct 2 19:52:01.043096 kernel: audit: type=1334 audit(1696276305.467:87): prog-id=10 op=UNLOAD Oct 2 19:52:01.043106 kernel: audit: type=1334 audit(1696276305.479:88): prog-id=11 op=LOAD Oct 2 19:52:01.043116 kernel: audit: type=1334 audit(1696276305.479:89): prog-id=11 op=UNLOAD Oct 2 19:52:01.043125 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:52:01.043137 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:52:01.043147 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:52:01.043163 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:52:01.043172 kernel: audit: type=1334 audit(1696276319.703:90): prog-id=12 op=LOAD Oct 2 19:52:01.043183 kernel: audit: type=1334 audit(1696276319.703:91): prog-id=3 op=UNLOAD Oct 2 19:52:01.043192 kernel: audit: type=1334 audit(1696276319.709:92): prog-id=13 op=LOAD Oct 2 19:52:01.043204 kernel: audit: type=1334 audit(1696276319.719:93): prog-id=14 op=LOAD Oct 2 19:52:01.043213 kernel: audit: type=1334 audit(1696276319.719:94): prog-id=4 op=UNLOAD Oct 2 19:52:01.043221 kernel: audit: type=1334 audit(1696276319.719:95): prog-id=5 op=UNLOAD Oct 2 19:52:01.043232 kernel: audit: type=1334 audit(1696276319.728:96): prog-id=15 op=LOAD Oct 2 19:52:01.043245 kernel: audit: type=1334 audit(1696276319.728:97): prog-id=12 op=UNLOAD Oct 2 19:52:01.043258 kernel: audit: type=1334 audit(1696276319.733:98): prog-id=16 op=LOAD Oct 2 19:52:01.043267 kernel: audit: type=1334 audit(1696276319.746:99): prog-id=17 op=LOAD Oct 2 19:52:01.043278 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:52:01.043287 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:52:01.043303 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:52:01.043314 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:52:01.043325 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:52:01.043340 systemd[1]: Created slice system-getty.slice. Oct 2 19:52:01.043352 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:52:01.043363 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:52:01.043376 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:52:01.043386 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:52:01.043398 systemd[1]: Created slice user.slice. Oct 2 19:52:01.043408 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:52:01.043420 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:52:01.043430 systemd[1]: Set up automount boot.automount. Oct 2 19:52:01.043444 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:52:01.043454 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:52:01.043466 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:52:01.043476 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:52:01.043488 systemd[1]: Reached target integritysetup.target. Oct 2 19:52:01.043498 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:52:01.043509 systemd[1]: Reached target remote-fs.target. Oct 2 19:52:01.043519 systemd[1]: Reached target slices.target. Oct 2 19:52:01.043533 systemd[1]: Reached target swap.target. Oct 2 19:52:01.043543 systemd[1]: Reached target torcx.target. Oct 2 19:52:01.043554 systemd[1]: Reached target veritysetup.target. Oct 2 19:52:01.043564 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:52:01.043575 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:52:01.043586 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:52:01.043600 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:52:01.043610 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:52:01.043623 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:52:01.043633 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:52:01.043644 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:52:01.043654 systemd[1]: Mounting media.mount... Oct 2 19:52:01.043669 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:52:01.043681 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:52:01.043693 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:52:01.043703 systemd[1]: Mounting tmp.mount... Oct 2 19:52:01.043716 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:52:01.043728 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:52:01.043739 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:52:01.043751 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:52:01.043764 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:52:01.043775 systemd[1]: Starting modprobe@drm.service... Oct 2 19:52:01.043790 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:52:01.043800 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:52:01.043812 systemd[1]: Starting modprobe@loop.service... Oct 2 19:52:01.043822 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:52:01.043835 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:52:01.043845 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:52:01.043857 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:52:01.043867 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:52:01.043880 systemd[1]: Stopped systemd-journald.service. Oct 2 19:52:01.043892 systemd[1]: Starting systemd-journald.service... Oct 2 19:52:01.043904 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:52:01.043915 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:52:01.043927 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:52:01.043937 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:52:01.043949 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:52:01.043959 systemd[1]: Stopped verity-setup.service. Oct 2 19:52:01.043972 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:52:01.043982 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:52:01.043996 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:52:01.044006 kernel: loop: module loaded Oct 2 19:52:01.044034 systemd[1]: Mounted media.mount. Oct 2 19:52:01.044045 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:52:01.044056 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:52:01.044071 systemd-journald[1093]: Journal started Oct 2 19:52:01.044119 systemd-journald[1093]: Runtime Journal (/run/log/journal/fb9dc124c6294abcba9fc6cb710648b9) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:43.088000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:51:45.435000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:45.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:45.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:45.467000 audit: BPF prog-id=10 op=LOAD Oct 2 19:51:45.467000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:51:45.479000 audit: BPF prog-id=11 op=LOAD Oct 2 19:51:45.479000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:51:59.703000 audit: BPF prog-id=12 op=LOAD Oct 2 19:51:59.703000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:51:59.709000 audit: BPF prog-id=13 op=LOAD Oct 2 19:51:59.719000 audit: BPF prog-id=14 op=LOAD Oct 2 19:51:59.719000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:51:59.719000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:51:59.728000 audit: BPF prog-id=15 op=LOAD Oct 2 19:51:59.728000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:51:59.733000 audit: BPF prog-id=16 op=LOAD Oct 2 19:51:59.746000 audit: BPF prog-id=17 op=LOAD Oct 2 19:51:59.746000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:51:59.746000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:51:59.751000 audit: BPF prog-id=18 op=LOAD Oct 2 19:51:59.751000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:51:59.751000 audit: BPF prog-id=19 op=LOAD Oct 2 19:51:59.751000 audit: BPF prog-id=20 op=LOAD Oct 2 19:51:59.751000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:51:59.751000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:51:59.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:59.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:59.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:59.770000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:52:00.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:00.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:00.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:00.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:00.927000 audit: BPF prog-id=21 op=LOAD Oct 2 19:52:00.927000 audit: BPF prog-id=22 op=LOAD Oct 2 19:52:00.927000 audit: BPF prog-id=23 op=LOAD Oct 2 19:52:00.927000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:52:00.927000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:52:00.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.035000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:52:01.035000 audit[1093]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffdc759cc90 a2=4000 a3=7ffdc759cd2c items=0 ppid=1 pid=1093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:01.035000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:51:59.702314 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:51:50.950532 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:51:59.752151 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:51:50.950996 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:50.951045 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:50.951092 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:51:50.951102 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:51:50.951145 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:51:50.951158 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:51:50.951380 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:51:50.951427 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:50.951440 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:50.951960 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:51:50.951998 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:51:50.952025 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:51:50.952041 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:51:50.952058 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:51:50.952070 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:50Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:51:58.346836 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:58.347142 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:58.347282 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:58.347463 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:58.347516 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:51:58.347575 /usr/lib/systemd/system-generators/torcx-generator[1012]: time="2023-10-02T19:51:58Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:52:01.050732 systemd[1]: Started systemd-journald.service. Oct 2 19:52:01.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.051820 systemd[1]: Mounted tmp.mount. Oct 2 19:52:01.058187 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:52:01.064034 kernel: fuse: init (API version 7.34) Oct 2 19:52:01.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.064431 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:52:01.064682 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:52:01.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.067400 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:52:01.067569 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:52:01.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.070442 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:52:01.070646 systemd[1]: Finished modprobe@drm.service. Oct 2 19:52:01.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.073203 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:52:01.074225 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:52:01.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.076857 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:52:01.077012 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:52:01.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.079456 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:52:01.079620 systemd[1]: Finished modprobe@loop.service. Oct 2 19:52:01.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.083883 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:52:01.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.086622 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:52:01.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.089513 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:52:01.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.092259 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:52:01.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.095435 systemd[1]: Reached target network-pre.target. Oct 2 19:52:01.099659 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:52:01.107211 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:52:01.109582 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:52:01.136290 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:52:01.139889 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:52:01.142386 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:52:01.143427 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:52:01.146368 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:52:01.147426 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:52:01.155125 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:52:01.159998 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:52:01.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.162252 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:52:01.164407 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:52:01.167717 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:52:01.183230 udevadm[1135]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:52:01.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.194287 systemd-journald[1093]: Time spent on flushing to /var/log/journal/fb9dc124c6294abcba9fc6cb710648b9 is 29.597ms for 1196 entries. Oct 2 19:52:01.194287 systemd-journald[1093]: System Journal (/var/log/journal/fb9dc124c6294abcba9fc6cb710648b9) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:52:01.295549 systemd-journald[1093]: Received client request to flush runtime journal. Oct 2 19:52:01.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.188857 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:52:01.191504 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:52:01.214254 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:52:01.296799 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:52:01.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:01.715952 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:52:01.720743 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:52:02.056000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:02.053210 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:52:02.571336 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:52:02.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:02.575000 audit: BPF prog-id=24 op=LOAD Oct 2 19:52:02.575000 audit: BPF prog-id=25 op=LOAD Oct 2 19:52:02.575000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:52:02.575000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:52:02.576005 systemd[1]: Starting systemd-udevd.service... Oct 2 19:52:02.598651 systemd-udevd[1140]: Using default interface naming scheme 'v252'. Oct 2 19:52:02.853306 systemd[1]: Started systemd-udevd.service. Oct 2 19:52:02.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:02.857000 audit: BPF prog-id=26 op=LOAD Oct 2 19:52:02.858459 systemd[1]: Starting systemd-networkd.service... Oct 2 19:52:02.895780 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:52:02.979000 audit[1154]: AVC avc: denied { confidentiality } for pid=1154 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:52:02.991150 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:52:02.998044 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:52:02.979000 audit[1154]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=559074d9d450 a1=f884 a2=7f23fd960bc5 a3=5 items=10 ppid=1140 pid=1154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:02.979000 audit: CWD cwd="/" Oct 2 19:52:02.979000 audit: PATH item=0 name=(null) inode=14645 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=1 name=(null) inode=14646 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=2 name=(null) inode=14645 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=3 name=(null) inode=14647 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=4 name=(null) inode=14645 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=5 name=(null) inode=14648 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=6 name=(null) inode=14645 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=7 name=(null) inode=14649 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=8 name=(null) inode=14645 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PATH item=9 name=(null) inode=14650 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:52:02.979000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:52:03.017121 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:52:03.017194 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:52:03.026039 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:52:03.026098 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:52:03.027000 audit: BPF prog-id=27 op=LOAD Oct 2 19:52:03.027000 audit: BPF prog-id=28 op=LOAD Oct 2 19:52:03.027000 audit: BPF prog-id=29 op=LOAD Oct 2 19:52:03.028742 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:52:03.034258 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:52:03.036050 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:52:03.062933 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:52:03.063055 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:52:03.079499 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:52:03.079597 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:52:03.079618 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:52:04.331371 systemd[1]: Started systemd-userdbd.service. Oct 2 19:52:04.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:04.510729 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1161) Oct 2 19:52:04.550008 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:52:04.567260 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:52:04.651612 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:52:04.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:04.656521 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:52:04.718858 systemd-networkd[1150]: lo: Link UP Oct 2 19:52:04.718869 systemd-networkd[1150]: lo: Gained carrier Oct 2 19:52:04.719784 systemd-networkd[1150]: Enumeration completed Oct 2 19:52:04.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:04.719948 systemd[1]: Started systemd-networkd.service. Oct 2 19:52:04.724799 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:52:04.740684 systemd-networkd[1150]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:52:04.798008 kernel: mlx5_core d0a7:00:02.0 enP53415s1: Link up Oct 2 19:52:04.836013 kernel: hv_netvsc 000d3ab1-cc7a-000d-3ab1-cc7a000d3ab1 eth0: Data path switched to VF: enP53415s1 Oct 2 19:52:04.837432 systemd-networkd[1150]: enP53415s1: Link UP Oct 2 19:52:04.837749 systemd-networkd[1150]: eth0: Link UP Oct 2 19:52:04.837830 systemd-networkd[1150]: eth0: Gained carrier Oct 2 19:52:04.841306 systemd-networkd[1150]: enP53415s1: Gained carrier Oct 2 19:52:04.865114 systemd-networkd[1150]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:52:04.967076 lvm[1216]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:52:04.994219 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:52:04.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:04.998171 systemd[1]: Reached target cryptsetup.target. Oct 2 19:52:05.002379 systemd[1]: Starting lvm2-activation.service... Oct 2 19:52:05.009691 lvm[1219]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:52:05.067414 systemd[1]: Finished lvm2-activation.service. Oct 2 19:52:05.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:05.070543 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:52:05.073345 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:52:05.073387 systemd[1]: Reached target local-fs.target. Oct 2 19:52:05.076184 systemd[1]: Reached target machines.target. Oct 2 19:52:05.080355 systemd[1]: Starting ldconfig.service... Oct 2 19:52:05.093431 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:52:05.093498 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:52:05.094682 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:52:05.099142 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:52:05.103536 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:52:05.106097 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:52:05.106179 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:52:05.107296 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:52:05.134470 systemd-tmpfiles[1224]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:52:05.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:05.515823 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:52:05.524044 systemd-tmpfiles[1224]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:52:05.524473 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1221 (bootctl) Oct 2 19:52:05.526282 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:52:05.536852 systemd-tmpfiles[1224]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:52:05.926710 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:52:05.927433 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:52:05.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:05.946311 kernel: kauditd_printk_skb: 79 callbacks suppressed Oct 2 19:52:05.946443 kernel: audit: type=1130 audit(1696276325.927:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.148251 systemd-networkd[1150]: eth0: Gained IPv6LL Oct 2 19:52:06.153919 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:52:06.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.173097 kernel: audit: type=1130 audit(1696276326.156:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.569044 systemd-fsck[1229]: fsck.fat 4.2 (2021-01-31) Oct 2 19:52:06.569044 systemd-fsck[1229]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:52:06.570895 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:52:06.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.582400 systemd[1]: Mounting boot.mount... Oct 2 19:52:06.590008 kernel: audit: type=1130 audit(1696276326.573:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.593862 systemd[1]: Mounted boot.mount. Oct 2 19:52:06.611047 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:52:06.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:06.624082 kernel: audit: type=1130 audit(1696276326.612:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.242011 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:52:07.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.246191 systemd[1]: Starting audit-rules.service... Oct 2 19:52:07.260014 kernel: audit: type=1130 audit(1696276327.243:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.263236 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:52:07.266799 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:52:07.271429 systemd[1]: Starting systemd-resolved.service... Oct 2 19:52:07.269000 audit: BPF prog-id=30 op=LOAD Oct 2 19:52:07.281233 kernel: audit: type=1334 audit(1696276327.269:169): prog-id=30 op=LOAD Oct 2 19:52:07.280119 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:52:07.287315 kernel: audit: type=1334 audit(1696276327.273:170): prog-id=31 op=LOAD Oct 2 19:52:07.273000 audit: BPF prog-id=31 op=LOAD Oct 2 19:52:07.287479 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:52:07.332738 kernel: audit: type=1127 audit(1696276327.311:171): pid=1241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.311000 audit[1241]: SYSTEM_BOOT pid=1241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.326507 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:52:07.350733 kernel: audit: type=1130 audit(1696276327.333:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.333000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.357771 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:52:07.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.360541 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:52:07.374627 kernel: audit: type=1130 audit(1696276327.359:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.425911 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:52:07.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.429703 systemd[1]: Reached target time-set.target. Oct 2 19:52:07.476601 systemd-resolved[1239]: Positive Trust Anchors: Oct 2 19:52:07.476623 systemd-resolved[1239]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:52:07.476666 systemd-resolved[1239]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:52:07.502726 systemd-timesyncd[1240]: Contacted time server 85.91.1.164:123 (0.flatcar.pool.ntp.org). Oct 2 19:52:07.502997 systemd-timesyncd[1240]: Initial clock synchronization to Mon 2023-10-02 19:52:07.505636 UTC. Oct 2 19:52:07.522651 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:52:07.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:07.533000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:52:07.533000 audit[1256]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe6be52bc0 a2=420 a3=0 items=0 ppid=1235 pid=1256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:07.533000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:52:07.534752 augenrules[1256]: No rules Oct 2 19:52:07.535281 systemd[1]: Finished audit-rules.service. Oct 2 19:52:07.623826 systemd-resolved[1239]: Using system hostname 'ci-3510.3.0-a-8915d29de4'. Oct 2 19:52:07.625663 systemd[1]: Started systemd-resolved.service. Oct 2 19:52:07.629465 systemd[1]: Reached target network.target. Oct 2 19:52:07.632463 systemd[1]: Reached target network-online.target. Oct 2 19:52:07.635907 systemd[1]: Reached target nss-lookup.target. Oct 2 19:52:11.078556 ldconfig[1220]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:52:11.106015 systemd[1]: Finished ldconfig.service. Oct 2 19:52:11.110801 systemd[1]: Starting systemd-update-done.service... Oct 2 19:52:11.128105 systemd[1]: Finished systemd-update-done.service. Oct 2 19:52:11.130857 systemd[1]: Reached target sysinit.target. Oct 2 19:52:11.133244 systemd[1]: Started motdgen.path. Oct 2 19:52:11.135295 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:52:11.138506 systemd[1]: Started logrotate.timer. Oct 2 19:52:11.140650 systemd[1]: Started mdadm.timer. Oct 2 19:52:11.142833 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:52:11.145307 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:52:11.145369 systemd[1]: Reached target paths.target. Oct 2 19:52:11.147621 systemd[1]: Reached target timers.target. Oct 2 19:52:11.150372 systemd[1]: Listening on dbus.socket. Oct 2 19:52:11.153434 systemd[1]: Starting docker.socket... Oct 2 19:52:11.168360 systemd[1]: Listening on sshd.socket. Oct 2 19:52:11.170957 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:52:11.171533 systemd[1]: Listening on docker.socket. Oct 2 19:52:11.173708 systemd[1]: Reached target sockets.target. Oct 2 19:52:11.176011 systemd[1]: Reached target basic.target. Oct 2 19:52:11.177999 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:52:11.178068 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:52:11.179316 systemd[1]: Starting containerd.service... Oct 2 19:52:11.182478 systemd[1]: Starting dbus.service... Oct 2 19:52:11.185641 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:52:11.189343 systemd[1]: Starting extend-filesystems.service... Oct 2 19:52:11.191945 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:52:11.193513 systemd[1]: Starting motdgen.service... Oct 2 19:52:11.197694 systemd[1]: Started nvidia.service. Oct 2 19:52:11.201455 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:52:11.204850 systemd[1]: Starting prepare-critools.service... Oct 2 19:52:11.208254 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:52:11.214693 systemd[1]: Starting sshd-keygen.service... Oct 2 19:52:11.220694 systemd[1]: Starting systemd-logind.service... Oct 2 19:52:11.222770 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:52:11.222848 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:52:11.223490 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:52:11.224505 systemd[1]: Starting update-engine.service... Oct 2 19:52:11.228742 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:52:11.238034 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:52:11.238336 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:52:11.283957 extend-filesystems[1267]: Found sda Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda1 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda2 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda3 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found usr Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda4 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda6 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda7 Oct 2 19:52:11.286540 extend-filesystems[1267]: Found sda9 Oct 2 19:52:11.286540 extend-filesystems[1267]: Checking size of /dev/sda9 Oct 2 19:52:11.321336 jq[1266]: false Oct 2 19:52:11.321467 tar[1284]: ./ Oct 2 19:52:11.321467 tar[1284]: ./macvlan Oct 2 19:52:11.321733 jq[1282]: true Oct 2 19:52:11.321822 tar[1286]: crictl Oct 2 19:52:11.302037 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:52:11.302490 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:52:11.333906 jq[1295]: true Oct 2 19:52:11.359391 extend-filesystems[1267]: Old size kept for /dev/sda9 Oct 2 19:52:11.363107 extend-filesystems[1267]: Found sr0 Oct 2 19:52:11.362430 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:52:11.362659 systemd[1]: Finished motdgen.service. Oct 2 19:52:11.367209 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:52:11.367401 systemd[1]: Finished extend-filesystems.service. Oct 2 19:52:11.420566 dbus-daemon[1265]: [system] SELinux support is enabled Oct 2 19:52:11.420761 systemd[1]: Started dbus.service. Oct 2 19:52:11.426797 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:52:11.426841 systemd[1]: Reached target system-config.target. Oct 2 19:52:11.429569 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:52:11.429602 systemd[1]: Reached target user-config.target. Oct 2 19:52:11.450393 tar[1284]: ./static Oct 2 19:52:11.451507 systemd-logind[1280]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:52:11.459869 systemd-logind[1280]: New seat seat0. Oct 2 19:52:11.460805 env[1300]: time="2023-10-02T19:52:11.460756243Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:52:11.471746 systemd[1]: Started systemd-logind.service. Oct 2 19:52:11.529682 bash[1325]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:52:11.530522 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:52:11.549733 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:52:11.565095 tar[1284]: ./vlan Oct 2 19:52:11.574129 env[1300]: time="2023-10-02T19:52:11.574057788Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:52:11.574388 env[1300]: time="2023-10-02T19:52:11.574368748Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.576854 env[1300]: time="2023-10-02T19:52:11.576815319Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:11.576978 env[1300]: time="2023-10-02T19:52:11.576960747Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.577322 env[1300]: time="2023-10-02T19:52:11.577297412Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:11.577401 env[1300]: time="2023-10-02T19:52:11.577387229Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.577467 env[1300]: time="2023-10-02T19:52:11.577454442Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:52:11.577536 env[1300]: time="2023-10-02T19:52:11.577524456Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.577696 env[1300]: time="2023-10-02T19:52:11.577676585Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.578038 env[1300]: time="2023-10-02T19:52:11.578016351Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:11.578304 env[1300]: time="2023-10-02T19:52:11.578279101Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:11.578384 env[1300]: time="2023-10-02T19:52:11.578369719Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:52:11.578510 env[1300]: time="2023-10-02T19:52:11.578494143Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:52:11.578586 env[1300]: time="2023-10-02T19:52:11.578572358Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:52:11.600392 env[1300]: time="2023-10-02T19:52:11.600302448Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:52:11.600392 env[1300]: time="2023-10-02T19:52:11.600353958Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:52:11.600392 env[1300]: time="2023-10-02T19:52:11.600373561Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600434173Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600460278Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600537393Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600560197Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600582302Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600615 env[1300]: time="2023-10-02T19:52:11.600603306Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600822 env[1300]: time="2023-10-02T19:52:11.600623910Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600822 env[1300]: time="2023-10-02T19:52:11.600648414Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.600822 env[1300]: time="2023-10-02T19:52:11.600673619Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:52:11.600822 env[1300]: time="2023-10-02T19:52:11.600815046Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:52:11.600960 env[1300]: time="2023-10-02T19:52:11.600911165Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:52:11.601360 env[1300]: time="2023-10-02T19:52:11.601334747Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:52:11.601425 env[1300]: time="2023-10-02T19:52:11.601378955Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601425 env[1300]: time="2023-10-02T19:52:11.601400059Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:52:11.601507 env[1300]: time="2023-10-02T19:52:11.601472373Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601507 env[1300]: time="2023-10-02T19:52:11.601493777Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601587 env[1300]: time="2023-10-02T19:52:11.601511281Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601630 env[1300]: time="2023-10-02T19:52:11.601595097Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601630 env[1300]: time="2023-10-02T19:52:11.601614901Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601708 env[1300]: time="2023-10-02T19:52:11.601633704Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601708 env[1300]: time="2023-10-02T19:52:11.601650207Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601708 env[1300]: time="2023-10-02T19:52:11.601667111Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601708 env[1300]: time="2023-10-02T19:52:11.601689915Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:52:11.601864 env[1300]: time="2023-10-02T19:52:11.601840544Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601907 env[1300]: time="2023-10-02T19:52:11.601876251Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601907 env[1300]: time="2023-10-02T19:52:11.601896355Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.601977 env[1300]: time="2023-10-02T19:52:11.601914859Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:52:11.601977 env[1300]: time="2023-10-02T19:52:11.601939563Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:52:11.601977 env[1300]: time="2023-10-02T19:52:11.601955766Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:52:11.602108 env[1300]: time="2023-10-02T19:52:11.601980971Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:52:11.602108 env[1300]: time="2023-10-02T19:52:11.602087292Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:52:11.602444 env[1300]: time="2023-10-02T19:52:11.602370146Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.602463064Z" level=info msg="Connect containerd service" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.602511273Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.605784805Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.607330503Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.607384513Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.607444725Z" level=info msg="containerd successfully booted in 0.160195s" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.607922217Z" level=info msg="Start subscribing containerd event" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.608028037Z" level=info msg="Start recovering state" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.608248280Z" level=info msg="Start event monitor" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.608266483Z" level=info msg="Start snapshots syncer" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.608277785Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:52:11.627642 env[1300]: time="2023-10-02T19:52:11.608407310Z" level=info msg="Start streaming server" Oct 2 19:52:11.607527 systemd[1]: Started containerd.service. Oct 2 19:52:11.676847 tar[1284]: ./portmap Oct 2 19:52:11.740410 tar[1284]: ./host-local Oct 2 19:52:11.781881 tar[1284]: ./vrf Oct 2 19:52:11.818598 tar[1284]: ./bridge Oct 2 19:52:11.862925 tar[1284]: ./tuning Oct 2 19:52:11.882776 update_engine[1281]: I1002 19:52:11.882264 1281 main.cc:92] Flatcar Update Engine starting Oct 2 19:52:11.899385 tar[1284]: ./firewall Oct 2 19:52:11.926968 systemd[1]: Started update-engine.service. Oct 2 19:52:11.929608 update_engine[1281]: I1002 19:52:11.928455 1281 update_check_scheduler.cc:74] Next update check in 9m14s Oct 2 19:52:11.932062 systemd[1]: Started locksmithd.service. Oct 2 19:52:11.978591 tar[1284]: ./host-device Oct 2 19:52:12.058413 tar[1284]: ./sbr Oct 2 19:52:12.139635 tar[1284]: ./loopback Oct 2 19:52:12.207507 tar[1284]: ./dhcp Oct 2 19:52:12.243649 systemd[1]: Finished prepare-critools.service. Oct 2 19:52:12.333932 tar[1284]: ./ptp Oct 2 19:52:12.377776 tar[1284]: ./ipvlan Oct 2 19:52:12.420196 tar[1284]: ./bandwidth Oct 2 19:52:12.495523 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:52:13.408325 locksmithd[1371]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:52:13.889401 sshd_keygen[1288]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:52:13.909856 systemd[1]: Finished sshd-keygen.service. Oct 2 19:52:13.913737 systemd[1]: Starting issuegen.service... Oct 2 19:52:13.917411 systemd[1]: Started waagent.service. Oct 2 19:52:13.923736 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:52:13.923889 systemd[1]: Finished issuegen.service. Oct 2 19:52:13.927475 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:52:13.947144 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:52:13.951125 systemd[1]: Started getty@tty1.service. Oct 2 19:52:13.954547 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:52:13.956894 systemd[1]: Reached target getty.target. Oct 2 19:52:13.958952 systemd[1]: Reached target multi-user.target. Oct 2 19:52:13.962859 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:52:13.972183 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:52:13.972427 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:52:13.975220 systemd[1]: Startup finished in 918ms (firmware) + 20.714s (loader) + 927ms (kernel) + 27.493s (initrd) + 31.560s (userspace) = 1min 21.613s. Oct 2 19:52:14.241669 login[1392]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 19:52:14.244063 login[1393]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:52:14.275807 systemd[1]: Created slice user-500.slice. Oct 2 19:52:14.277376 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:52:14.280339 systemd-logind[1280]: New session 2 of user core. Oct 2 19:52:14.297503 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:52:14.299410 systemd[1]: Starting user@500.service... Oct 2 19:52:14.303024 (systemd)[1396]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:14.446561 systemd[1396]: Queued start job for default target default.target. Oct 2 19:52:14.447357 systemd[1396]: Reached target paths.target. Oct 2 19:52:14.447393 systemd[1396]: Reached target sockets.target. Oct 2 19:52:14.447415 systemd[1396]: Reached target timers.target. Oct 2 19:52:14.447434 systemd[1396]: Reached target basic.target. Oct 2 19:52:14.447585 systemd[1]: Started user@500.service. Oct 2 19:52:14.449144 systemd[1]: Started session-2.scope. Oct 2 19:52:14.449752 systemd[1396]: Reached target default.target. Oct 2 19:52:14.449934 systemd[1396]: Startup finished in 140ms. Oct 2 19:52:15.242045 login[1392]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:52:15.247722 systemd[1]: Started session-1.scope. Oct 2 19:52:15.248736 systemd-logind[1280]: New session 1 of user core. Oct 2 19:52:18.831977 waagent[1387]: 2023-10-02T19:52:18.831862Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:52:18.845215 waagent[1387]: 2023-10-02T19:52:18.833263Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:52:18.845215 waagent[1387]: 2023-10-02T19:52:18.834263Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:52:18.845215 waagent[1387]: 2023-10-02T19:52:18.835481Z INFO Daemon Daemon Run daemon Oct 2 19:52:18.845215 waagent[1387]: 2023-10-02T19:52:18.836772Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:52:18.851909 waagent[1387]: 2023-10-02T19:52:18.851803Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:18.860468 waagent[1387]: 2023-10-02T19:52:18.860361Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:18.865203 waagent[1387]: 2023-10-02T19:52:18.865140Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:18.867709 waagent[1387]: 2023-10-02T19:52:18.867647Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:52:18.870718 waagent[1387]: 2023-10-02T19:52:18.870657Z INFO Daemon Daemon Activate resource disk Oct 2 19:52:18.873377 waagent[1387]: 2023-10-02T19:52:18.873317Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:52:18.883765 waagent[1387]: 2023-10-02T19:52:18.883703Z INFO Daemon Daemon Found device: None Oct 2 19:52:18.886146 waagent[1387]: 2023-10-02T19:52:18.886087Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:52:18.890458 waagent[1387]: 2023-10-02T19:52:18.890399Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:52:18.896676 waagent[1387]: 2023-10-02T19:52:18.896613Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:18.899892 waagent[1387]: 2023-10-02T19:52:18.899832Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:52:18.910494 waagent[1387]: 2023-10-02T19:52:18.910372Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:18.917396 waagent[1387]: 2023-10-02T19:52:18.917292Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:18.926354 waagent[1387]: 2023-10-02T19:52:18.917668Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:18.926354 waagent[1387]: 2023-10-02T19:52:18.918875Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:52:18.938299 waagent[1387]: 2023-10-02T19:52:18.938183Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:52:18.999630 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:52:19.014422 waagent[1387]: 2023-10-02T19:52:19.014279Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:52:19.018362 waagent[1387]: 2023-10-02T19:52:19.018266Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:19.022792 waagent[1387]: 2023-10-02T19:52:19.022714Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:52:19.027446 waagent[1387]: 2023-10-02T19:52:19.027376Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:52:19.031086 waagent[1387]: 2023-10-02T19:52:19.031026Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:52:19.034409 waagent[1387]: 2023-10-02T19:52:19.034341Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:52:19.122739 waagent[1387]: 2023-10-02T19:52:19.122543Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:52:19.132627 waagent[1387]: 2023-10-02T19:52:19.125649Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:52:19.132627 waagent[1387]: 2023-10-02T19:52:19.127253Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:52:19.456830 waagent[1387]: 2023-10-02T19:52:19.456665Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:52:19.469920 waagent[1387]: 2023-10-02T19:52:19.469786Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:52:19.475378 waagent[1387]: 2023-10-02T19:52:19.470339Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:52:19.547737 waagent[1387]: 2023-10-02T19:52:19.547591Z INFO Daemon Daemon Found private key matching thumbprint 011F12A7246B8006488DEFE4CAA723E833B92709 Oct 2 19:52:19.552470 waagent[1387]: 2023-10-02T19:52:19.552374Z INFO Daemon Daemon Certificate with thumbprint CED1E4CEA51E275B8539B938A1E3D539940B47FA has no matching private key. Oct 2 19:52:19.557409 waagent[1387]: 2023-10-02T19:52:19.557326Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:52:19.597122 waagent[1387]: 2023-10-02T19:52:19.597046Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: dde6add3-9d7a-4398-9320-057fff57ae96 New eTag: 7511336829322822851] Oct 2 19:52:19.605030 waagent[1387]: 2023-10-02T19:52:19.604938Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:19.619914 waagent[1387]: 2023-10-02T19:52:19.619826Z INFO Daemon Daemon Starting provisioning Oct 2 19:52:19.623364 waagent[1387]: 2023-10-02T19:52:19.623285Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:52:19.626626 waagent[1387]: 2023-10-02T19:52:19.626546Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-8915d29de4] Oct 2 19:52:19.644037 waagent[1387]: 2023-10-02T19:52:19.643895Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-8915d29de4] Oct 2 19:52:19.647661 waagent[1387]: 2023-10-02T19:52:19.647575Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:52:19.651365 waagent[1387]: 2023-10-02T19:52:19.651301Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:52:19.665941 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:52:19.666224 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:52:19.666304 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:52:19.666641 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:52:19.670039 systemd-networkd[1150]: eth0: DHCPv6 lease lost Oct 2 19:52:19.671904 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:52:19.672102 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:52:19.674710 systemd[1]: Starting systemd-networkd.service... Oct 2 19:52:19.705068 systemd-networkd[1437]: enP53415s1: Link UP Oct 2 19:52:19.705078 systemd-networkd[1437]: enP53415s1: Gained carrier Oct 2 19:52:19.706406 systemd-networkd[1437]: eth0: Link UP Oct 2 19:52:19.706415 systemd-networkd[1437]: eth0: Gained carrier Oct 2 19:52:19.706842 systemd-networkd[1437]: lo: Link UP Oct 2 19:52:19.706850 systemd-networkd[1437]: lo: Gained carrier Oct 2 19:52:19.707205 systemd-networkd[1437]: eth0: Gained IPv6LL Oct 2 19:52:19.707476 systemd-networkd[1437]: Enumeration completed Oct 2 19:52:19.707565 systemd[1]: Started systemd-networkd.service. Oct 2 19:52:19.709296 waagent[1387]: 2023-10-02T19:52:19.709135Z INFO Daemon Daemon Create user account if not exists Oct 2 19:52:19.709892 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:52:19.721906 waagent[1387]: 2023-10-02T19:52:19.713531Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:52:19.721906 waagent[1387]: 2023-10-02T19:52:19.713838Z INFO Daemon Daemon Configure sudoer Oct 2 19:52:19.721906 waagent[1387]: 2023-10-02T19:52:19.715354Z INFO Daemon Daemon Configure sshd Oct 2 19:52:19.721906 waagent[1387]: 2023-10-02T19:52:19.716028Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:52:19.718817 systemd-networkd[1437]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:52:19.747092 systemd-networkd[1437]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:52:19.749725 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:52:19.758821 waagent[1387]: 2023-10-02T19:52:19.758707Z INFO Daemon Daemon Decode custom data Oct 2 19:52:19.763767 waagent[1387]: 2023-10-02T19:52:19.759304Z INFO Daemon Daemon Save custom data Oct 2 19:52:20.979250 waagent[1387]: 2023-10-02T19:52:20.979143Z INFO Daemon Daemon Provisioning complete Oct 2 19:52:20.996863 waagent[1387]: 2023-10-02T19:52:20.996715Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:52:21.002642 waagent[1387]: 2023-10-02T19:52:21.002570Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:52:21.008777 waagent[1387]: 2023-10-02T19:52:21.008709Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:52:21.272316 waagent[1450]: 2023-10-02T19:52:21.272133Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:52:21.273055 waagent[1450]: 2023-10-02T19:52:21.272967Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:21.273206 waagent[1450]: 2023-10-02T19:52:21.273156Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:21.284261 waagent[1450]: 2023-10-02T19:52:21.284186Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:52:21.284415 waagent[1450]: 2023-10-02T19:52:21.284364Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:52:21.344888 waagent[1450]: 2023-10-02T19:52:21.344763Z INFO ExtHandler ExtHandler Found private key matching thumbprint 011F12A7246B8006488DEFE4CAA723E833B92709 Oct 2 19:52:21.345126 waagent[1450]: 2023-10-02T19:52:21.345063Z INFO ExtHandler ExtHandler Certificate with thumbprint CED1E4CEA51E275B8539B938A1E3D539940B47FA has no matching private key. Oct 2 19:52:21.345371 waagent[1450]: 2023-10-02T19:52:21.345319Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:52:21.358951 waagent[1450]: 2023-10-02T19:52:21.358890Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: ad8c70ad-61f4-447a-9d82-61d1a7305c27 New eTag: 7511336829322822851] Oct 2 19:52:21.359514 waagent[1450]: 2023-10-02T19:52:21.359458Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:21.424781 waagent[1450]: 2023-10-02T19:52:21.424638Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:21.433825 waagent[1450]: 2023-10-02T19:52:21.433743Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1450 Oct 2 19:52:21.437293 waagent[1450]: 2023-10-02T19:52:21.437224Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:21.438528 waagent[1450]: 2023-10-02T19:52:21.438472Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:21.838123 waagent[1450]: 2023-10-02T19:52:21.838057Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:21.838563 waagent[1450]: 2023-10-02T19:52:21.838496Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:21.846621 waagent[1450]: 2023-10-02T19:52:21.846567Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:21.847117 waagent[1450]: 2023-10-02T19:52:21.847061Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:21.848179 waagent[1450]: 2023-10-02T19:52:21.848113Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:52:21.849454 waagent[1450]: 2023-10-02T19:52:21.849396Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:21.849652 waagent[1450]: 2023-10-02T19:52:21.849597Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:21.849806 waagent[1450]: 2023-10-02T19:52:21.849760Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:21.850350 waagent[1450]: 2023-10-02T19:52:21.850297Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:21.850636 waagent[1450]: 2023-10-02T19:52:21.850582Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:21.850636 waagent[1450]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:21.850636 waagent[1450]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:21.850636 waagent[1450]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:21.850636 waagent[1450]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:21.850636 waagent[1450]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:21.850636 waagent[1450]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:21.853330 waagent[1450]: 2023-10-02T19:52:21.853258Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:21.853565 waagent[1450]: 2023-10-02T19:52:21.853511Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:21.854046 waagent[1450]: 2023-10-02T19:52:21.853974Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:21.854483 waagent[1450]: 2023-10-02T19:52:21.854426Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:21.854629 waagent[1450]: 2023-10-02T19:52:21.854581Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:21.854757 waagent[1450]: 2023-10-02T19:52:21.854714Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:21.855439 waagent[1450]: 2023-10-02T19:52:21.855388Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:21.855575 waagent[1450]: 2023-10-02T19:52:21.855523Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:21.856166 waagent[1450]: 2023-10-02T19:52:21.856106Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:21.856245 waagent[1450]: 2023-10-02T19:52:21.856195Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:21.856540 waagent[1450]: 2023-10-02T19:52:21.856493Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:21.869305 waagent[1450]: 2023-10-02T19:52:21.869209Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:52:21.870149 waagent[1450]: 2023-10-02T19:52:21.870086Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:21.871222 waagent[1450]: 2023-10-02T19:52:21.871155Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:52:21.879826 waagent[1450]: 2023-10-02T19:52:21.879773Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1437' Oct 2 19:52:21.916040 waagent[1450]: 2023-10-02T19:52:21.915960Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:52:21.944299 waagent[1450]: 2023-10-02T19:52:21.944171Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:21.944299 waagent[1450]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:21.944299 waagent[1450]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:21.944299 waagent[1450]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b1:cc:7a brd ff:ff:ff:ff:ff:ff Oct 2 19:52:21.944299 waagent[1450]: 3: enP53415s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b1:cc:7a brd ff:ff:ff:ff:ff:ff\ altname enP53415p0s2 Oct 2 19:52:21.944299 waagent[1450]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:21.944299 waagent[1450]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:21.944299 waagent[1450]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:21.944299 waagent[1450]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:21.944299 waagent[1450]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:21.944299 waagent[1450]: 2: eth0 inet6 fe80::20d:3aff:feb1:cc7a/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:22.118770 waagent[1450]: 2023-10-02T19:52:22.118595Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:52:22.121618 waagent[1450]: 2023-10-02T19:52:22.121510Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:52:22.121618 waagent[1450]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:22.121618 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:52:22.121618 waagent[1450]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:22.121618 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:52:22.121618 waagent[1450]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:22.121618 waagent[1450]: pkts bytes target prot opt in out source destination Oct 2 19:52:22.121618 waagent[1450]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:22.121618 waagent[1450]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:22.122940 waagent[1450]: 2023-10-02T19:52:22.122883Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:52:22.322948 waagent[1450]: 2023-10-02T19:52:22.322870Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:52:23.013503 waagent[1387]: 2023-10-02T19:52:23.013322Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:52:23.020386 waagent[1387]: 2023-10-02T19:52:23.020316Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:52:24.008928 waagent[1490]: 2023-10-02T19:52:24.008804Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:52:24.009660 waagent[1490]: 2023-10-02T19:52:24.009588Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:52:24.009814 waagent[1490]: 2023-10-02T19:52:24.009756Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:52:24.019362 waagent[1490]: 2023-10-02T19:52:24.019260Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:24.019743 waagent[1490]: 2023-10-02T19:52:24.019684Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:24.019907 waagent[1490]: 2023-10-02T19:52:24.019858Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:24.031278 waagent[1490]: 2023-10-02T19:52:24.031202Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:52:24.043196 waagent[1490]: 2023-10-02T19:52:24.043138Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:52:24.044081 waagent[1490]: 2023-10-02T19:52:24.044023Z INFO ExtHandler Oct 2 19:52:24.044233 waagent[1490]: 2023-10-02T19:52:24.044183Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: f25a6a48-f919-4947-ba42-6fe5a1e8672a eTag: 7511336829322822851 source: Fabric] Oct 2 19:52:24.044907 waagent[1490]: 2023-10-02T19:52:24.044849Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:52:24.046007 waagent[1490]: 2023-10-02T19:52:24.045940Z INFO ExtHandler Oct 2 19:52:24.046150 waagent[1490]: 2023-10-02T19:52:24.046101Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:52:24.052474 waagent[1490]: 2023-10-02T19:52:24.052422Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:52:24.052886 waagent[1490]: 2023-10-02T19:52:24.052837Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:24.069635 waagent[1490]: 2023-10-02T19:52:24.069564Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:52:24.131521 waagent[1490]: 2023-10-02T19:52:24.131392Z INFO ExtHandler Downloaded certificate {'thumbprint': 'CED1E4CEA51E275B8539B938A1E3D539940B47FA', 'hasPrivateKey': False} Oct 2 19:52:24.132476 waagent[1490]: 2023-10-02T19:52:24.132405Z INFO ExtHandler Downloaded certificate {'thumbprint': '011F12A7246B8006488DEFE4CAA723E833B92709', 'hasPrivateKey': True} Oct 2 19:52:24.133475 waagent[1490]: 2023-10-02T19:52:24.133408Z INFO ExtHandler Fetch goal state completed Oct 2 19:52:24.153809 waagent[1490]: 2023-10-02T19:52:24.153739Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1490 Oct 2 19:52:24.157041 waagent[1490]: 2023-10-02T19:52:24.156963Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:24.158503 waagent[1490]: 2023-10-02T19:52:24.158445Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:24.163049 waagent[1490]: 2023-10-02T19:52:24.162979Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:24.163402 waagent[1490]: 2023-10-02T19:52:24.163345Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:24.171077 waagent[1490]: 2023-10-02T19:52:24.171021Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:24.171524 waagent[1490]: 2023-10-02T19:52:24.171467Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:24.192168 waagent[1490]: 2023-10-02T19:52:24.192046Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:52:24.195480 waagent[1490]: 2023-10-02T19:52:24.195360Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:52:24.202032 waagent[1490]: 2023-10-02T19:52:24.201959Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:52:24.203387 waagent[1490]: 2023-10-02T19:52:24.203327Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:24.203838 waagent[1490]: 2023-10-02T19:52:24.203781Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:24.204002 waagent[1490]: 2023-10-02T19:52:24.203945Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:24.204553 waagent[1490]: 2023-10-02T19:52:24.204496Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:24.204827 waagent[1490]: 2023-10-02T19:52:24.204774Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:24.204827 waagent[1490]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:24.204827 waagent[1490]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:24.204827 waagent[1490]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:24.204827 waagent[1490]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:24.204827 waagent[1490]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:24.204827 waagent[1490]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:24.207070 waagent[1490]: 2023-10-02T19:52:24.206934Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:24.208204 waagent[1490]: 2023-10-02T19:52:24.208143Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:24.208602 waagent[1490]: 2023-10-02T19:52:24.208550Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:24.211259 waagent[1490]: 2023-10-02T19:52:24.211149Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:24.211726 waagent[1490]: 2023-10-02T19:52:24.211659Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:24.212600 waagent[1490]: 2023-10-02T19:52:24.212520Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:24.215191 waagent[1490]: 2023-10-02T19:52:24.215120Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:24.215510 waagent[1490]: 2023-10-02T19:52:24.215438Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:24.217820 waagent[1490]: 2023-10-02T19:52:24.217707Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:24.218449 waagent[1490]: 2023-10-02T19:52:24.218385Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:24.219202 waagent[1490]: 2023-10-02T19:52:24.219147Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:24.219202 waagent[1490]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:24.219202 waagent[1490]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:24.219202 waagent[1490]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b1:cc:7a brd ff:ff:ff:ff:ff:ff Oct 2 19:52:24.219202 waagent[1490]: 3: enP53415s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b1:cc:7a brd ff:ff:ff:ff:ff:ff\ altname enP53415p0s2 Oct 2 19:52:24.219202 waagent[1490]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:24.219202 waagent[1490]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:24.219202 waagent[1490]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:24.219202 waagent[1490]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:24.219202 waagent[1490]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:24.219202 waagent[1490]: 2: eth0 inet6 fe80::20d:3aff:feb1:cc7a/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:24.220410 waagent[1490]: 2023-10-02T19:52:24.220357Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:24.231250 waagent[1490]: 2023-10-02T19:52:24.231172Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:52:24.285588 waagent[1490]: 2023-10-02T19:52:24.285459Z INFO ExtHandler ExtHandler Oct 2 19:52:24.287134 waagent[1490]: 2023-10-02T19:52:24.287070Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: e1be2285-775b-4281-bb7f-c677789ef6c8 correlation 8570902d-16e2-4a0a-82be-63c1120ba688 created: 2023-10-02T19:50:42.403908Z] Oct 2 19:52:24.288269 waagent[1490]: 2023-10-02T19:52:24.288204Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:52:24.294481 waagent[1490]: 2023-10-02T19:52:24.294418Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 8 ms] Oct 2 19:52:24.314325 waagent[1490]: 2023-10-02T19:52:24.314222Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:52:24.314325 waagent[1490]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:24.314325 waagent[1490]: pkts bytes target prot opt in out source destination Oct 2 19:52:24.314325 waagent[1490]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:24.314325 waagent[1490]: pkts bytes target prot opt in out source destination Oct 2 19:52:24.314325 waagent[1490]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:24.314325 waagent[1490]: pkts bytes target prot opt in out source destination Oct 2 19:52:24.314325 waagent[1490]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:52:24.314325 waagent[1490]: 165 19110 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:24.314325 waagent[1490]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:24.330070 waagent[1490]: 2023-10-02T19:52:24.329996Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:52:24.340129 waagent[1490]: 2023-10-02T19:52:24.340056Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 608E93B5-9CF6-492E-ACB1-C01B509CAB7F;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:52:49.125936 systemd[1]: Created slice system-sshd.slice. Oct 2 19:52:49.127792 systemd[1]: Started sshd@0-10.200.8.15:22-10.200.12.6:40312.service. Oct 2 19:52:49.892809 sshd[1529]: Accepted publickey for core from 10.200.12.6 port 40312 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:49.894315 sshd[1529]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:49.898690 systemd-logind[1280]: New session 3 of user core. Oct 2 19:52:49.899717 systemd[1]: Started session-3.scope. Oct 2 19:52:50.441855 systemd[1]: Started sshd@1-10.200.8.15:22-10.200.12.6:40328.service. Oct 2 19:52:51.074713 sshd[1534]: Accepted publickey for core from 10.200.12.6 port 40328 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:51.076504 sshd[1534]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:51.081437 systemd[1]: Started session-4.scope. Oct 2 19:52:51.082061 systemd-logind[1280]: New session 4 of user core. Oct 2 19:52:51.517546 sshd[1534]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:51.520574 systemd[1]: sshd@1-10.200.8.15:22-10.200.12.6:40328.service: Deactivated successfully. Oct 2 19:52:51.521838 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:52:51.522536 systemd-logind[1280]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:52:51.523400 systemd-logind[1280]: Removed session 4. Oct 2 19:52:51.624934 systemd[1]: Started sshd@2-10.200.8.15:22-10.200.12.6:40342.service. Oct 2 19:52:52.258922 sshd[1540]: Accepted publickey for core from 10.200.12.6 port 40342 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:52.260418 sshd[1540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:52.265313 systemd[1]: Started session-5.scope. Oct 2 19:52:52.265925 systemd-logind[1280]: New session 5 of user core. Oct 2 19:52:52.332841 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:52:52.700674 sshd[1540]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:52.703749 systemd[1]: sshd@2-10.200.8.15:22-10.200.12.6:40342.service: Deactivated successfully. Oct 2 19:52:52.704790 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:52:52.705422 systemd-logind[1280]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:52:52.706219 systemd-logind[1280]: Removed session 5. Oct 2 19:52:52.805649 systemd[1]: Started sshd@3-10.200.8.15:22-10.200.12.6:40352.service. Oct 2 19:52:53.446548 sshd[1546]: Accepted publickey for core from 10.200.12.6 port 40352 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:53.449347 sshd[1546]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:53.455809 systemd[1]: Started session-6.scope. Oct 2 19:52:53.456434 systemd-logind[1280]: New session 6 of user core. Oct 2 19:52:53.904258 sshd[1546]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:53.907094 systemd[1]: sshd@3-10.200.8.15:22-10.200.12.6:40352.service: Deactivated successfully. Oct 2 19:52:53.908249 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:52:53.908277 systemd-logind[1280]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:52:53.909359 systemd-logind[1280]: Removed session 6. Oct 2 19:52:54.008393 systemd[1]: Started sshd@4-10.200.8.15:22-10.200.12.6:40360.service. Oct 2 19:52:54.631627 sshd[1552]: Accepted publickey for core from 10.200.12.6 port 40360 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:54.633185 sshd[1552]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:54.638691 systemd[1]: Started session-7.scope. Oct 2 19:52:54.639216 systemd-logind[1280]: New session 7 of user core. Oct 2 19:52:55.214657 sudo[1555]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:52:55.214936 sudo[1555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:52:55.231223 dbus-daemon[1265]: \xd0\xddfcnU: received setenforce notice (enforcing=1869526288) Oct 2 19:52:55.233169 sudo[1555]: pam_unix(sudo:session): session closed for user root Oct 2 19:52:55.442868 sshd[1552]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:55.446800 systemd[1]: sshd@4-10.200.8.15:22-10.200.12.6:40360.service: Deactivated successfully. Oct 2 19:52:55.447771 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:52:55.448446 systemd-logind[1280]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:52:55.449601 systemd-logind[1280]: Removed session 7. Oct 2 19:52:55.546320 systemd[1]: Started sshd@5-10.200.8.15:22-10.200.12.6:40370.service. Oct 2 19:52:56.172045 sshd[1559]: Accepted publickey for core from 10.200.12.6 port 40370 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:56.173549 sshd[1559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:56.179532 systemd[1]: Started session-8.scope. Oct 2 19:52:56.179975 systemd-logind[1280]: New session 8 of user core. Oct 2 19:52:56.516688 sudo[1563]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:52:56.516963 sudo[1563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:52:56.519965 sudo[1563]: pam_unix(sudo:session): session closed for user root Oct 2 19:52:56.524399 sudo[1562]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:52:56.524655 sudo[1562]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:52:56.533241 systemd[1]: Stopping audit-rules.service... Oct 2 19:52:56.533000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:52:56.535116 auditctl[1566]: No rules Oct 2 19:52:56.542465 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 19:52:56.542537 kernel: audit: type=1305 audit(1696276376.533:177): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:52:56.537212 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:52:56.537375 systemd[1]: Stopped audit-rules.service. Oct 2 19:52:56.538847 systemd[1]: Starting audit-rules.service... Oct 2 19:52:56.533000 audit[1566]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff7c0c8720 a2=420 a3=0 items=0 ppid=1 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:56.533000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:52:56.561083 augenrules[1583]: No rules Oct 2 19:52:56.561744 systemd[1]: Finished audit-rules.service. Oct 2 19:52:56.564481 kernel: audit: type=1300 audit(1696276376.533:177): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff7c0c8720 a2=420 a3=0 items=0 ppid=1 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:56.564555 kernel: audit: type=1327 audit(1696276376.533:177): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:52:56.564906 sudo[1562]: pam_unix(sudo:session): session closed for user root Oct 2 19:52:56.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.586811 kernel: audit: type=1131 audit(1696276376.536:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.586874 kernel: audit: type=1130 audit(1696276376.560:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.586900 kernel: audit: type=1106 audit(1696276376.563:180): pid=1562 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.563000 audit[1562]: USER_END pid=1562 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.600019 kernel: audit: type=1104 audit(1696276376.564:181): pid=1562 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.564000 audit[1562]: CRED_DISP pid=1562 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.663940 sshd[1559]: pam_unix(sshd:session): session closed for user core Oct 2 19:52:56.664000 audit[1559]: USER_END pid=1559 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:56.668391 systemd-logind[1280]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:52:56.672835 systemd[1]: sshd@5-10.200.8.15:22-10.200.12.6:40370.service: Deactivated successfully. Oct 2 19:52:56.673489 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:52:56.674694 systemd-logind[1280]: Removed session 8. Oct 2 19:52:56.664000 audit[1559]: CRED_DISP pid=1559 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:56.701624 kernel: audit: type=1106 audit(1696276376.664:182): pid=1559 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:56.701687 kernel: audit: type=1104 audit(1696276376.664:183): pid=1559 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:56.701712 kernel: audit: type=1131 audit(1696276376.672:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:40370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:40370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.777375 systemd[1]: Started sshd@6-10.200.8.15:22-10.200.12.6:40374.service. Oct 2 19:52:56.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:40374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:56.994576 update_engine[1281]: I1002 19:52:56.994515 1281 update_attempter.cc:505] Updating boot flags... Oct 2 19:52:57.558000 audit[1589]: USER_ACCT pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:57.559335 sshd[1589]: Accepted publickey for core from 10.200.12.6 port 40374 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:52:57.559000 audit[1589]: CRED_ACQ pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:57.559000 audit[1589]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdde418690 a2=3 a3=0 items=0 ppid=1 pid=1589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:57.559000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:52:57.560843 sshd[1589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:57.565943 systemd[1]: Started session-9.scope. Oct 2 19:52:57.566455 systemd-logind[1280]: New session 9 of user core. Oct 2 19:52:57.570000 audit[1589]: USER_START pid=1589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:57.572000 audit[1630]: CRED_ACQ pid=1630 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:52:57.904000 audit[1631]: USER_ACCT pid=1631 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:57.904000 audit[1631]: CRED_REFR pid=1631 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:57.905381 sudo[1631]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:52:57.905671 sudo[1631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:52:57.906000 audit[1631]: USER_START pid=1631 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:52:59.038942 systemd[1]: Starting docker.service... Oct 2 19:52:59.079026 env[1646]: time="2023-10-02T19:52:59.078946399Z" level=info msg="Starting up" Oct 2 19:52:59.081868 env[1646]: time="2023-10-02T19:52:59.081834024Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:52:59.081868 env[1646]: time="2023-10-02T19:52:59.081853825Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:52:59.082065 env[1646]: time="2023-10-02T19:52:59.081874825Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:52:59.082065 env[1646]: time="2023-10-02T19:52:59.081887125Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:52:59.084265 env[1646]: time="2023-10-02T19:52:59.084234645Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:52:59.084265 env[1646]: time="2023-10-02T19:52:59.084254946Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:52:59.084411 env[1646]: time="2023-10-02T19:52:59.084278146Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:52:59.084411 env[1646]: time="2023-10-02T19:52:59.084293346Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:52:59.094216 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport752543242-merged.mount: Deactivated successfully. Oct 2 19:52:59.214685 env[1646]: time="2023-10-02T19:52:59.214632281Z" level=info msg="Loading containers: start." Oct 2 19:52:59.247000 audit[1672]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.247000 audit[1672]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc265543c0 a2=0 a3=7ffc265543ac items=0 ppid=1646 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:52:59.249000 audit[1674]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.249000 audit[1674]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcf5abe450 a2=0 a3=7ffcf5abe43c items=0 ppid=1646 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.249000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:52:59.251000 audit[1676]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.251000 audit[1676]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffdfb9d99c0 a2=0 a3=7ffdfb9d99ac items=0 ppid=1646 pid=1676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.251000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:52:59.253000 audit[1678]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.253000 audit[1678]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff8bc3b0a0 a2=0 a3=7fff8bc3b08c items=0 ppid=1646 pid=1678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.253000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:52:59.255000 audit[1680]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.255000 audit[1680]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc6ec1a730 a2=0 a3=7ffc6ec1a71c items=0 ppid=1646 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.255000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:52:59.257000 audit[1682]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.257000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe9188fef0 a2=0 a3=7ffe9188fedc items=0 ppid=1646 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:52:59.276000 audit[1684]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.276000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcb385f340 a2=0 a3=7ffcb385f32c items=0 ppid=1646 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:52:59.278000 audit[1686]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.278000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd17a2f590 a2=0 a3=7ffd17a2f57c items=0 ppid=1646 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.278000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:52:59.280000 audit[1688]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.280000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffea37ddf70 a2=0 a3=7ffea37ddf5c items=0 ppid=1646 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:52:59.300000 audit[1692]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.300000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe295bb8c0 a2=0 a3=7ffe295bb8ac items=0 ppid=1646 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.300000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:52:59.301000 audit[1693]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.301000 audit[1693]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe26962750 a2=0 a3=7ffe2696273c items=0 ppid=1646 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.301000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:52:59.351186 kernel: Initializing XFRM netlink socket Oct 2 19:52:59.380429 env[1646]: time="2023-10-02T19:52:59.380384624Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:52:59.450000 audit[1700]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.450000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffee08eee90 a2=0 a3=7ffee08eee7c items=0 ppid=1646 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.450000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:52:59.472000 audit[1703]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.472000 audit[1703]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdabd56990 a2=0 a3=7ffdabd5697c items=0 ppid=1646 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.472000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:52:59.475000 audit[1706]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1706 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.475000 audit[1706]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffea05558a0 a2=0 a3=7ffea055588c items=0 ppid=1646 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.475000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:52:59.477000 audit[1708]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.477000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcadfbd9e0 a2=0 a3=7ffcadfbd9cc items=0 ppid=1646 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:52:59.479000 audit[1710]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.479000 audit[1710]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdb58ff1d0 a2=0 a3=7ffdb58ff1bc items=0 ppid=1646 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.479000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:52:59.481000 audit[1712]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.481000 audit[1712]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd08dab5d0 a2=0 a3=7ffd08dab5bc items=0 ppid=1646 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.481000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:52:59.482000 audit[1714]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.482000 audit[1714]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff0bccde00 a2=0 a3=7fff0bccddec items=0 ppid=1646 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.482000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:52:59.485000 audit[1716]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.485000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffdd08f0130 a2=0 a3=7ffdd08f011c items=0 ppid=1646 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:52:59.487000 audit[1718]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.487000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fffc8de14d0 a2=0 a3=7fffc8de14bc items=0 ppid=1646 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:52:59.489000 audit[1720]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.489000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdeb605f80 a2=0 a3=7ffdeb605f6c items=0 ppid=1646 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:52:59.491000 audit[1722]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.491000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffa7e8a6d0 a2=0 a3=7fffa7e8a6bc items=0 ppid=1646 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:52:59.492472 systemd-networkd[1437]: docker0: Link UP Oct 2 19:52:59.513000 audit[1726]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.513000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff173e8c70 a2=0 a3=7fff173e8c5c items=0 ppid=1646 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.513000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:52:59.514000 audit[1727]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:52:59.514000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd88630be0 a2=0 a3=7ffd88630bcc items=0 ppid=1646 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:52:59.514000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:52:59.516054 env[1646]: time="2023-10-02T19:52:59.516024005Z" level=info msg="Loading containers: done." Oct 2 19:52:59.528770 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2134664695-merged.mount: Deactivated successfully. Oct 2 19:52:59.579677 env[1646]: time="2023-10-02T19:52:59.579571358Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:52:59.580199 env[1646]: time="2023-10-02T19:52:59.580166763Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:52:59.580577 env[1646]: time="2023-10-02T19:52:59.580548366Z" level=info msg="Daemon has completed initialization" Oct 2 19:52:59.632647 systemd[1]: Started docker.service. Oct 2 19:52:59.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:59.637074 env[1646]: time="2023-10-02T19:52:59.637022058Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:52:59.653584 systemd[1]: Reloading. Oct 2 19:52:59.725600 /usr/lib/systemd/system-generators/torcx-generator[1774]: time="2023-10-02T19:52:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:52:59.725639 /usr/lib/systemd/system-generators/torcx-generator[1774]: time="2023-10-02T19:52:59Z" level=info msg="torcx already run" Oct 2 19:52:59.815680 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:52:59.815702 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:52:59.833688 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit: BPF prog-id=38 op=LOAD Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.897000 audit: BPF prog-id=39 op=LOAD Oct 2 19:52:59.897000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:52:59.897000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:52:59.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.898000 audit: BPF prog-id=40 op=LOAD Oct 2 19:52:59.898000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.899000 audit: BPF prog-id=41 op=LOAD Oct 2 19:52:59.899000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit: BPF prog-id=42 op=LOAD Oct 2 19:52:59.900000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit: BPF prog-id=43 op=LOAD Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.900000 audit: BPF prog-id=44 op=LOAD Oct 2 19:52:59.900000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:52:59.900000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.902000 audit: BPF prog-id=45 op=LOAD Oct 2 19:52:59.902000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit: BPF prog-id=46 op=LOAD Oct 2 19:52:59.905000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit: BPF prog-id=47 op=LOAD Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.905000 audit: BPF prog-id=48 op=LOAD Oct 2 19:52:59.905000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:52:59.905000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit: BPF prog-id=49 op=LOAD Oct 2 19:52:59.909000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit: BPF prog-id=50 op=LOAD Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.909000 audit: BPF prog-id=51 op=LOAD Oct 2 19:52:59.909000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:52:59.909000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:52:59.910000 audit: BPF prog-id=52 op=LOAD Oct 2 19:52:59.910000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:52:59.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:52:59.922422 systemd[1]: Started kubelet.service. Oct 2 19:53:00.003645 kubelet[1835]: E1002 19:53:00.003577 1835 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:53:00.005704 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:00.005871 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:00.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:03.370249 env[1300]: time="2023-10-02T19:53:03.370189809Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:53:04.356270 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount164612523.mount: Deactivated successfully. Oct 2 19:53:07.100872 env[1300]: time="2023-10-02T19:53:07.100803228Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:07.112386 env[1300]: time="2023-10-02T19:53:07.112326488Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:07.119130 env[1300]: time="2023-10-02T19:53:07.119087323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:07.124283 env[1300]: time="2023-10-02T19:53:07.124245150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:07.125131 env[1300]: time="2023-10-02T19:53:07.125092954Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:53:07.135688 env[1300]: time="2023-10-02T19:53:07.135658209Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:53:09.905472 env[1300]: time="2023-10-02T19:53:09.905399606Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:09.918154 env[1300]: time="2023-10-02T19:53:09.918108564Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:09.930101 env[1300]: time="2023-10-02T19:53:09.929942918Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:09.942892 env[1300]: time="2023-10-02T19:53:09.942855377Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:09.943637 env[1300]: time="2023-10-02T19:53:09.943598881Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:53:09.954510 env[1300]: time="2023-10-02T19:53:09.954481630Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:53:10.126699 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:53:10.127417 systemd[1]: Stopped kubelet.service. Oct 2 19:53:10.150391 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:53:10.150590 kernel: audit: type=1130 audit(1696276390.126:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.133006 systemd[1]: Started kubelet.service. Oct 2 19:53:10.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.178604 kernel: audit: type=1131 audit(1696276390.126:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.178698 kernel: audit: type=1130 audit(1696276390.132:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:10.196898 kubelet[1867]: E1002 19:53:10.196844 1867 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:53:10.200272 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:10.200453 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:10.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:10.214108 kernel: audit: type=1131 audit(1696276390.199:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:11.681578 env[1300]: time="2023-10-02T19:53:11.681513764Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:11.689627 env[1300]: time="2023-10-02T19:53:11.689573328Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:11.697917 env[1300]: time="2023-10-02T19:53:11.697858895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:11.702964 env[1300]: time="2023-10-02T19:53:11.702913935Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:11.703656 env[1300]: time="2023-10-02T19:53:11.703613341Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:53:11.714077 env[1300]: time="2023-10-02T19:53:11.714033524Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:53:12.804208 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1432629824.mount: Deactivated successfully. Oct 2 19:53:13.316198 env[1300]: time="2023-10-02T19:53:13.316126106Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.323964 env[1300]: time="2023-10-02T19:53:13.323920078Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.330247 env[1300]: time="2023-10-02T19:53:13.330211198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.335438 env[1300]: time="2023-10-02T19:53:13.335232373Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.336372 env[1300]: time="2023-10-02T19:53:13.336338911Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:53:13.349379 env[1300]: time="2023-10-02T19:53:13.349352566Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:53:13.902678 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3872514827.mount: Deactivated successfully. Oct 2 19:53:13.932045 env[1300]: time="2023-10-02T19:53:13.931966395Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.942169 env[1300]: time="2023-10-02T19:53:13.942088448Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.947508 env[1300]: time="2023-10-02T19:53:13.947455235Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.958759 env[1300]: time="2023-10-02T19:53:13.958702728Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:13.959415 env[1300]: time="2023-10-02T19:53:13.959347650Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:53:13.971223 env[1300]: time="2023-10-02T19:53:13.971178363Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:53:14.928107 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1696405320.mount: Deactivated successfully. Oct 2 19:53:19.080427 env[1300]: time="2023-10-02T19:53:19.080362226Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:19.091756 env[1300]: time="2023-10-02T19:53:19.091714261Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:19.104599 env[1300]: time="2023-10-02T19:53:19.104561840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:19.110141 env[1300]: time="2023-10-02T19:53:19.110106004Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:19.110510 env[1300]: time="2023-10-02T19:53:19.110475515Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:53:19.120782 env[1300]: time="2023-10-02T19:53:19.120753419Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:53:19.886638 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4253921082.mount: Deactivated successfully. Oct 2 19:53:20.376921 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:53:20.377237 systemd[1]: Stopped kubelet.service. Oct 2 19:53:20.394774 kernel: audit: type=1130 audit(1696276400.376:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.393559 systemd[1]: Started kubelet.service. Oct 2 19:53:20.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.423673 kernel: audit: type=1131 audit(1696276400.376:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.423757 kernel: audit: type=1130 audit(1696276400.392:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:20.468622 kubelet[1895]: E1002 19:53:20.468564 1895 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:53:20.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:20.470625 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:20.470756 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:20.485115 kernel: audit: type=1131 audit(1696276400.470:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:20.488309 env[1300]: time="2023-10-02T19:53:20.488260916Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:20.500117 env[1300]: time="2023-10-02T19:53:20.499867549Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:20.504733 env[1300]: time="2023-10-02T19:53:20.504680488Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:20.510746 env[1300]: time="2023-10-02T19:53:20.510710261Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:20.511234 env[1300]: time="2023-10-02T19:53:20.511199875Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:53:23.051535 systemd[1]: Stopped kubelet.service. Oct 2 19:53:23.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:23.082648 kernel: audit: type=1130 audit(1696276403.051:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:23.082818 kernel: audit: type=1131 audit(1696276403.051:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:23.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:23.076332 systemd[1]: Reloading. Oct 2 19:53:23.163576 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2023-10-02T19:53:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:23.163614 /usr/lib/systemd/system-generators/torcx-generator[1981]: time="2023-10-02T19:53:23Z" level=info msg="torcx already run" Oct 2 19:53:23.251310 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:23.251329 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:23.269109 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:23.347523 kernel: audit: type=1400 audit(1696276403.331:403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.367834 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:53:23.367913 kernel: audit: type=1400 audit(1696276403.331:404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.367940 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.345000 audit: BPF prog-id=53 op=LOAD Oct 2 19:53:23.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit: BPF prog-id=54 op=LOAD Oct 2 19:53:23.346000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:53:23.346000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.347000 audit: BPF prog-id=55 op=LOAD Oct 2 19:53:23.347000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.348000 audit: BPF prog-id=56 op=LOAD Oct 2 19:53:23.348000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit: BPF prog-id=57 op=LOAD Oct 2 19:53:23.349000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit: BPF prog-id=58 op=LOAD Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.371000 audit: BPF prog-id=59 op=LOAD Oct 2 19:53:23.371000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:53:23.371000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.372000 audit: BPF prog-id=60 op=LOAD Oct 2 19:53:23.372000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.374000 audit: BPF prog-id=61 op=LOAD Oct 2 19:53:23.374000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit: BPF prog-id=62 op=LOAD Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.375000 audit: BPF prog-id=63 op=LOAD Oct 2 19:53:23.375000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:53:23.375000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.377000 audit: BPF prog-id=64 op=LOAD Oct 2 19:53:23.378000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit: BPF prog-id=65 op=LOAD Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.378000 audit: BPF prog-id=66 op=LOAD Oct 2 19:53:23.378000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:53:23.378000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.379000 audit: BPF prog-id=67 op=LOAD Oct 2 19:53:23.379000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:53:23.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:23.396482 systemd[1]: Started kubelet.service. Oct 2 19:53:23.455000 kubelet[2043]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:23.455000 kubelet[2043]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:23.455445 kubelet[2043]: I1002 19:53:23.455040 2043 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:53:23.456376 kubelet[2043]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:23.456376 kubelet[2043]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:23.619854 kubelet[2043]: I1002 19:53:23.619738 2043 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:53:23.619854 kubelet[2043]: I1002 19:53:23.619764 2043 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:53:23.623350 kubelet[2043]: I1002 19:53:23.621485 2043 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:53:23.625612 kubelet[2043]: E1002 19:53:23.625589 2043 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.625775 kubelet[2043]: I1002 19:53:23.625759 2043 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:23.628383 kubelet[2043]: I1002 19:53:23.628363 2043 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:53:23.628828 kubelet[2043]: I1002 19:53:23.628809 2043 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:53:23.628924 kubelet[2043]: I1002 19:53:23.628910 2043 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:53:23.629080 kubelet[2043]: I1002 19:53:23.628950 2043 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:53:23.629080 kubelet[2043]: I1002 19:53:23.628965 2043 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:53:23.629168 kubelet[2043]: I1002 19:53:23.629105 2043 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:23.635579 kubelet[2043]: I1002 19:53:23.635564 2043 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:53:23.635662 kubelet[2043]: I1002 19:53:23.635592 2043 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:53:23.635662 kubelet[2043]: I1002 19:53:23.635623 2043 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:53:23.635662 kubelet[2043]: I1002 19:53:23.635642 2043 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:53:23.636612 kubelet[2043]: W1002 19:53:23.636541 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.636700 kubelet[2043]: E1002 19:53:23.636628 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.636749 kubelet[2043]: W1002 19:53:23.636720 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8915d29de4&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.636793 kubelet[2043]: E1002 19:53:23.636763 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8915d29de4&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.636865 kubelet[2043]: I1002 19:53:23.636850 2043 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:53:23.637165 kubelet[2043]: W1002 19:53:23.637149 2043 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:53:23.637614 kubelet[2043]: I1002 19:53:23.637592 2043 server.go:1186] "Started kubelet" Oct 2 19:53:23.638000 audit[2043]: AVC avc: denied { mac_admin } for pid=2043 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.638000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:23.638000 audit[2043]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dc51a0 a1=c00005dce0 a2=c000dc5170 a3=25 items=0 ppid=1 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.638000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:23.639468 kubelet[2043]: I1002 19:53:23.639454 2043 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:53:23.638000 audit[2043]: AVC avc: denied { mac_admin } for pid=2043 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.638000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:23.638000 audit[2043]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e64d40 a1=c00005dcf8 a2=c000dc5230 a3=25 items=0 ppid=1 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.638000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:23.639826 kubelet[2043]: I1002 19:53:23.639815 2043 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:53:23.639973 kubelet[2043]: I1002 19:53:23.639959 2043 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:53:23.642000 audit[2053]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2053 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.642000 audit[2053]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdc25d4d70 a2=0 a3=7ffdc25d4d5c items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:23.644495 kubelet[2043]: I1002 19:53:23.644477 2043 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:53:23.644601 kubelet[2043]: I1002 19:53:23.644589 2043 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:53:23.645261 kubelet[2043]: I1002 19:53:23.645244 2043 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:53:23.646039 kubelet[2043]: E1002 19:53:23.645534 2043 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266dfb1c576", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 637568886, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 637568886, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.15:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.15:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:53:23.646198 kubelet[2043]: E1002 19:53:23.646179 2043 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:53:23.646253 kubelet[2043]: E1002 19:53:23.646211 2043 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:53:23.647503 kubelet[2043]: E1002 19:53:23.646673 2043 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8915d29de4?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.648141 kubelet[2043]: I1002 19:53:23.648124 2043 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:53:23.648000 audit[2054]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.648000 audit[2054]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd366e7280 a2=0 a3=7ffd366e726c items=0 ppid=2043 pid=2054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:53:23.651000 audit[2056]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.651000 audit[2056]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc355cd8f0 a2=0 a3=7ffc355cd8dc items=0 ppid=2043 pid=2056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.651000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:23.655000 audit[2058]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2058 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.655000 audit[2058]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff8d4c85c0 a2=0 a3=7fff8d4c85ac items=0 ppid=2043 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:23.662054 kubelet[2043]: W1002 19:53:23.662016 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.662128 kubelet[2043]: E1002 19:53:23.662057 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.679000 audit[2064]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.679000 audit[2064]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd3dfd7080 a2=0 a3=7ffd3dfd706c items=0 ppid=2043 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.679000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:53:23.680000 audit[2066]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.680000 audit[2066]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff5b25bdf0 a2=0 a3=7fff5b25bddc items=0 ppid=2043 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.680000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:53:23.698606 kubelet[2043]: I1002 19:53:23.698579 2043 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:53:23.698606 kubelet[2043]: I1002 19:53:23.698601 2043 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:53:23.698734 kubelet[2043]: I1002 19:53:23.698618 2043 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:23.703603 kubelet[2043]: I1002 19:53:23.703579 2043 policy_none.go:49] "None policy: Start" Oct 2 19:53:23.704084 kubelet[2043]: I1002 19:53:23.704070 2043 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:53:23.704161 kubelet[2043]: I1002 19:53:23.704154 2043 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:53:23.707000 audit[2069]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.707000 audit[2069]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffedb4c7fe0 a2=0 a3=7ffedb4c7fcc items=0 ppid=2043 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.707000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:53:23.714280 systemd[1]: Created slice kubepods.slice. Oct 2 19:53:23.721362 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:53:23.725120 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:53:23.728000 audit[2073]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.728000 audit[2073]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe28b4e220 a2=0 a3=7ffe28b4e20c items=0 ppid=2043 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:53:23.730857 kubelet[2043]: I1002 19:53:23.730843 2043 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:53:23.730000 audit[2043]: AVC avc: denied { mac_admin } for pid=2043 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:23.730000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:23.730000 audit[2043]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00125b3e0 a1=c00124f800 a2=c00125b3b0 a3=25 items=0 ppid=1 pid=2043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.730000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:23.732630 kubelet[2043]: I1002 19:53:23.732605 2043 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:53:23.732913 kubelet[2043]: I1002 19:53:23.732902 2043 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:53:23.733996 kubelet[2043]: E1002 19:53:23.733968 2043 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-8915d29de4\" not found" Oct 2 19:53:23.733000 audit[2074]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.733000 audit[2074]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff72a351d0 a2=0 a3=7fff72a351bc items=0 ppid=2043 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:53:23.734000 audit[2075]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.734000 audit[2075]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2e8ae5b0 a2=0 a3=7ffe2e8ae59c items=0 ppid=2043 pid=2075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.734000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:53:23.737000 audit[2077]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.737000 audit[2077]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffca6ef40e0 a2=0 a3=7ffca6ef40cc items=0 ppid=2043 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:53:23.739000 audit[2079]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.739000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffcc70cb8b0 a2=0 a3=7ffcc70cb89c items=0 ppid=2043 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.739000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:53:23.741000 audit[2081]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.741000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffce4bfdf00 a2=0 a3=7ffce4bfdeec items=0 ppid=2043 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:53:23.743000 audit[2083]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.743000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffe13ebd210 a2=0 a3=7ffe13ebd1fc items=0 ppid=2043 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.743000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:53:23.746000 audit[2085]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=2085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.746000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffccd41fd70 a2=0 a3=7ffccd41fd5c items=0 ppid=2043 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:53:23.747699 kubelet[2043]: I1002 19:53:23.747688 2043 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:53:23.747000 audit[2086]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.747000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffefadecc0 a2=0 a3=7fffefadecac items=0 ppid=2043 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:23.749373 kubelet[2043]: I1002 19:53:23.749355 2043 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.748000 audit[2087]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.748000 audit[2087]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff4150ce30 a2=0 a3=7fff4150ce1c items=0 ppid=2043 pid=2087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:23.750101 kubelet[2043]: E1002 19:53:23.750089 2043 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.749000 audit[2088]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.749000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff7ce385e0 a2=0 a3=7fff7ce385cc items=0 ppid=2043 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:53:23.750000 audit[2089]: NETFILTER_CFG table=nat:48 family=2 entries=1 op=nft_register_chain pid=2089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.750000 audit[2089]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3d13bd40 a2=0 a3=7ffc3d13bd2c items=0 ppid=2043 pid=2089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:23.752000 audit[2091]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:23.752000 audit[2091]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb043ff70 a2=0 a3=7fffb043ff5c items=0 ppid=2043 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:23.753000 audit[2092]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_rule pid=2092 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.753000 audit[2092]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe1cde02e0 a2=0 a3=7ffe1cde02cc items=0 ppid=2043 pid=2092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.753000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:53:23.754000 audit[2093]: NETFILTER_CFG table=filter:51 family=10 entries=2 op=nft_register_chain pid=2093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.754000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7fff5b5909e0 a2=0 a3=7fff5b5909cc items=0 ppid=2043 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.754000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:53:23.756000 audit[2095]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.756000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd53593250 a2=0 a3=7ffd5359323c items=0 ppid=2043 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.756000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:53:23.757000 audit[2096]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2096 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.757000 audit[2096]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff17d32d10 a2=0 a3=7fff17d32cfc items=0 ppid=2043 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:53:23.758000 audit[2097]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_chain pid=2097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.758000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee2e2c700 a2=0 a3=7ffee2e2c6ec items=0 ppid=2043 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:53:23.760000 audit[2099]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.760000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff2e1ca3d0 a2=0 a3=7fff2e1ca3bc items=0 ppid=2043 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.760000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:53:23.762000 audit[2101]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=2101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.762000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcd47c83e0 a2=0 a3=7ffcd47c83cc items=0 ppid=2043 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:53:23.764000 audit[2103]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.764000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffdfd2f22c0 a2=0 a3=7ffdfd2f22ac items=0 ppid=2043 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.764000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:53:23.766000 audit[2105]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.766000 audit[2105]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fff9f6037b0 a2=0 a3=7fff9f60379c items=0 ppid=2043 pid=2105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:53:23.769000 audit[2107]: NETFILTER_CFG table=nat:59 family=10 entries=1 op=nft_register_rule pid=2107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.769000 audit[2107]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffcefefb6d0 a2=0 a3=7ffcefefb6bc items=0 ppid=2043 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.769000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:53:23.771009 kubelet[2043]: I1002 19:53:23.770975 2043 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:53:23.771091 kubelet[2043]: I1002 19:53:23.771084 2043 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:53:23.771251 kubelet[2043]: I1002 19:53:23.771240 2043 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:53:23.771420 kubelet[2043]: E1002 19:53:23.771409 2043 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:53:23.772109 kubelet[2043]: W1002 19:53:23.772063 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.772411 kubelet[2043]: E1002 19:53:23.772399 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.771000 audit[2108]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.771000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe0d86a540 a2=0 a3=7ffe0d86a52c items=0 ppid=2043 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.771000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:23.772000 audit[2109]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.772000 audit[2109]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc86f1cc0 a2=0 a3=7ffdc86f1cac items=0 ppid=2043 pid=2109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:23.773000 audit[2110]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:23.773000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe92f9bc0 a2=0 a3=7fffe92f9bac items=0 ppid=2043 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:23.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:23.847667 kubelet[2043]: E1002 19:53:23.847619 2043 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8915d29de4?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:23.873707 kubelet[2043]: I1002 19:53:23.872023 2043 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:23.874941 kubelet[2043]: I1002 19:53:23.874916 2043 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:23.878082 kubelet[2043]: I1002 19:53:23.878061 2043 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:23.881017 kubelet[2043]: I1002 19:53:23.878801 2043 status_manager.go:698] "Failed to get status for pod" podUID=c96c6428304375deecbca3e23f6d0a49 pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-8915d29de4\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 19:53:23.882379 kubelet[2043]: I1002 19:53:23.882216 2043 status_manager.go:698] "Failed to get status for pod" podUID=aa6305af4e140f54f9f33513c3915253 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-8915d29de4\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 19:53:23.885486 systemd[1]: Created slice kubepods-burstable-podc96c6428304375deecbca3e23f6d0a49.slice. Oct 2 19:53:23.889702 kubelet[2043]: I1002 19:53:23.889679 2043 status_manager.go:698] "Failed to get status for pod" podUID=617d5b0f9b08c30cad3b5b9aa2ab710a pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-8915d29de4\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 19:53:23.895344 systemd[1]: Created slice kubepods-burstable-podaa6305af4e140f54f9f33513c3915253.slice. Oct 2 19:53:23.899727 systemd[1]: Created slice kubepods-burstable-pod617d5b0f9b08c30cad3b5b9aa2ab710a.slice. Oct 2 19:53:23.949933 kubelet[2043]: I1002 19:53:23.949882 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.949933 kubelet[2043]: I1002 19:53:23.949935 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950168 kubelet[2043]: I1002 19:53:23.949966 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950168 kubelet[2043]: I1002 19:53:23.950009 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950168 kubelet[2043]: I1002 19:53:23.950039 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950168 kubelet[2043]: I1002 19:53:23.950068 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950168 kubelet[2043]: I1002 19:53:23.950097 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/617d5b0f9b08c30cad3b5b9aa2ab710a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-8915d29de4\" (UID: \"617d5b0f9b08c30cad3b5b9aa2ab710a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950433 kubelet[2043]: I1002 19:53:23.950121 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.950433 kubelet[2043]: I1002 19:53:23.950152 2043 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.951861 kubelet[2043]: I1002 19:53:23.951835 2043 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:23.952220 kubelet[2043]: E1002 19:53:23.952198 2043 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:24.195656 env[1300]: time="2023-10-02T19:53:24.195589534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-8915d29de4,Uid:c96c6428304375deecbca3e23f6d0a49,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:24.198168 env[1300]: time="2023-10-02T19:53:24.198126299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-8915d29de4,Uid:aa6305af4e140f54f9f33513c3915253,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:24.202888 env[1300]: time="2023-10-02T19:53:24.202848521Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-8915d29de4,Uid:617d5b0f9b08c30cad3b5b9aa2ab710a,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:24.248682 kubelet[2043]: E1002 19:53:24.248636 2043 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8915d29de4?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.355016 kubelet[2043]: I1002 19:53:24.354913 2043 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:24.355524 kubelet[2043]: E1002 19:53:24.355389 2043 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:24.466636 kubelet[2043]: W1002 19:53:24.466426 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.466636 kubelet[2043]: E1002 19:53:24.466510 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.646213 kubelet[2043]: W1002 19:53:24.646164 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.646213 kubelet[2043]: E1002 19:53:24.646215 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.794305 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1237943104.mount: Deactivated successfully. Oct 2 19:53:24.836781 env[1300]: time="2023-10-02T19:53:24.836719964Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.842193 env[1300]: time="2023-10-02T19:53:24.842134404Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.853299 kubelet[2043]: W1002 19:53:24.853198 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8915d29de4&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.853477 kubelet[2043]: E1002 19:53:24.853307 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-8915d29de4&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:24.853647 env[1300]: time="2023-10-02T19:53:24.853611400Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.859623 env[1300]: time="2023-10-02T19:53:24.859580154Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.865821 env[1300]: time="2023-10-02T19:53:24.865778114Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.868833 env[1300]: time="2023-10-02T19:53:24.868797592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.873114 env[1300]: time="2023-10-02T19:53:24.873079802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.876043 env[1300]: time="2023-10-02T19:53:24.875995177Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.878826 env[1300]: time="2023-10-02T19:53:24.878795149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.887520 env[1300]: time="2023-10-02T19:53:24.887466573Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.911816 env[1300]: time="2023-10-02T19:53:24.911776300Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:24.958032 env[1300]: time="2023-10-02T19:53:24.957947190Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:25.025760 env[1300]: time="2023-10-02T19:53:25.017679820Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:25.025760 env[1300]: time="2023-10-02T19:53:25.017731621Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:25.025760 env[1300]: time="2023-10-02T19:53:25.017746121Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:25.025760 env[1300]: time="2023-10-02T19:53:25.021157707Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee pid=2119 runtime=io.containerd.runc.v2 Oct 2 19:53:25.034307 env[1300]: time="2023-10-02T19:53:25.034229535Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:25.034528 env[1300]: time="2023-10-02T19:53:25.034495742Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:25.037947 env[1300]: time="2023-10-02T19:53:25.034592844Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:25.037947 env[1300]: time="2023-10-02T19:53:25.034739848Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd pid=2139 runtime=io.containerd.runc.v2 Oct 2 19:53:25.050003 systemd[1]: Started cri-containerd-e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee.scope. Oct 2 19:53:25.057716 kubelet[2043]: E1002 19:53:25.051727 2043 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8915d29de4?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:25.057716 kubelet[2043]: W1002 19:53:25.057342 2043 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:25.057716 kubelet[2043]: E1002 19:53:25.057471 2043 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 19:53:25.065978 systemd[1]: Started cri-containerd-4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd.scope. Oct 2 19:53:25.079312 env[1300]: time="2023-10-02T19:53:25.079239065Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:25.079470 env[1300]: time="2023-10-02T19:53:25.079334667Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:25.079470 env[1300]: time="2023-10-02T19:53:25.079365668Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:25.079642 env[1300]: time="2023-10-02T19:53:25.079600174Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e8a698d12e970082f25f856559b9e0696ee291443f88b4029e747d3f94e818b7 pid=2184 runtime=io.containerd.runc.v2 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.085000 audit: BPF prog-id=68 op=LOAD Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2119 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613133623131373861616564663237653338656337626466633562 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2119 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613133623131373861616564663237653338656337626466633562 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit: BPF prog-id=69 op=LOAD Oct 2 19:53:25.086000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003e2b60 items=0 ppid=2119 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613133623131373861616564663237653338656337626466633562 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit: BPF prog-id=70 op=LOAD Oct 2 19:53:25.086000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003e2ba8 items=0 ppid=2119 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613133623131373861616564663237653338656337626466633562 Oct 2 19:53:25.086000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:53:25.086000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { perfmon } for pid=2131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit[2131]: AVC avc: denied { bpf } for pid=2131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.086000 audit: BPF prog-id=71 op=LOAD Oct 2 19:53:25.086000 audit[2131]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e2fb8 items=0 ppid=2119 pid=2131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536613133623131373861616564663237653338656337626466633562 Oct 2 19:53:25.104052 systemd[1]: Started cri-containerd-e8a698d12e970082f25f856559b9e0696ee291443f88b4029e747d3f94e818b7.scope. Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.110000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit: BPF prog-id=72 op=LOAD Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2139 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303431373232313562303539353538626638386239383636396664 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2139 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303431373232313562303539353538626638386239383636396664 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit: BPF prog-id=73 op=LOAD Oct 2 19:53:25.111000 audit[2153]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c6db0 items=0 ppid=2139 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303431373232313562303539353538626638386239383636396664 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit: BPF prog-id=74 op=LOAD Oct 2 19:53:25.111000 audit[2153]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c6df8 items=0 ppid=2139 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303431373232313562303539353538626638386239383636396664 Oct 2 19:53:25.111000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:53:25.111000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { perfmon } for pid=2153 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit[2153]: AVC avc: denied { bpf } for pid=2153 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.111000 audit: BPF prog-id=75 op=LOAD Oct 2 19:53:25.111000 audit[2153]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c7208 items=0 ppid=2139 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.111000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430303431373232313562303539353538626638386239383636396664 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit: BPF prog-id=76 op=LOAD Oct 2 19:53:25.132000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.132000 audit[2195]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2184 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538613639386431326539373030383266323566383536353539623965 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=2184 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538613639386431326539373030383266323566383536353539623965 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit: BPF prog-id=77 op=LOAD Oct 2 19:53:25.133000 audit[2195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c000305810 items=0 ppid=2184 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538613639386431326539373030383266323566383536353539623965 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit: BPF prog-id=78 op=LOAD Oct 2 19:53:25.133000 audit[2195]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c000305858 items=0 ppid=2184 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538613639386431326539373030383266323566383536353539623965 Oct 2 19:53:25.133000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:53:25.133000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { perfmon } for pid=2195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit[2195]: AVC avc: denied { bpf } for pid=2195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.133000 audit: BPF prog-id=79 op=LOAD Oct 2 19:53:25.133000 audit[2195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c000305c68 items=0 ppid=2184 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538613639386431326539373030383266323566383536353539623965 Oct 2 19:53:25.155154 env[1300]: time="2023-10-02T19:53:25.154974566Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-8915d29de4,Uid:aa6305af4e140f54f9f33513c3915253,Namespace:kube-system,Attempt:0,} returns sandbox id \"4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd\"" Oct 2 19:53:25.157721 kubelet[2043]: I1002 19:53:25.157687 2043 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:25.158175 kubelet[2043]: E1002 19:53:25.158153 2043 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:25.163266 env[1300]: time="2023-10-02T19:53:25.163223173Z" level=info msg="CreateContainer within sandbox \"4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:53:25.190778 env[1300]: time="2023-10-02T19:53:25.190725863Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-8915d29de4,Uid:c96c6428304375deecbca3e23f6d0a49,Namespace:kube-system,Attempt:0,} returns sandbox id \"e8a698d12e970082f25f856559b9e0696ee291443f88b4029e747d3f94e818b7\"" Oct 2 19:53:25.193351 env[1300]: time="2023-10-02T19:53:25.193311428Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-8915d29de4,Uid:617d5b0f9b08c30cad3b5b9aa2ab710a,Namespace:kube-system,Attempt:0,} returns sandbox id \"e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee\"" Oct 2 19:53:25.197526 env[1300]: time="2023-10-02T19:53:25.197155325Z" level=info msg="CreateContainer within sandbox \"e8a698d12e970082f25f856559b9e0696ee291443f88b4029e747d3f94e818b7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:53:25.198171 env[1300]: time="2023-10-02T19:53:25.198138850Z" level=info msg="CreateContainer within sandbox \"e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:53:25.240390 env[1300]: time="2023-10-02T19:53:25.240333809Z" level=info msg="CreateContainer within sandbox \"4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591\"" Oct 2 19:53:25.241380 env[1300]: time="2023-10-02T19:53:25.241343634Z" level=info msg="StartContainer for \"0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591\"" Oct 2 19:53:25.260233 systemd[1]: Started cri-containerd-0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591.scope. Oct 2 19:53:25.277162 env[1300]: time="2023-10-02T19:53:25.277112332Z" level=info msg="CreateContainer within sandbox \"e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0\"" Oct 2 19:53:25.277793 env[1300]: time="2023-10-02T19:53:25.277659546Z" level=info msg="StartContainer for \"090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0\"" Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.278000 audit: BPF prog-id=80 op=LOAD Oct 2 19:53:25.279000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.279000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2139 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039363261343061636162343366376464303765393364636230333635 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2139 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039363261343061636162343366376464303765393364636230333635 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.280000 audit: BPF prog-id=81 op=LOAD Oct 2 19:53:25.280000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003bcaf0 items=0 ppid=2139 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039363261343061636162343366376464303765393364636230333635 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit: BPF prog-id=82 op=LOAD Oct 2 19:53:25.281000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003bcb38 items=0 ppid=2139 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039363261343061636162343366376464303765393364636230333635 Oct 2 19:53:25.281000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:53:25.281000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { perfmon } for pid=2253 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit[2253]: AVC avc: denied { bpf } for pid=2253 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.281000 audit: BPF prog-id=83 op=LOAD Oct 2 19:53:25.281000 audit[2253]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003bcf48 items=0 ppid=2139 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039363261343061636162343366376464303765393364636230333635 Oct 2 19:53:25.291933 env[1300]: time="2023-10-02T19:53:25.291896103Z" level=info msg="CreateContainer within sandbox \"e8a698d12e970082f25f856559b9e0696ee291443f88b4029e747d3f94e818b7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d5dbda72429d8ac5686013f7db16f9980ad46fedd4d38eca1275a4ca639a1b95\"" Oct 2 19:53:25.292552 env[1300]: time="2023-10-02T19:53:25.292526819Z" level=info msg="StartContainer for \"d5dbda72429d8ac5686013f7db16f9980ad46fedd4d38eca1275a4ca639a1b95\"" Oct 2 19:53:25.319009 systemd[1]: Started cri-containerd-090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0.scope. Oct 2 19:53:25.336209 systemd[1]: Started cri-containerd-d5dbda72429d8ac5686013f7db16f9980ad46fedd4d38eca1275a4ca639a1b95.scope. Oct 2 19:53:25.357349 env[1300]: time="2023-10-02T19:53:25.357300545Z" level=info msg="StartContainer for \"0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591\" returns successfully" Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.361000 audit: BPF prog-id=84 op=LOAD Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2184 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646264613732343239643861633536383630313366376462313666 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2184 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646264613732343239643861633536383630313366376462313666 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit: BPF prog-id=85 op=LOAD Oct 2 19:53:25.362000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d2520 items=0 ppid=2184 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646264613732343239643861633536383630313366376462313666 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit: BPF prog-id=86 op=LOAD Oct 2 19:53:25.362000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d2568 items=0 ppid=2184 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646264613732343239643861633536383630313366376462313666 Oct 2 19:53:25.362000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:53:25.362000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { perfmon } for pid=2290 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit[2290]: AVC avc: denied { bpf } for pid=2290 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.362000 audit: BPF prog-id=87 op=LOAD Oct 2 19:53:25.362000 audit[2290]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d2978 items=0 ppid=2184 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435646264613732343239643861633536383630313366376462313666 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.373000 audit: BPF prog-id=88 op=LOAD Oct 2 19:53:25.374000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.374000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2119 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303031356631633666626563656431643966366334613734316136 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2119 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303031356631633666626563656431643966366334613734316136 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.375000 audit: BPF prog-id=89 op=LOAD Oct 2 19:53:25.375000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028c360 items=0 ppid=2119 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303031356631633666626563656431643966366334613734316136 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.376000 audit: BPF prog-id=90 op=LOAD Oct 2 19:53:25.376000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028c3a8 items=0 ppid=2119 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303031356631633666626563656431643966366334613734316136 Oct 2 19:53:25.377000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:53:25.377000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:25.377000 audit: BPF prog-id=91 op=LOAD Oct 2 19:53:25.377000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028c7b8 items=0 ppid=2119 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:25.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303031356631633666626563656431643966366334613734316136 Oct 2 19:53:25.428543 env[1300]: time="2023-10-02T19:53:25.428486032Z" level=info msg="StartContainer for \"d5dbda72429d8ac5686013f7db16f9980ad46fedd4d38eca1275a4ca639a1b95\" returns successfully" Oct 2 19:53:25.443163 env[1300]: time="2023-10-02T19:53:25.443116199Z" level=info msg="StartContainer for \"090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0\" returns successfully" Oct 2 19:53:26.760011 kubelet[2043]: I1002 19:53:26.759970 2043 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:26.999023 kernel: kauditd_printk_skb: 624 callbacks suppressed Oct 2 19:53:26.999161 kernel: audit: type=1400 audit(1696276406.992:719): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:26.992000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:26.992000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00075b1d0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:27.046019 kernel: audit: type=1300 audit(1696276406.992:719): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00075b1d0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:26.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:27.068013 kernel: audit: type=1327 audit(1696276406.992:719): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:27.068155 kernel: audit: type=1400 audit(1696276407.020:720): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:27.020000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:27.020000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00025cf60 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:27.109506 kernel: audit: type=1300 audit(1696276407.020:720): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00025cf60 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:27.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:27.128126 kernel: audit: type=1327 audit(1696276407.020:720): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:28.285000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.306012 kernel: audit: type=1400 audit(1696276408.285:721): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.285000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000e3c5a0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.334013 kernel: audit: type=1300 audit(1696276408.285:721): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000e3c5a0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.365620 kernel: audit: type=1327 audit(1696276408.285:721): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.285000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.285000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0010da820 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.285000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.285000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c000e3cba0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.310000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.310000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0010e3f50 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.388011 kernel: audit: type=1400 audit(1696276408.285:722): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.310000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.310000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c001f122c0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.310000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:28.310000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00249c120 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:53:28.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:28.512003 kubelet[2043]: I1002 19:53:28.511947 2043 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:28.512558 kubelet[2043]: E1002 19:53:28.512537 2043 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-8915d29de4\" not found" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:28.639869 kubelet[2043]: I1002 19:53:28.639836 2043 apiserver.go:52] "Watching apiserver" Oct 2 19:53:28.648833 kubelet[2043]: I1002 19:53:28.648788 2043 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:53:28.679022 kubelet[2043]: I1002 19:53:28.678953 2043 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:53:29.031839 kubelet[2043]: E1002 19:53:29.031608 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266dfb1c576", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 637568886, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 637568886, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.087154 kubelet[2043]: E1002 19:53:29.087051 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e035773f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 646199615, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 646199615, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.140459 kubelet[2043]: E1002 19:53:29.140358 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34ca360", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698049888, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698049888, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.194345 kubelet[2043]: E1002 19:53:29.194239 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34cb4f4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698054388, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698054388, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.247695 kubelet[2043]: E1002 19:53:29.247601 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34cbfe4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698057188, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698057188, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.302901 kubelet[2043]: E1002 19:53:29.301923 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e5599a6f", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 732453999, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 732453999, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.358722 kubelet[2043]: E1002 19:53:29.358625 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34ca360", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698049888, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 749317346, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.418364 kubelet[2043]: E1002 19:53:29.418231 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34cb4f4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698054388, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 749322946, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.476429 kubelet[2043]: E1002 19:53:29.476299 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34cbfe4", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698057188, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 749326246, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:29.762743 kubelet[2043]: E1002 19:53:29.762606 2043 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-8915d29de4.178a6266e34ca360", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-8915d29de4", UID:"ci-3510.3.0-a-8915d29de4", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-8915d29de4 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 698049888, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 23, 874801269, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:53:31.349805 systemd[1]: Reloading. Oct 2 19:53:31.437274 /usr/lib/systemd/system-generators/torcx-generator[2376]: time="2023-10-02T19:53:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:31.451107 /usr/lib/systemd/system-generators/torcx-generator[2376]: time="2023-10-02T19:53:31Z" level=info msg="torcx already run" Oct 2 19:53:31.532347 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:31.532367 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:31.551505 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit: BPF prog-id=92 op=LOAD Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.631000 audit: BPF prog-id=93 op=LOAD Oct 2 19:53:31.631000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:53:31.631000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit: BPF prog-id=94 op=LOAD Oct 2 19:53:31.633000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.633000 audit: BPF prog-id=95 op=LOAD Oct 2 19:53:31.633000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.635000 audit: BPF prog-id=96 op=LOAD Oct 2 19:53:31.635000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit: BPF prog-id=97 op=LOAD Oct 2 19:53:31.636000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit: BPF prog-id=98 op=LOAD Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.636000 audit: BPF prog-id=99 op=LOAD Oct 2 19:53:31.636000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:53:31.636000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.637000 audit: BPF prog-id=100 op=LOAD Oct 2 19:53:31.637000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.639000 audit: BPF prog-id=101 op=LOAD Oct 2 19:53:31.639000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.640000 audit: BPF prog-id=102 op=LOAD Oct 2 19:53:31.640000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.642000 audit: BPF prog-id=103 op=LOAD Oct 2 19:53:31.642000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit: BPF prog-id=104 op=LOAD Oct 2 19:53:31.644000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit: BPF prog-id=105 op=LOAD Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.644000 audit: BPF prog-id=106 op=LOAD Oct 2 19:53:31.644000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:53:31.644000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.645000 audit: BPF prog-id=107 op=LOAD Oct 2 19:53:31.645000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.648000 audit: BPF prog-id=108 op=LOAD Oct 2 19:53:31.648000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.649000 audit: BPF prog-id=109 op=LOAD Oct 2 19:53:31.649000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit: BPF prog-id=110 op=LOAD Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.650000 audit: BPF prog-id=111 op=LOAD Oct 2 19:53:31.650000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:53:31.650000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.652000 audit: BPF prog-id=112 op=LOAD Oct 2 19:53:31.652000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:53:31.670824 kubelet[2043]: I1002 19:53:31.670165 2043 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:31.670314 systemd[1]: Stopping kubelet.service... Oct 2 19:53:31.685613 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:53:31.685981 systemd[1]: Stopped kubelet.service. Oct 2 19:53:31.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:31.688239 systemd[1]: Started kubelet.service. Oct 2 19:53:31.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:31.741000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7178 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:53:31.741000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c49200 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:31.741000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:31.774961 kubelet[2438]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:31.774961 kubelet[2438]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:31.775497 kubelet[2438]: I1002 19:53:31.775028 2438 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:53:31.776399 kubelet[2438]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:31.776399 kubelet[2438]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:31.779434 kubelet[2438]: I1002 19:53:31.779417 2438 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:53:31.779522 kubelet[2438]: I1002 19:53:31.779515 2438 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:53:31.779770 kubelet[2438]: I1002 19:53:31.779757 2438 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:53:31.780974 kubelet[2438]: I1002 19:53:31.780958 2438 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:53:31.782151 kubelet[2438]: I1002 19:53:31.782132 2438 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:31.787034 kubelet[2438]: I1002 19:53:31.787018 2438 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:53:31.787285 kubelet[2438]: I1002 19:53:31.787274 2438 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:53:31.787414 kubelet[2438]: I1002 19:53:31.787403 2438 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:53:31.787531 kubelet[2438]: I1002 19:53:31.787524 2438 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:53:31.787577 kubelet[2438]: I1002 19:53:31.787572 2438 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:53:31.787653 kubelet[2438]: I1002 19:53:31.787644 2438 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:31.792506 kubelet[2438]: I1002 19:53:31.792489 2438 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:53:31.792612 kubelet[2438]: I1002 19:53:31.792603 2438 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:53:31.792711 kubelet[2438]: I1002 19:53:31.792703 2438 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:53:31.792793 kubelet[2438]: I1002 19:53:31.792780 2438 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:53:31.802634 kubelet[2438]: I1002 19:53:31.802608 2438 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:53:31.803398 kubelet[2438]: I1002 19:53:31.803382 2438 server.go:1186] "Started kubelet" Oct 2 19:53:31.804000 audit[2438]: AVC avc: denied { mac_admin } for pid=2438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.804000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:31.804000 audit[2438]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bad350 a1=c0007c9038 a2=c000bad320 a3=25 items=0 ppid=1 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:31.804000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:31.804000 audit[2438]: AVC avc: denied { mac_admin } for pid=2438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.804000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:31.804000 audit[2438]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e7d3a0 a1=c0007c9050 a2=c000bad3e0 a3=25 items=0 ppid=1 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:31.804000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:31.811787 kubelet[2438]: I1002 19:53:31.805617 2438 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:53:31.811787 kubelet[2438]: I1002 19:53:31.805665 2438 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:53:31.811787 kubelet[2438]: I1002 19:53:31.805692 2438 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:53:31.811787 kubelet[2438]: I1002 19:53:31.811393 2438 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:53:31.812188 kubelet[2438]: I1002 19:53:31.812169 2438 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:53:31.812884 kubelet[2438]: I1002 19:53:31.812862 2438 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:53:31.813142 kubelet[2438]: I1002 19:53:31.813126 2438 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:53:31.834349 kubelet[2438]: E1002 19:53:31.831938 2438 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:53:31.834912 kubelet[2438]: E1002 19:53:31.834900 2438 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:53:31.835143 kubelet[2438]: I1002 19:53:31.833048 2438 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:53:31.853577 kubelet[2438]: I1002 19:53:31.853559 2438 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:53:31.853684 kubelet[2438]: I1002 19:53:31.853678 2438 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:53:31.853734 kubelet[2438]: I1002 19:53:31.853728 2438 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:53:31.853828 kubelet[2438]: E1002 19:53:31.853822 2438 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:53:31.909168 kubelet[2438]: I1002 19:53:31.909053 2438 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:53:31.909168 kubelet[2438]: I1002 19:53:31.909090 2438 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:53:31.909168 kubelet[2438]: I1002 19:53:31.909112 2438 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:31.910222 kubelet[2438]: I1002 19:53:31.910202 2438 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:53:31.910356 kubelet[2438]: I1002 19:53:31.910347 2438 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:53:31.910423 kubelet[2438]: I1002 19:53:31.910415 2438 policy_none.go:49] "None policy: Start" Oct 2 19:53:31.911119 kubelet[2438]: I1002 19:53:31.911099 2438 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:53:31.911266 kubelet[2438]: I1002 19:53:31.911256 2438 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:53:31.911499 kubelet[2438]: I1002 19:53:31.911487 2438 state_mem.go:75] "Updated machine memory state" Oct 2 19:53:31.917822 kubelet[2438]: I1002 19:53:31.917806 2438 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:31.919705 kubelet[2438]: I1002 19:53:31.919690 2438 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:53:31.918000 audit[2438]: AVC avc: denied { mac_admin } for pid=2438 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:31.918000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:31.918000 audit[2438]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bad3e0 a1=c0007c9c80 a2=c000bad3b0 a3=25 items=0 ppid=1 pid=2438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:31.918000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:31.920470 kubelet[2438]: I1002 19:53:31.920438 2438 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:53:31.923066 kubelet[2438]: I1002 19:53:31.923049 2438 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:53:31.934185 kubelet[2438]: I1002 19:53:31.933692 2438 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:31.935867 kubelet[2438]: I1002 19:53:31.935853 2438 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-8915d29de4" Oct 2 19:53:31.954662 kubelet[2438]: I1002 19:53:31.954641 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:31.954804 kubelet[2438]: I1002 19:53:31.954730 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:31.954804 kubelet[2438]: I1002 19:53:31.954770 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:31.971905 kubelet[2438]: E1002 19:53:31.971886 2438 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.008054 kubelet[2438]: E1002 19:53:32.008019 2438 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-8915d29de4\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014353 kubelet[2438]: I1002 19:53:32.014332 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014525 kubelet[2438]: I1002 19:53:32.014513 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014643 kubelet[2438]: I1002 19:53:32.014633 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014758 kubelet[2438]: I1002 19:53:32.014749 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014853 kubelet[2438]: I1002 19:53:32.014844 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.014944 kubelet[2438]: I1002 19:53:32.014936 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.015050 kubelet[2438]: I1002 19:53:32.015041 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/617d5b0f9b08c30cad3b5b9aa2ab710a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-8915d29de4\" (UID: \"617d5b0f9b08c30cad3b5b9aa2ab710a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.015160 kubelet[2438]: I1002 19:53:32.015151 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c96c6428304375deecbca3e23f6d0a49-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" (UID: \"c96c6428304375deecbca3e23f6d0a49\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.015257 kubelet[2438]: I1002 19:53:32.015248 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/aa6305af4e140f54f9f33513c3915253-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" (UID: \"aa6305af4e140f54f9f33513c3915253\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:32.803080 kubelet[2438]: I1002 19:53:32.803029 2438 apiserver.go:52] "Watching apiserver" Oct 2 19:53:32.920538 kubelet[2438]: I1002 19:53:32.813499 2438 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:53:32.920538 kubelet[2438]: I1002 19:53:32.821633 2438 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:53:32.934000 audit[2489]: USER_ACCT pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.936066 sudo[2489]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:53:32.936268 sudo[2489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:53:32.940859 kernel: kauditd_printk_skb: 275 callbacks suppressed Oct 2 19:53:32.940927 kernel: audit: type=1101 audit(1696276412.934:977): pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.935000 audit[2489]: CRED_REFR pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.991242 kernel: audit: type=1110 audit(1696276412.935:978): pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.991329 kernel: audit: type=1105 audit(1696276412.937:979): pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.937000 audit[2489]: USER_START pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.202423 kubelet[2438]: E1002 19:53:33.202390 2438 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-8915d29de4\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:33.402115 kubelet[2438]: E1002 19:53:33.402078 2438 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-8915d29de4\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:33.488743 sudo[2489]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:33.487000 audit[2489]: USER_END pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.487000 audit[2489]: CRED_DISP pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.519411 kernel: audit: type=1106 audit(1696276413.487:980): pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.519506 kernel: audit: type=1104 audit(1696276413.487:981): pid=2489 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.614728 kubelet[2438]: E1002 19:53:33.614700 2438 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-8915d29de4\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" Oct 2 19:53:33.812717 kubelet[2438]: I1002 19:53:33.812596 2438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-8915d29de4" podStartSLOduration=2.81252469 pod.CreationTimestamp="2023-10-02 19:53:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:33.811838076 +0000 UTC m=+2.118597708" watchObservedRunningTime="2023-10-02 19:53:33.81252469 +0000 UTC m=+2.119284222" Oct 2 19:53:34.034000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.053027 kernel: audit: type=1400 audit(1696276414.034:982): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.037000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.072633 kernel: audit: type=1400 audit(1696276414.037:983): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.072729 kernel: audit: type=1300 audit(1696276414.037:983): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0003cf1a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:34.037000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0003cf1a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:34.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:34.108284 kernel: audit: type=1327 audit(1696276414.037:983): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:34.113791 kernel: audit: type=1400 audit(1696276414.037:984): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.037000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.037000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0003cf220 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:34.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:34.037000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:34.037000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0003cf2a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:34.037000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:34.034000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001357520 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:53:34.034000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:34.391226 sudo[1631]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:34.390000 audit[1631]: USER_END pid=1631 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.390000 audit[1631]: CRED_DISP pid=1631 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.490125 sshd[1589]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:34.491000 audit[1589]: USER_END pid=1589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:34.491000 audit[1589]: CRED_DISP pid=1589 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:34.494517 systemd[1]: sshd@6-10.200.8.15:22-10.200.12.6:40374.service: Deactivated successfully. Oct 2 19:53:34.495516 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:53:34.495745 systemd[1]: session-9.scope: Consumed 3.652s CPU time. Oct 2 19:53:34.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:40374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.496215 systemd-logind[1280]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:53:34.497091 systemd-logind[1280]: Removed session 9. Oct 2 19:53:34.600298 kubelet[2438]: I1002 19:53:34.600245 2438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-8915d29de4" podStartSLOduration=3.600203726 pod.CreationTimestamp="2023-10-02 19:53:31 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:34.19948917 +0000 UTC m=+2.506248802" watchObservedRunningTime="2023-10-02 19:53:34.600203726 +0000 UTC m=+2.906963358" Oct 2 19:53:38.240928 kubelet[2438]: I1002 19:53:38.240885 2438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-8915d29de4" podStartSLOduration=9.240827148 pod.CreationTimestamp="2023-10-02 19:53:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:34.600643035 +0000 UTC m=+2.907402567" watchObservedRunningTime="2023-10-02 19:53:38.240827148 +0000 UTC m=+6.547586680" Oct 2 19:53:44.936419 kubelet[2438]: I1002 19:53:44.936381 2438 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:53:44.936919 env[1300]: time="2023-10-02T19:53:44.936805276Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:53:44.937281 kubelet[2438]: I1002 19:53:44.937033 2438 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:53:45.004459 kubelet[2438]: I1002 19:53:45.004272 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:45.011623 systemd[1]: Created slice kubepods-besteffort-pod657f4b13_b03f_4498_910b_dd5721b301b3.slice. Oct 2 19:53:45.106459 kubelet[2438]: I1002 19:53:45.106410 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/657f4b13-b03f-4498-910b-dd5721b301b3-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-8dcxr\" (UID: \"657f4b13-b03f-4498-910b-dd5721b301b3\") " pod="kube-system/cilium-operator-f59cbd8c6-8dcxr" Oct 2 19:53:45.106671 kubelet[2438]: I1002 19:53:45.106524 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5m9q9\" (UniqueName: \"kubernetes.io/projected/657f4b13-b03f-4498-910b-dd5721b301b3-kube-api-access-5m9q9\") pod \"cilium-operator-f59cbd8c6-8dcxr\" (UID: \"657f4b13-b03f-4498-910b-dd5721b301b3\") " pod="kube-system/cilium-operator-f59cbd8c6-8dcxr" Oct 2 19:53:45.132208 kubelet[2438]: I1002 19:53:45.132167 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:45.138859 systemd[1]: Created slice kubepods-besteffort-pod205762c8_2d04_4dc1_9411_4e4c796a759a.slice. Oct 2 19:53:45.163525 kubelet[2438]: I1002 19:53:45.163482 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:53:45.175871 systemd[1]: Created slice kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice. Oct 2 19:53:45.207283 kubelet[2438]: I1002 19:53:45.207168 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-run\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207283 kubelet[2438]: I1002 19:53:45.207211 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-cgroup\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207283 kubelet[2438]: I1002 19:53:45.207238 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cni-path\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207283 kubelet[2438]: I1002 19:53:45.207265 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-lib-modules\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207571 kubelet[2438]: I1002 19:53:45.207300 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-net\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207571 kubelet[2438]: I1002 19:53:45.207328 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8psr4\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-kube-api-access-8psr4\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207571 kubelet[2438]: I1002 19:53:45.207354 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-bpf-maps\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207571 kubelet[2438]: I1002 19:53:45.207378 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hostproc\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207571 kubelet[2438]: I1002 19:53:45.207404 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8w9wh\" (UniqueName: \"kubernetes.io/projected/205762c8-2d04-4dc1-9411-4e4c796a759a-kube-api-access-8w9wh\") pod \"kube-proxy-9csns\" (UID: \"205762c8-2d04-4dc1-9411-4e4c796a759a\") " pod="kube-system/kube-proxy-9csns" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207448 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-clustermesh-secrets\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207476 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/205762c8-2d04-4dc1-9411-4e4c796a759a-kube-proxy\") pod \"kube-proxy-9csns\" (UID: \"205762c8-2d04-4dc1-9411-4e4c796a759a\") " pod="kube-system/kube-proxy-9csns" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207507 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-xtables-lock\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207537 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hubble-tls\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207589 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-kernel\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.207784 kubelet[2438]: I1002 19:53:45.207622 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-etc-cni-netd\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.208051 kubelet[2438]: I1002 19:53:45.207654 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/205762c8-2d04-4dc1-9411-4e4c796a759a-xtables-lock\") pod \"kube-proxy-9csns\" (UID: \"205762c8-2d04-4dc1-9411-4e4c796a759a\") " pod="kube-system/kube-proxy-9csns" Oct 2 19:53:45.208051 kubelet[2438]: I1002 19:53:45.207683 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-config-path\") pod \"cilium-d2jhr\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " pod="kube-system/cilium-d2jhr" Oct 2 19:53:45.208051 kubelet[2438]: I1002 19:53:45.207737 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/205762c8-2d04-4dc1-9411-4e4c796a759a-lib-modules\") pod \"kube-proxy-9csns\" (UID: \"205762c8-2d04-4dc1-9411-4e4c796a759a\") " pod="kube-system/kube-proxy-9csns" Oct 2 19:53:45.620979 env[1300]: time="2023-10-02T19:53:45.620856482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-8dcxr,Uid:657f4b13-b03f-4498-910b-dd5721b301b3,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:45.669924 env[1300]: time="2023-10-02T19:53:45.669844525Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:45.670158 env[1300]: time="2023-10-02T19:53:45.669910226Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:45.670158 env[1300]: time="2023-10-02T19:53:45.670139130Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:45.670504 env[1300]: time="2023-10-02T19:53:45.670457134Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a pid=2533 runtime=io.containerd.runc.v2 Oct 2 19:53:45.684681 systemd[1]: Started cri-containerd-033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a.scope. Oct 2 19:53:45.717046 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 2 19:53:45.717181 kernel: audit: type=1400 audit(1696276425.698:991): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.730064 kernel: audit: type=1400 audit(1696276425.698:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.756204 kernel: audit: type=1400 audit(1696276425.698:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.756305 kernel: audit: type=1400 audit(1696276425.698:994): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.782120 kernel: audit: type=1400 audit(1696276425.698:995): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.782351 kernel: audit: type=1400 audit(1696276425.698:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.782392 kernel: audit: type=1400 audit(1696276425.698:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.806899 kernel: audit: type=1400 audit(1696276425.698:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.834151 kernel: audit: type=1400 audit(1696276425.698:999): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.834244 kernel: audit: type=1400 audit(1696276425.729:1000): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit: BPF prog-id=113 op=LOAD Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2533 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:45.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033336332346433623865316336306638666533653931353163623130 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2533 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:45.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033336332346433623865316336306638666533653931353163623130 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.729000 audit: BPF prog-id=114 op=LOAD Oct 2 19:53:45.729000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d5440 items=0 ppid=2533 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:45.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033336332346433623865316336306638666533653931353163623130 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.742000 audit: BPF prog-id=115 op=LOAD Oct 2 19:53:45.742000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d5488 items=0 ppid=2533 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:45.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033336332346433623865316336306638666533653931353163623130 Oct 2 19:53:45.755000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:53:45.755000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:45.755000 audit: BPF prog-id=116 op=LOAD Oct 2 19:53:45.755000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d5898 items=0 ppid=2533 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:45.755000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033336332346433623865316336306638666533653931353163623130 Oct 2 19:53:45.842193 env[1300]: time="2023-10-02T19:53:45.842148040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-8dcxr,Uid:657f4b13-b03f-4498-910b-dd5721b301b3,Namespace:kube-system,Attempt:0,} returns sandbox id \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\"" Oct 2 19:53:45.845208 env[1300]: time="2023-10-02T19:53:45.844268572Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:53:46.043914 env[1300]: time="2023-10-02T19:53:46.043868487Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9csns,Uid:205762c8-2d04-4dc1-9411-4e4c796a759a,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:46.079490 env[1300]: time="2023-10-02T19:53:46.079442014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-d2jhr,Uid:233eaaeb-c23c-4b7a-a377-fd062c18f6c9,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:46.094417 env[1300]: time="2023-10-02T19:53:46.094345335Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:46.094417 env[1300]: time="2023-10-02T19:53:46.094383836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:46.094417 env[1300]: time="2023-10-02T19:53:46.094398736Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:46.094879 env[1300]: time="2023-10-02T19:53:46.094815842Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45dc72eb88d3ddb735912aeba02e04b9452f40609a6f2add3120e54e09c6b862 pid=2577 runtime=io.containerd.runc.v2 Oct 2 19:53:46.108486 systemd[1]: Started cri-containerd-45dc72eb88d3ddb735912aeba02e04b9452f40609a6f2add3120e54e09c6b862.scope. Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.120000 audit: BPF prog-id=117 op=LOAD Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2577 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435646337326562383864336464623733353931326165626130326530 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=2577 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435646337326562383864336464623733353931326165626130326530 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit: BPF prog-id=118 op=LOAD Oct 2 19:53:46.121000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0000996b0 items=0 ppid=2577 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435646337326562383864336464623733353931326165626130326530 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit: BPF prog-id=119 op=LOAD Oct 2 19:53:46.121000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0000996f8 items=0 ppid=2577 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435646337326562383864336464623733353931326165626130326530 Oct 2 19:53:46.121000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:53:46.121000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { perfmon } for pid=2587 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit[2587]: AVC avc: denied { bpf } for pid=2587 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.121000 audit: BPF prog-id=120 op=LOAD Oct 2 19:53:46.121000 audit[2587]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000099b08 items=0 ppid=2577 pid=2587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435646337326562383864336464623733353931326165626130326530 Oct 2 19:53:46.141486 env[1300]: time="2023-10-02T19:53:46.141438934Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9csns,Uid:205762c8-2d04-4dc1-9411-4e4c796a759a,Namespace:kube-system,Attempt:0,} returns sandbox id \"45dc72eb88d3ddb735912aeba02e04b9452f40609a6f2add3120e54e09c6b862\"" Oct 2 19:53:46.145203 env[1300]: time="2023-10-02T19:53:46.145044087Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:46.145203 env[1300]: time="2023-10-02T19:53:46.145110388Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:46.145203 env[1300]: time="2023-10-02T19:53:46.145125688Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:46.146673 env[1300]: time="2023-10-02T19:53:46.146597610Z" level=info msg="CreateContainer within sandbox \"45dc72eb88d3ddb735912aeba02e04b9452f40609a6f2add3120e54e09c6b862\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:53:46.149911 env[1300]: time="2023-10-02T19:53:46.147036717Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07 pid=2619 runtime=io.containerd.runc.v2 Oct 2 19:53:46.162405 systemd[1]: Started cri-containerd-4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07.scope. Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.177000 audit: BPF prog-id=121 op=LOAD Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2619 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336637313934633532333463323061333237623830373561393234 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=2619 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336637313934633532333463323061333237623830373561393234 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit: BPF prog-id=122 op=LOAD Oct 2 19:53:46.178000 audit[2629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000210360 items=0 ppid=2619 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336637313934633532333463323061333237623830373561393234 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.178000 audit: BPF prog-id=123 op=LOAD Oct 2 19:53:46.178000 audit[2629]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0002103a8 items=0 ppid=2619 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336637313934633532333463323061333237623830373561393234 Oct 2 19:53:46.179000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:53:46.179000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { perfmon } for pid=2629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit[2629]: AVC avc: denied { bpf } for pid=2629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.179000 audit: BPF prog-id=124 op=LOAD Oct 2 19:53:46.179000 audit[2629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0002107b8 items=0 ppid=2619 pid=2629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336637313934633532333463323061333237623830373561393234 Oct 2 19:53:46.195219 env[1300]: time="2023-10-02T19:53:46.195177030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-d2jhr,Uid:233eaaeb-c23c-4b7a-a377-fd062c18f6c9,Namespace:kube-system,Attempt:0,} returns sandbox id \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\"" Oct 2 19:53:46.203839 env[1300]: time="2023-10-02T19:53:46.203804258Z" level=info msg="CreateContainer within sandbox \"45dc72eb88d3ddb735912aeba02e04b9452f40609a6f2add3120e54e09c6b862\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"9ee6eb606709a4cef3f13f3a8684072fa9f9a578b261235b9a1844667e82fb48\"" Oct 2 19:53:46.204612 env[1300]: time="2023-10-02T19:53:46.204585970Z" level=info msg="StartContainer for \"9ee6eb606709a4cef3f13f3a8684072fa9f9a578b261235b9a1844667e82fb48\"" Oct 2 19:53:46.231696 systemd[1]: Started cri-containerd-9ee6eb606709a4cef3f13f3a8684072fa9f9a578b261235b9a1844667e82fb48.scope. Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2577 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653665623630363730396134636566336631336633613836383430 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit: BPF prog-id=125 op=LOAD Oct 2 19:53:46.249000 audit[2660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00026bc70 items=0 ppid=2577 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653665623630363730396134636566336631336633613836383430 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit: BPF prog-id=126 op=LOAD Oct 2 19:53:46.249000 audit[2660]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00026bcb8 items=0 ppid=2577 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653665623630363730396134636566336631336633613836383430 Oct 2 19:53:46.249000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:53:46.249000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { perfmon } for pid=2660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit[2660]: AVC avc: denied { bpf } for pid=2660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:46.249000 audit: BPF prog-id=127 op=LOAD Oct 2 19:53:46.249000 audit[2660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00026bd48 items=0 ppid=2577 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653665623630363730396134636566336631336633613836383430 Oct 2 19:53:46.270503 env[1300]: time="2023-10-02T19:53:46.270447446Z" level=info msg="StartContainer for \"9ee6eb606709a4cef3f13f3a8684072fa9f9a578b261235b9a1844667e82fb48\" returns successfully" Oct 2 19:53:46.310000 audit[2710]: NETFILTER_CFG table=mangle:63 family=10 entries=1 op=nft_register_chain pid=2710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.310000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7da0a430 a2=0 a3=7ffc7da0a41c items=0 ppid=2669 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.310000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:53:46.329000 audit[2711]: NETFILTER_CFG table=nat:64 family=10 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.329000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc6e54ee60 a2=0 a3=7ffc6e54ee4c items=0 ppid=2669 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.329000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:53:46.335000 audit[2712]: NETFILTER_CFG table=mangle:65 family=2 entries=1 op=nft_register_chain pid=2712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.335000 audit[2713]: NETFILTER_CFG table=filter:66 family=10 entries=1 op=nft_register_chain pid=2713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.335000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca05a4790 a2=0 a3=7ffca05a477c items=0 ppid=2669 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:53:46.335000 audit[2712]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc5c669e0 a2=0 a3=7fffc5c669cc items=0 ppid=2669 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:53:46.336000 audit[2714]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_chain pid=2714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.336000 audit[2714]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9d8d40b0 a2=0 a3=7ffe9d8d409c items=0 ppid=2669 pid=2714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.336000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:53:46.337000 audit[2715]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.337000 audit[2715]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5e7ef080 a2=0 a3=7ffe5e7ef06c items=0 ppid=2669 pid=2715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.337000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:53:46.422000 audit[2716]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_chain pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.422000 audit[2716]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe611fcab0 a2=0 a3=7ffe611fca9c items=0 ppid=2669 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.422000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:53:46.426000 audit[2718]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.426000 audit[2718]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe8c25d3d0 a2=0 a3=7ffe8c25d3bc items=0 ppid=2669 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.426000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:53:46.431000 audit[2721]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.431000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe9e81f290 a2=0 a3=7ffe9e81f27c items=0 ppid=2669 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:53:46.432000 audit[2722]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_chain pid=2722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.432000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc1045fb0 a2=0 a3=7ffdc1045f9c items=0 ppid=2669 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:53:46.435000 audit[2724]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=2724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.435000 audit[2724]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd7cdc21a0 a2=0 a3=7ffd7cdc218c items=0 ppid=2669 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:53:46.436000 audit[2725]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_chain pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.436000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8f901e40 a2=0 a3=7fff8f901e2c items=0 ppid=2669 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:53:46.438000 audit[2727]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.438000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffc59da630 a2=0 a3=7fffc59da61c items=0 ppid=2669 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:53:46.442000 audit[2730]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.442000 audit[2730]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff1a1a3400 a2=0 a3=7fff1a1a33ec items=0 ppid=2669 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:53:46.443000 audit[2731]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.443000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3938d960 a2=0 a3=7fff3938d94c items=0 ppid=2669 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:53:46.445000 audit[2733]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.445000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe427e6240 a2=0 a3=7ffe427e622c items=0 ppid=2669 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.445000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:53:46.446000 audit[2734]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.446000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2005e370 a2=0 a3=7ffd2005e35c items=0 ppid=2669 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:53:46.449000 audit[2736]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.449000 audit[2736]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbbc9fe40 a2=0 a3=7ffcbbc9fe2c items=0 ppid=2669 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:53:46.452000 audit[2739]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.452000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec9d73420 a2=0 a3=7ffec9d7340c items=0 ppid=2669 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:53:46.456000 audit[2742]: NETFILTER_CFG table=filter:82 family=2 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.456000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcdc584fe0 a2=0 a3=7ffcdc584fcc items=0 ppid=2669 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:53:46.457000 audit[2743]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.457000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc5bdda4d0 a2=0 a3=7ffc5bdda4bc items=0 ppid=2669 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.457000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:53:46.459000 audit[2745]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.459000 audit[2745]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff82aa6ec0 a2=0 a3=7fff82aa6eac items=0 ppid=2669 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:53:46.463000 audit[2748]: NETFILTER_CFG table=nat:85 family=2 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:46.463000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd06d07660 a2=0 a3=7ffd06d0764c items=0 ppid=2669 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:53:46.511000 audit[2752]: NETFILTER_CFG table=filter:86 family=2 entries=6 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:53:46.511000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7fffa83b7930 a2=0 a3=7fffa83b791c items=0 ppid=2669 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:53:46.542000 audit[2752]: NETFILTER_CFG table=nat:87 family=2 entries=17 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:53:46.542000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fffa83b7930 a2=0 a3=7fffa83b791c items=0 ppid=2669 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:53:46.546000 audit[2756]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.546000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffca2b9c040 a2=0 a3=7ffca2b9c02c items=0 ppid=2669 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.546000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:53:46.549000 audit[2758]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.549000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe11edb0d0 a2=0 a3=7ffe11edb0bc items=0 ppid=2669 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:53:46.553000 audit[2761]: NETFILTER_CFG table=filter:90 family=10 entries=2 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.553000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffeb0ec5540 a2=0 a3=7ffeb0ec552c items=0 ppid=2669 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.553000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:53:46.554000 audit[2762]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.554000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe13608870 a2=0 a3=7ffe1360885c items=0 ppid=2669 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:53:46.556000 audit[2764]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2764 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.556000 audit[2764]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdac5eedf0 a2=0 a3=7ffdac5eeddc items=0 ppid=2669 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.556000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:53:46.557000 audit[2765]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.557000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff161a5640 a2=0 a3=7fff161a562c items=0 ppid=2669 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:53:46.560000 audit[2767]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=2767 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.560000 audit[2767]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffea401cd90 a2=0 a3=7ffea401cd7c items=0 ppid=2669 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:53:46.566000 audit[2770]: NETFILTER_CFG table=filter:95 family=10 entries=2 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.566000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffd6ea9c50 a2=0 a3=7fffd6ea9c3c items=0 ppid=2669 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.566000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:53:46.567000 audit[2771]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.567000 audit[2771]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeecc2c620 a2=0 a3=7ffeecc2c60c items=0 ppid=2669 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.567000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:53:46.569000 audit[2773]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.569000 audit[2773]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff7c8ebc00 a2=0 a3=7fff7c8ebbec items=0 ppid=2669 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:53:46.570000 audit[2774]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.570000 audit[2774]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff07b7e590 a2=0 a3=7fff07b7e57c items=0 ppid=2669 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:53:46.573000 audit[2776]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.573000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe700dd880 a2=0 a3=7ffe700dd86c items=0 ppid=2669 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:53:46.577000 audit[2779]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2779 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.577000 audit[2779]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff83ef8920 a2=0 a3=7fff83ef890c items=0 ppid=2669 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:53:46.582000 audit[2782]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=2782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.582000 audit[2782]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd82148910 a2=0 a3=7ffd821488fc items=0 ppid=2669 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.582000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:53:46.583000 audit[2783]: NETFILTER_CFG table=nat:102 family=10 entries=1 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.583000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd937662b0 a2=0 a3=7ffd9376629c items=0 ppid=2669 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:53:46.585000 audit[2785]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.585000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffdac8a4f30 a2=0 a3=7ffdac8a4f1c items=0 ppid=2669 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.585000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:53:46.588000 audit[2788]: NETFILTER_CFG table=nat:104 family=10 entries=2 op=nft_register_chain pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:46.588000 audit[2788]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd57fb6080 a2=0 a3=7ffd57fb606c items=0 ppid=2669 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:53:46.593000 audit[2792]: NETFILTER_CFG table=filter:105 family=10 entries=3 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:53:46.593000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff930d7c90 a2=0 a3=7fff930d7c7c items=0 ppid=2669 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.593000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:53:46.594000 audit[2792]: NETFILTER_CFG table=nat:106 family=10 entries=10 op=nft_register_chain pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:53:46.594000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff930d7c90 a2=0 a3=7fff930d7c7c items=0 ppid=2669 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:46.594000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:53:46.908016 kubelet[2438]: I1002 19:53:46.904447 2438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-9csns" podStartSLOduration=1.904399847 pod.CreationTimestamp="2023-10-02 19:53:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:46.903677636 +0000 UTC m=+15.210437168" watchObservedRunningTime="2023-10-02 19:53:46.904399847 +0000 UTC m=+15.211159479" Oct 2 19:53:47.325385 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4192400081.mount: Deactivated successfully. Oct 2 19:53:48.250140 env[1300]: time="2023-10-02T19:53:48.250088495Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.262601 env[1300]: time="2023-10-02T19:53:48.262545972Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.269811 env[1300]: time="2023-10-02T19:53:48.269765274Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:48.270423 env[1300]: time="2023-10-02T19:53:48.270383683Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:53:48.272806 env[1300]: time="2023-10-02T19:53:48.272345011Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:53:48.275403 env[1300]: time="2023-10-02T19:53:48.275367253Z" level=info msg="CreateContainer within sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:53:48.306163 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3543181189.mount: Deactivated successfully. Oct 2 19:53:48.328018 env[1300]: time="2023-10-02T19:53:48.327925598Z" level=info msg="CreateContainer within sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\"" Oct 2 19:53:48.328660 env[1300]: time="2023-10-02T19:53:48.328621708Z" level=info msg="StartContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\"" Oct 2 19:53:48.353422 systemd[1]: Started cri-containerd-9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d.scope. Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.368000 audit: BPF prog-id=128 op=LOAD Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2533 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:48.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966623434316466363832376466633732636534373166666666303236 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2533 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:48.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966623434316466363832376466633732636534373166666666303236 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit: BPF prog-id=129 op=LOAD Oct 2 19:53:48.369000 audit[2801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000265380 items=0 ppid=2533 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:48.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966623434316466363832376466633732636534373166666666303236 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit: BPF prog-id=130 op=LOAD Oct 2 19:53:48.369000 audit[2801]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002653c8 items=0 ppid=2533 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:48.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966623434316466363832376466633732636534373166666666303236 Oct 2 19:53:48.369000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:53:48.369000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { perfmon } for pid=2801 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit[2801]: AVC avc: denied { bpf } for pid=2801 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:48.369000 audit: BPF prog-id=131 op=LOAD Oct 2 19:53:48.369000 audit[2801]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002657d8 items=0 ppid=2533 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:48.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966623434316466363832376466633732636534373166666666303236 Oct 2 19:53:48.392265 env[1300]: time="2023-10-02T19:53:48.392225708Z" level=info msg="StartContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" returns successfully" Oct 2 19:53:48.410000 audit[2813]: AVC avc: denied { map_create } for pid=2813 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c512 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c512 tclass=bpf permissive=0 Oct 2 19:53:48.410000 audit[2813]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006177d0 a2=48 a3=c0006177c0 items=0 ppid=2533 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c512 key=(null) Oct 2 19:53:48.410000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:53:51.865009 kubelet[2438]: I1002 19:53:51.864955 2438 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-8dcxr" podStartSLOduration=-9.223372028989864e+09 pod.CreationTimestamp="2023-10-02 19:53:44 +0000 UTC" firstStartedPulling="2023-10-02 19:53:45.843530261 +0000 UTC m=+14.150289793" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:53:48.953703359 +0000 UTC m=+17.260462891" watchObservedRunningTime="2023-10-02 19:53:51.864910843 +0000 UTC m=+20.171670475" Oct 2 19:53:54.590877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1812370669.mount: Deactivated successfully. Oct 2 19:53:57.410614 env[1300]: time="2023-10-02T19:53:57.410568934Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:57.421782 env[1300]: time="2023-10-02T19:53:57.421737964Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:57.432161 env[1300]: time="2023-10-02T19:53:57.432122285Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:57.432723 env[1300]: time="2023-10-02T19:53:57.432689091Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:53:57.439104 env[1300]: time="2023-10-02T19:53:57.438884063Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:53:57.500315 env[1300]: time="2023-10-02T19:53:57.500265277Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" Oct 2 19:53:57.503705 env[1300]: time="2023-10-02T19:53:57.500871084Z" level=info msg="StartContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" Oct 2 19:53:57.537103 systemd[1]: Started cri-containerd-f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e.scope. Oct 2 19:53:57.549211 systemd[1]: cri-containerd-f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e.scope: Deactivated successfully. Oct 2 19:53:58.474623 systemd[1]: run-containerd-runc-k8s.io-f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e-runc.zcNjXe.mount: Deactivated successfully. Oct 2 19:53:58.474751 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e-rootfs.mount: Deactivated successfully. Oct 2 19:53:59.543846 env[1300]: time="2023-10-02T19:53:59.543719355Z" level=error msg="get state for f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" error="context deadline exceeded: unknown" Oct 2 19:53:59.543846 env[1300]: time="2023-10-02T19:53:59.543831556Z" level=warning msg="unknown status" status=0 Oct 2 19:54:01.645039 env[1300]: time="2023-10-02T19:54:01.644907303Z" level=error msg="get state for f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" error="context deadline exceeded: unknown" Oct 2 19:54:01.645039 env[1300]: time="2023-10-02T19:54:01.645022204Z" level=warning msg="unknown status" status=0 Oct 2 19:54:01.674434 env[1300]: time="2023-10-02T19:54:01.674364618Z" level=info msg="shim disconnected" id=f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e Oct 2 19:54:01.674434 env[1300]: time="2023-10-02T19:54:01.674429819Z" level=warning msg="cleaning up after shim disconnected" id=f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e namespace=k8s.io Oct 2 19:54:01.674434 env[1300]: time="2023-10-02T19:54:01.674445819Z" level=info msg="cleaning up dead shim" Oct 2 19:54:01.683290 env[1300]: time="2023-10-02T19:54:01.683202013Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2857 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:01.683658 env[1300]: time="2023-10-02T19:54:01.683526517Z" level=error msg="copy shim log" error="read /proc/self/fd/56: file already closed" Oct 2 19:54:01.684141 env[1300]: time="2023-10-02T19:54:01.684090723Z" level=error msg="Failed to pipe stdout of container \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" error="reading from a closed fifo" Oct 2 19:54:01.684445 env[1300]: time="2023-10-02T19:54:01.684402526Z" level=error msg="Failed to pipe stderr of container \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" error="reading from a closed fifo" Oct 2 19:54:01.689848 env[1300]: time="2023-10-02T19:54:01.689790284Z" level=error msg="StartContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:01.690381 kubelet[2438]: E1002 19:54:01.690137 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" Oct 2 19:54:01.690381 kubelet[2438]: E1002 19:54:01.690297 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:01.690381 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:01.690381 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:54:01.691751 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:01.691883 kubelet[2438]: E1002 19:54:01.690350 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:01.966679 env[1300]: time="2023-10-02T19:54:01.965620841Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:54:02.006804 env[1300]: time="2023-10-02T19:54:02.006750681Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" Oct 2 19:54:02.007811 env[1300]: time="2023-10-02T19:54:02.007772591Z" level=info msg="StartContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" Oct 2 19:54:02.035756 systemd[1]: Started cri-containerd-0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55.scope. Oct 2 19:54:02.050741 systemd[1]: cri-containerd-0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55.scope: Deactivated successfully. Oct 2 19:54:02.068852 env[1300]: time="2023-10-02T19:54:02.068791233Z" level=info msg="shim disconnected" id=0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55 Oct 2 19:54:02.068852 env[1300]: time="2023-10-02T19:54:02.068850733Z" level=warning msg="cleaning up after shim disconnected" id=0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55 namespace=k8s.io Oct 2 19:54:02.069174 env[1300]: time="2023-10-02T19:54:02.068865733Z" level=info msg="cleaning up dead shim" Oct 2 19:54:02.077179 env[1300]: time="2023-10-02T19:54:02.077134020Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2895 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:02.077460 env[1300]: time="2023-10-02T19:54:02.077398523Z" level=error msg="copy shim log" error="read /proc/self/fd/56: file already closed" Oct 2 19:54:02.078425 env[1300]: time="2023-10-02T19:54:02.078371833Z" level=error msg="Failed to pipe stderr of container \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" error="reading from a closed fifo" Oct 2 19:54:02.078527 env[1300]: time="2023-10-02T19:54:02.078459734Z" level=error msg="Failed to pipe stdout of container \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" error="reading from a closed fifo" Oct 2 19:54:02.085144 env[1300]: time="2023-10-02T19:54:02.085099204Z" level=error msg="StartContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:02.085381 kubelet[2438]: E1002 19:54:02.085357 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55" Oct 2 19:54:02.085509 kubelet[2438]: E1002 19:54:02.085495 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:02.085509 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:02.085509 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:54:02.085509 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:02.085760 kubelet[2438]: E1002 19:54:02.085552 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:02.966251 kubelet[2438]: I1002 19:54:02.966219 2438 scope.go:115] "RemoveContainer" containerID="f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" Oct 2 19:54:02.966904 kubelet[2438]: I1002 19:54:02.966882 2438 scope.go:115] "RemoveContainer" containerID="f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" Oct 2 19:54:02.968890 env[1300]: time="2023-10-02T19:54:02.968716991Z" level=info msg="RemoveContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" Oct 2 19:54:02.969885 env[1300]: time="2023-10-02T19:54:02.969667801Z" level=info msg="RemoveContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\"" Oct 2 19:54:02.969885 env[1300]: time="2023-10-02T19:54:02.969803503Z" level=error msg="RemoveContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\" failed" error="failed to set removing state for container \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\": container is already in removing state" Oct 2 19:54:02.970089 kubelet[2438]: E1002 19:54:02.970045 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\": container is already in removing state" containerID="f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" Oct 2 19:54:02.970155 kubelet[2438]: E1002 19:54:02.970112 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e": container is already in removing state; Skipping pod "cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)" Oct 2 19:54:02.970611 kubelet[2438]: E1002 19:54:02.970585 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:02.988333 env[1300]: time="2023-10-02T19:54:02.988279997Z" level=info msg="RemoveContainer for \"f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e\" returns successfully" Oct 2 19:54:02.991501 systemd[1]: run-containerd-runc-k8s.io-0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55-runc.chwmkC.mount: Deactivated successfully. Oct 2 19:54:02.991630 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55-rootfs.mount: Deactivated successfully. Oct 2 19:54:03.970127 kubelet[2438]: E1002 19:54:03.970093 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:04.650234 kubelet[2438]: W1002 19:54:04.650176 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e.scope WatchSource:0}: container "f911d61d67d6eaf7226dc2c879f2502a138030bb3e4885009f085a1c94d9990e" in namespace "k8s.io": not found Oct 2 19:54:07.757885 kubelet[2438]: W1002 19:54:07.757819 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55.scope WatchSource:0}: task 0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55 not found: not found Oct 2 19:54:14.857357 env[1300]: time="2023-10-02T19:54:14.857293635Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:54:14.887839 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2376304103.mount: Deactivated successfully. Oct 2 19:54:14.908144 env[1300]: time="2023-10-02T19:54:14.908099364Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" Oct 2 19:54:14.909691 env[1300]: time="2023-10-02T19:54:14.909657477Z" level=info msg="StartContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" Oct 2 19:54:14.934678 systemd[1]: Started cri-containerd-2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606.scope. Oct 2 19:54:14.947075 systemd[1]: cri-containerd-2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606.scope: Deactivated successfully. Oct 2 19:54:14.990873 env[1300]: time="2023-10-02T19:54:14.990813462Z" level=info msg="shim disconnected" id=2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606 Oct 2 19:54:14.990873 env[1300]: time="2023-10-02T19:54:14.990870463Z" level=warning msg="cleaning up after shim disconnected" id=2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606 namespace=k8s.io Oct 2 19:54:14.991534 env[1300]: time="2023-10-02T19:54:14.990881963Z" level=info msg="cleaning up dead shim" Oct 2 19:54:14.999424 env[1300]: time="2023-10-02T19:54:14.999379734Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2934 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:14.999693 env[1300]: time="2023-10-02T19:54:14.999638437Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 19:54:14.999916 env[1300]: time="2023-10-02T19:54:14.999882239Z" level=error msg="Failed to pipe stderr of container \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" error="reading from a closed fifo" Oct 2 19:54:15.004080 env[1300]: time="2023-10-02T19:54:15.004026773Z" level=error msg="Failed to pipe stdout of container \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" error="reading from a closed fifo" Oct 2 19:54:15.009240 env[1300]: time="2023-10-02T19:54:15.009196816Z" level=error msg="StartContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:15.009470 kubelet[2438]: E1002 19:54:15.009432 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606" Oct 2 19:54:15.009841 kubelet[2438]: E1002 19:54:15.009592 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:15.009841 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:15.009841 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:54:15.009841 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:15.010198 kubelet[2438]: E1002 19:54:15.009647 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:15.881549 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606-rootfs.mount: Deactivated successfully. Oct 2 19:54:15.997807 kubelet[2438]: I1002 19:54:15.997773 2438 scope.go:115] "RemoveContainer" containerID="0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55" Oct 2 19:54:15.998312 kubelet[2438]: I1002 19:54:15.998288 2438 scope.go:115] "RemoveContainer" containerID="0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55" Oct 2 19:54:16.006015 env[1300]: time="2023-10-02T19:54:16.004216279Z" level=info msg="RemoveContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" Oct 2 19:54:16.006555 env[1300]: time="2023-10-02T19:54:16.006517398Z" level=info msg="RemoveContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\"" Oct 2 19:54:16.006779 env[1300]: time="2023-10-02T19:54:16.006744400Z" level=error msg="RemoveContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\" failed" error="failed to set removing state for container \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\": container is already in removing state" Oct 2 19:54:16.009007 kubelet[2438]: E1002 19:54:16.007032 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\": container is already in removing state" containerID="0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55" Oct 2 19:54:16.009007 kubelet[2438]: E1002 19:54:16.007082 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55": container is already in removing state; Skipping pod "cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)" Oct 2 19:54:16.009007 kubelet[2438]: E1002 19:54:16.007532 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:16.019795 env[1300]: time="2023-10-02T19:54:16.019748006Z" level=info msg="RemoveContainer for \"0bbc4eefc6faa5e51377f9079ebda5a03fbfbe5d5406d9cb1f50ca3337475b55\" returns successfully" Oct 2 19:54:18.095741 kubelet[2438]: W1002 19:54:18.095697 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606.scope WatchSource:0}: task 2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606 not found: not found Oct 2 19:54:27.022000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:27.029144 kernel: kauditd_printk_skb: 396 callbacks suppressed Oct 2 19:54:27.047024 kernel: audit: type=1400 audit(1696276467.022:1114): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:27.047107 kernel: audit: type=1300 audit(1696276467.022:1114): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd0c40 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:27.022000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd0c40 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:27.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:27.092223 kernel: audit: type=1327 audit(1696276467.022:1114): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:27.099401 kernel: audit: type=1400 audit(1696276467.066:1115): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:27.066000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:27.066000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026b0cf0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:27.139753 kernel: audit: type=1300 audit(1696276467.066:1115): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026b0cf0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:27.066000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:27.159013 kernel: audit: type=1327 audit(1696276467.066:1115): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:28.286000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.286000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.324782 kernel: audit: type=1400 audit(1696276468.286:1117): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.324949 kernel: audit: type=1400 audit(1696276468.286:1116): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.324976 kernel: audit: type=1300 audit(1696276468.286:1117): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0085fa180 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.286000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0085fa180 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.351792 kernel: audit: type=1327 audit(1696276468.286:1117): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.286000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00921ac60 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.286000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.288000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.288000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0090d9260 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.288000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.316000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.316000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00921acc0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.316000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.316000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00921ad20 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.316000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:28.316000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0051cb820 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:54:28.316000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:28.855515 kubelet[2438]: E1002 19:54:28.855481 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:34.039000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.048697 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:54:34.049404 kernel: audit: type=1400 audit(1696276474.039:1122): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.039000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.076018 kernel: audit: type=1400 audit(1696276474.039:1123): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.039000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd1260 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.115822 kernel: audit: type=1300 audit(1696276474.039:1123): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd1260 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.115942 kernel: audit: type=1327 audit(1696276474.039:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.132871 kernel: audit: type=1400 audit(1696276474.039:1124): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.039000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.039000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd1280 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.148036 kernel: audit: type=1300 audit(1696276474.039:1124): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001cd1280 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.169003 kernel: audit: type=1327 audit(1696276474.039:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.039000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028115e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.205527 kernel: audit: type=1300 audit(1696276474.039:1122): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0028115e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.205617 kernel: audit: type=1327 audit(1696276474.039:1122): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.039000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:34.041000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.237263 kernel: audit: type=1400 audit(1696276474.041:1125): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:34.041000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026e8060 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:54:34.041000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:41.858467 env[1300]: time="2023-10-02T19:54:41.858409409Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:54:41.899625 env[1300]: time="2023-10-02T19:54:41.899518150Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" Oct 2 19:54:41.900052 env[1300]: time="2023-10-02T19:54:41.900023053Z" level=info msg="StartContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" Oct 2 19:54:41.935515 systemd[1]: Started cri-containerd-5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad.scope. Oct 2 19:54:41.950055 systemd[1]: cri-containerd-5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad.scope: Deactivated successfully. Oct 2 19:54:41.981843 env[1300]: time="2023-10-02T19:54:41.981786634Z" level=info msg="shim disconnected" id=5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad Oct 2 19:54:41.981843 env[1300]: time="2023-10-02T19:54:41.981843834Z" level=warning msg="cleaning up after shim disconnected" id=5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad namespace=k8s.io Oct 2 19:54:41.982164 env[1300]: time="2023-10-02T19:54:41.981855335Z" level=info msg="cleaning up dead shim" Oct 2 19:54:41.990607 env[1300]: time="2023-10-02T19:54:41.990566786Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2975 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:41.990897 env[1300]: time="2023-10-02T19:54:41.990836487Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 19:54:41.991141 env[1300]: time="2023-10-02T19:54:41.991089689Z" level=error msg="Failed to pipe stdout of container \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" error="reading from a closed fifo" Oct 2 19:54:41.994084 env[1300]: time="2023-10-02T19:54:41.994036606Z" level=error msg="Failed to pipe stderr of container \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" error="reading from a closed fifo" Oct 2 19:54:42.000099 env[1300]: time="2023-10-02T19:54:42.000054542Z" level=error msg="StartContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:42.000345 kubelet[2438]: E1002 19:54:42.000320 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad" Oct 2 19:54:42.001917 kubelet[2438]: E1002 19:54:42.000937 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:42.001917 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:42.001917 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:54:42.001917 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:42.002151 kubelet[2438]: E1002 19:54:42.001025 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:42.048270 kubelet[2438]: I1002 19:54:42.048235 2438 scope.go:115] "RemoveContainer" containerID="2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606" Oct 2 19:54:42.048843 kubelet[2438]: I1002 19:54:42.048638 2438 scope.go:115] "RemoveContainer" containerID="2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606" Oct 2 19:54:42.052142 env[1300]: time="2023-10-02T19:54:42.051705042Z" level=info msg="RemoveContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" Oct 2 19:54:42.052655 env[1300]: time="2023-10-02T19:54:42.052622748Z" level=info msg="RemoveContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\"" Oct 2 19:54:42.052919 env[1300]: time="2023-10-02T19:54:42.052878649Z" level=error msg="RemoveContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\" failed" error="failed to set removing state for container \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\": container is already in removing state" Oct 2 19:54:42.053231 kubelet[2438]: E1002 19:54:42.053155 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\": container is already in removing state" containerID="2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606" Oct 2 19:54:42.053231 kubelet[2438]: E1002 19:54:42.053185 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606": container is already in removing state; Skipping pod "cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)" Oct 2 19:54:42.053918 kubelet[2438]: E1002 19:54:42.053902 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:54:42.068525 env[1300]: time="2023-10-02T19:54:42.068477340Z" level=info msg="RemoveContainer for \"2cb66857d6621bc0d39b102aade6c5bca2034ebf9cfadf939c4d8eeda5393606\" returns successfully" Oct 2 19:54:42.884031 systemd[1]: run-containerd-runc-k8s.io-5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad-runc.nhVR9s.mount: Deactivated successfully. Oct 2 19:54:42.884165 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad-rootfs.mount: Deactivated successfully. Oct 2 19:54:45.086869 kubelet[2438]: W1002 19:54:45.086817 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad.scope WatchSource:0}: task 5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad not found: not found Oct 2 19:54:56.854766 kubelet[2438]: E1002 19:54:56.854731 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:11.854864 kubelet[2438]: E1002 19:55:11.854771 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:26.857615 env[1300]: time="2023-10-02T19:55:26.857479646Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:55:26.888567 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4018935969.mount: Deactivated successfully. Oct 2 19:55:26.910396 env[1300]: time="2023-10-02T19:55:26.910317888Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" Oct 2 19:55:26.911437 env[1300]: time="2023-10-02T19:55:26.911398422Z" level=info msg="StartContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" Oct 2 19:55:26.941706 systemd[1]: Started cri-containerd-d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e.scope. Oct 2 19:55:26.955058 systemd[1]: cri-containerd-d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e.scope: Deactivated successfully. Oct 2 19:55:26.972086 env[1300]: time="2023-10-02T19:55:26.972027907Z" level=info msg="shim disconnected" id=d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e Oct 2 19:55:26.972086 env[1300]: time="2023-10-02T19:55:26.972089509Z" level=warning msg="cleaning up after shim disconnected" id=d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e namespace=k8s.io Oct 2 19:55:26.972429 env[1300]: time="2023-10-02T19:55:26.972103309Z" level=info msg="cleaning up dead shim" Oct 2 19:55:26.980419 env[1300]: time="2023-10-02T19:55:26.980369166Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3018 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:26.980725 env[1300]: time="2023-10-02T19:55:26.980660075Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 19:55:26.980910 env[1300]: time="2023-10-02T19:55:26.980871481Z" level=error msg="Failed to pipe stdout of container \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" error="reading from a closed fifo" Oct 2 19:55:26.981103 env[1300]: time="2023-10-02T19:55:26.981070488Z" level=error msg="Failed to pipe stderr of container \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" error="reading from a closed fifo" Oct 2 19:55:26.990008 env[1300]: time="2023-10-02T19:55:26.989947564Z" level=error msg="StartContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:26.990258 kubelet[2438]: E1002 19:55:26.990226 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e" Oct 2 19:55:26.990659 kubelet[2438]: E1002 19:55:26.990382 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:26.990659 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:26.990659 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:55:26.990659 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:26.990869 kubelet[2438]: E1002 19:55:26.990432 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:27.026000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:27.031371 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:55:27.031507 kernel: audit: type=1400 audit(1696276527.026:1126): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:27.026000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001357340 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:27.071702 kernel: audit: type=1300 audit(1696276527.026:1126): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001357340 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:27.071857 kernel: audit: type=1327 audit(1696276527.026:1126): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:27.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:27.089230 kernel: audit: type=1400 audit(1696276527.068:1127): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:27.068000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:27.068000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000910600 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:27.105031 kernel: audit: type=1300 audit(1696276527.068:1127): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000910600 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:27.068000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:27.133077 kubelet[2438]: I1002 19:55:27.133048 2438 scope.go:115] "RemoveContainer" containerID="5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad" Oct 2 19:55:27.133640 kubelet[2438]: I1002 19:55:27.133622 2438 scope.go:115] "RemoveContainer" containerID="5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad" Oct 2 19:55:27.136292 env[1300]: time="2023-10-02T19:55:27.136255961Z" level=info msg="RemoveContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" Oct 2 19:55:27.137091 env[1300]: time="2023-10-02T19:55:27.137060986Z" level=info msg="RemoveContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\"" Oct 2 19:55:27.137390 env[1300]: time="2023-10-02T19:55:27.137353295Z" level=error msg="RemoveContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\" failed" error="failed to set removing state for container \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\": container is already in removing state" Oct 2 19:55:27.137685 kubelet[2438]: E1002 19:55:27.137671 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\": container is already in removing state" containerID="5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad" Oct 2 19:55:27.137804 kubelet[2438]: E1002 19:55:27.137796 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad": container is already in removing state; Skipping pod "cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)" Oct 2 19:55:27.138183 kubelet[2438]: E1002 19:55:27.138171 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:27.145449 kernel: audit: type=1327 audit(1696276527.068:1127): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:27.160014 env[1300]: time="2023-10-02T19:55:27.159413772Z" level=info msg="RemoveContainer for \"5c9fcb1cfaba0a9ed1334f4173487560074393569d9d024bed22611ef8067cad\" returns successfully" Oct 2 19:55:27.884539 systemd[1]: run-containerd-runc-k8s.io-d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e-runc.bLSdQy.mount: Deactivated successfully. Oct 2 19:55:27.884664 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e-rootfs.mount: Deactivated successfully. Oct 2 19:55:28.288000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.305018 kernel: audit: type=1400 audit(1696276528.288:1128): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.305178 kernel: audit: type=1300 audit(1696276528.288:1128): arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d4efd80 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.288000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d4efd80 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.288000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.342080 kernel: audit: type=1327 audit(1696276528.288:1128): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.342228 kernel: audit: type=1400 audit(1696276528.304:1129): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.304000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.304000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00da2c300 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.303000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.303000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d52d950 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.303000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.317000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.317000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00da341e0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.317000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.317000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00da2c4b0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:28.317000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:28.317000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00da2c510 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:55:28.317000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:30.077600 kubelet[2438]: W1002 19:55:30.077550 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e.scope WatchSource:0}: task d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e not found: not found Oct 2 19:55:31.817295 kubelet[2438]: E1002 19:55:31.817217 2438 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:55:31.957266 kubelet[2438]: E1002 19:55:31.957226 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:55:34.040000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.048190 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:55:34.048290 kernel: audit: type=1400 audit(1696276534.040:1135): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.040000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.088093 kernel: audit: type=1400 audit(1696276534.040:1134): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.088223 kernel: audit: type=1300 audit(1696276534.040:1135): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b4c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.040000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b4c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.114020 kernel: audit: type=1327 audit(1696276534.040:1135): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.040000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.148491 kernel: audit: type=1400 audit(1696276534.040:1136): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.148611 kernel: audit: type=1300 audit(1696276534.040:1136): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b4e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.040000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b4e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.171261 kernel: audit: type=1327 audit(1696276534.040:1136): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.197622 kernel: audit: type=1400 audit(1696276534.042:1137): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.042000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:34.042000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b860 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.214059 kernel: audit: type=1300 audit(1696276534.042:1137): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3b860 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.042000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.237006 kernel: audit: type=1327 audit(1696276534.042:1137): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:34.040000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000c1f960 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:55:34.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:36.958771 kubelet[2438]: E1002 19:55:36.958729 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:55:39.854749 kubelet[2438]: E1002 19:55:39.854712 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:41.960794 kubelet[2438]: E1002 19:55:41.960742 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:55:46.962045 kubelet[2438]: E1002 19:55:46.961981 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:55:51.963686 kubelet[2438]: E1002 19:55:51.963642 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:55:54.855192 kubelet[2438]: E1002 19:55:54.855148 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:55:56.965151 kubelet[2438]: E1002 19:55:56.965090 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:01.966723 kubelet[2438]: E1002 19:56:01.966676 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:06.968362 kubelet[2438]: E1002 19:56:06.968319 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:08.854975 kubelet[2438]: E1002 19:56:08.854932 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:11.969406 kubelet[2438]: E1002 19:56:11.969363 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:12.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:55578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:12.209559 systemd[1]: Started sshd@7-10.200.8.15:22-10.200.12.6:55578.service. Oct 2 19:56:12.214804 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:56:12.214909 kernel: audit: type=1130 audit(1696276572.208:1138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:55578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:12.841000 audit[3039]: USER_ACCT pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.842343 sshd[3039]: Accepted publickey for core from 10.200.12.6 port 55578 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:12.861016 kernel: audit: type=1101 audit(1696276572.841:1139): pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.860000 audit[3039]: CRED_ACQ pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.861673 sshd[3039]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:12.867098 systemd[1]: Started session-10.scope. Oct 2 19:56:12.868265 systemd-logind[1280]: New session 10 of user core. Oct 2 19:56:12.889777 kernel: audit: type=1103 audit(1696276572.860:1140): pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.889866 kernel: audit: type=1006 audit(1696276572.860:1141): pid=3039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:12.860000 audit[3039]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefa6a0850 a2=3 a3=0 items=0 ppid=1 pid=3039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:12.907864 kernel: audit: type=1300 audit(1696276572.860:1141): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefa6a0850 a2=3 a3=0 items=0 ppid=1 pid=3039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:12.911010 kernel: audit: type=1327 audit(1696276572.860:1141): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:12.860000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:12.873000 audit[3039]: USER_START pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.875000 audit[3041]: CRED_ACQ pid=3041 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.953854 kernel: audit: type=1105 audit(1696276572.873:1142): pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:12.953946 kernel: audit: type=1103 audit(1696276572.875:1143): pid=3041 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:13.405594 sshd[3039]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:13.406000 audit[3039]: USER_END pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:13.411147 systemd[1]: sshd@7-10.200.8.15:22-10.200.12.6:55578.service: Deactivated successfully. Oct 2 19:56:13.411880 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:13.413455 systemd-logind[1280]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:13.414619 systemd-logind[1280]: Removed session 10. Oct 2 19:56:13.406000 audit[3039]: CRED_DISP pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:13.447019 kernel: audit: type=1106 audit(1696276573.406:1144): pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:13.447114 kernel: audit: type=1104 audit(1696276573.406:1145): pid=3039 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:13.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:55578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:16.970838 kubelet[2438]: E1002 19:56:16.970800 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:21.856456 kubelet[2438]: E1002 19:56:21.856419 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:21.972327 kubelet[2438]: E1002 19:56:21.972290 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:23.535771 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:23.535933 kernel: audit: type=1130 audit(1696276583.511:1147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:46212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:23.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:46212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:23.511958 systemd[1]: Started sshd@8-10.200.8.15:22-10.200.12.6:46212.service. Oct 2 19:56:24.138000 audit[3054]: USER_ACCT pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.158162 kernel: audit: type=1101 audit(1696276584.138:1148): pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.158221 sshd[3054]: Accepted publickey for core from 10.200.12.6 port 46212 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:24.158570 sshd[3054]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:24.157000 audit[3054]: CRED_ACQ pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.163926 systemd[1]: Started session-11.scope. Oct 2 19:56:24.165239 systemd-logind[1280]: New session 11 of user core. Oct 2 19:56:24.185188 kernel: audit: type=1103 audit(1696276584.157:1149): pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.185288 kernel: audit: type=1006 audit(1696276584.157:1150): pid=3054 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:24.185315 kernel: audit: type=1300 audit(1696276584.157:1150): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6c04a990 a2=3 a3=0 items=0 ppid=1 pid=3054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:24.157000 audit[3054]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6c04a990 a2=3 a3=0 items=0 ppid=1 pid=3054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:24.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:24.207515 kernel: audit: type=1327 audit(1696276584.157:1150): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:24.207592 kernel: audit: type=1105 audit(1696276584.168:1151): pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.168000 audit[3054]: USER_START pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.168000 audit[3056]: CRED_ACQ pid=3056 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.240037 kernel: audit: type=1103 audit(1696276584.168:1152): pid=3056 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.643278 sshd[3054]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:24.644000 audit[3054]: USER_END pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.649892 systemd[1]: sshd@8-10.200.8.15:22-10.200.12.6:46212.service: Deactivated successfully. Oct 2 19:56:24.650861 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:24.652613 systemd-logind[1280]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:24.653686 systemd-logind[1280]: Removed session 11. Oct 2 19:56:24.644000 audit[3054]: CRED_DISP pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.665065 kernel: audit: type=1106 audit(1696276584.644:1153): pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.665106 kernel: audit: type=1104 audit(1696276584.644:1154): pid=3054 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:24.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:46212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:26.973374 kubelet[2438]: E1002 19:56:26.973332 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:27.026000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:27.026000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0022f1660 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:27.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:27.069000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:27.069000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e17b00 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:27.069000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:28.288000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.288000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0018d4120 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.288000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:28.305000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.305000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008fb6900 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:28.306000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.306000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009059d70 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:28.318000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.318000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.318000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0018d4220 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.318000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:28.319000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:28.319000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c009059ec0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.319000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:28.318000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c008fb6990 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:56:28.318000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:31.974486 kubelet[2438]: E1002 19:56:31.974449 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:33.855172 kubelet[2438]: E1002 19:56:33.855123 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:34.041000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.050788 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:56:34.050930 kernel: audit: type=1400 audit(1696276594.041:1165): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.041000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.084049 kernel: audit: type=1400 audit(1696276594.041:1164): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.084194 kernel: audit: type=1300 audit(1696276594.041:1165): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238faa0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.041000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238faa0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.041000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.124019 kernel: audit: type=1327 audit(1696276594.041:1165): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.124200 kernel: audit: type=1400 audit(1696276594.043:1166): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.043000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.043000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fac0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.161635 kernel: audit: type=1300 audit(1696276594.043:1166): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fac0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.161740 kernel: audit: type=1327 audit(1696276594.043:1166): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.043000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.045000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.180015 kernel: audit: type=1400 audit(1696276594.045:1167): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:34.045000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fde0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.197008 kernel: audit: type=1300 audit(1696276594.045:1167): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fde0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.218005 kernel: audit: type=1327 audit(1696276594.045:1167): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.041000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0024c2ee0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:56:34.041000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:34.754646 systemd[1]: Started sshd@9-10.200.8.15:22-10.200.12.6:47932.service. Oct 2 19:56:34.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:47932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:35.550000 audit[3070]: USER_ACCT pid=3070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:35.551556 sshd[3070]: Accepted publickey for core from 10.200.12.6 port 47932 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:35.551000 audit[3070]: CRED_ACQ pid=3070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:35.551000 audit[3070]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3401fe80 a2=3 a3=0 items=0 ppid=1 pid=3070 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:35.551000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:35.553068 sshd[3070]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:35.558298 systemd[1]: Started session-12.scope. Oct 2 19:56:35.559054 systemd-logind[1280]: New session 12 of user core. Oct 2 19:56:35.562000 audit[3070]: USER_START pid=3070 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:35.564000 audit[3072]: CRED_ACQ pid=3072 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:36.256601 sshd[3070]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:36.257000 audit[3070]: USER_END pid=3070 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:36.257000 audit[3070]: CRED_DISP pid=3070 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:36.260790 systemd[1]: sshd@9-10.200.8.15:22-10.200.12.6:47932.service: Deactivated successfully. Oct 2 19:56:36.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:47932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:36.262061 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:36.262873 systemd-logind[1280]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:36.263700 systemd-logind[1280]: Removed session 12. Oct 2 19:56:36.975668 kubelet[2438]: E1002 19:56:36.975622 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:41.977260 kubelet[2438]: E1002 19:56:41.977203 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:44.854809 kubelet[2438]: E1002 19:56:44.854756 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:46.382708 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:56:46.382829 kernel: audit: type=1130 audit(1696276606.359:1177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:60264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:46.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:60264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:46.360777 systemd[1]: Started sshd@10-10.200.8.15:22-10.200.12.6:60264.service. Oct 2 19:56:46.978726 kubelet[2438]: E1002 19:56:46.978679 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:46.996000 audit[3084]: USER_ACCT pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.016886 sshd[3084]: Accepted publickey for core from 10.200.12.6 port 60264 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:47.017244 kernel: audit: type=1101 audit(1696276606.996:1178): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.017359 sshd[3084]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:47.015000 audit[3084]: CRED_ACQ pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.022702 systemd[1]: Started session-13.scope. Oct 2 19:56:47.023751 systemd-logind[1280]: New session 13 of user core. Oct 2 19:56:47.035000 kernel: audit: type=1103 audit(1696276607.015:1179): pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.015000 audit[3084]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e116750 a2=3 a3=0 items=0 ppid=1 pid=3084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:47.062923 kernel: audit: type=1006 audit(1696276607.015:1180): pid=3084 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:56:47.063032 kernel: audit: type=1300 audit(1696276607.015:1180): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e116750 a2=3 a3=0 items=0 ppid=1 pid=3084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:47.063066 kernel: audit: type=1327 audit(1696276607.015:1180): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:47.015000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:47.029000 audit[3084]: USER_START pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.085665 kernel: audit: type=1105 audit(1696276607.029:1181): pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.086274 kernel: audit: type=1103 audit(1696276607.035:1182): pid=3086 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.035000 audit[3086]: CRED_ACQ pid=3086 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.522091 sshd[3084]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:47.523000 audit[3084]: USER_END pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.526568 systemd[1]: sshd@10-10.200.8.15:22-10.200.12.6:60264.service: Deactivated successfully. Oct 2 19:56:47.527534 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:56:47.529403 systemd-logind[1280]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:56:47.530461 systemd-logind[1280]: Removed session 13. Oct 2 19:56:47.523000 audit[3084]: CRED_DISP pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.558662 kernel: audit: type=1106 audit(1696276607.523:1183): pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.558836 kernel: audit: type=1104 audit(1696276607.523:1184): pid=3084 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:47.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:60264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:51.979737 kubelet[2438]: E1002 19:56:51.979695 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:56.981363 kubelet[2438]: E1002 19:56:56.981321 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:57.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:54348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:57.680558 systemd[1]: Started sshd@11-10.200.8.15:22-10.200.12.6:54348.service. Oct 2 19:56:57.690059 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:57.690149 kernel: audit: type=1130 audit(1696276617.679:1186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:54348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:57.857956 env[1300]: time="2023-10-02T19:56:57.857901862Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:56:57.884557 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount847595912.mount: Deactivated successfully. Oct 2 19:56:57.911062 env[1300]: time="2023-10-02T19:56:57.911016350Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" Oct 2 19:56:57.911515 env[1300]: time="2023-10-02T19:56:57.911477356Z" level=info msg="StartContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" Oct 2 19:56:57.933650 systemd[1]: Started cri-containerd-2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636.scope. Oct 2 19:56:57.944261 systemd[1]: cri-containerd-2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636.scope: Deactivated successfully. Oct 2 19:56:58.028051 env[1300]: time="2023-10-02T19:56:58.027957762Z" level=info msg="shim disconnected" id=2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636 Oct 2 19:56:58.028051 env[1300]: time="2023-10-02T19:56:58.028048663Z" level=warning msg="cleaning up after shim disconnected" id=2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636 namespace=k8s.io Oct 2 19:56:58.028380 env[1300]: time="2023-10-02T19:56:58.028063663Z" level=info msg="cleaning up dead shim" Oct 2 19:56:58.036231 env[1300]: time="2023-10-02T19:56:58.036181667Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3124 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:58.036512 env[1300]: time="2023-10-02T19:56:58.036454171Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 19:56:58.038126 env[1300]: time="2023-10-02T19:56:58.038089492Z" level=error msg="Failed to pipe stderr of container \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" error="reading from a closed fifo" Oct 2 19:56:58.038244 env[1300]: time="2023-10-02T19:56:58.038081292Z" level=error msg="Failed to pipe stdout of container \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" error="reading from a closed fifo" Oct 2 19:56:58.043810 env[1300]: time="2023-10-02T19:56:58.043768365Z" level=error msg="StartContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:58.044049 kubelet[2438]: E1002 19:56:58.044017 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636" Oct 2 19:56:58.044415 kubelet[2438]: E1002 19:56:58.044193 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:58.044415 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:58.044415 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:56:58.044415 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:58.044725 kubelet[2438]: E1002 19:56:58.044251 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:58.319000 audit[3098]: USER_ACCT pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.341729 kernel: audit: type=1101 audit(1696276618.319:1187): pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.341846 sshd[3098]: Accepted publickey for core from 10.200.12.6 port 54348 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:58.339000 audit[3098]: CRED_ACQ pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.341512 sshd[3098]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:58.347017 kubelet[2438]: I1002 19:56:58.346995 2438 scope.go:115] "RemoveContainer" containerID="d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e" Oct 2 19:56:58.347717 kubelet[2438]: I1002 19:56:58.347700 2438 scope.go:115] "RemoveContainer" containerID="d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e" Oct 2 19:56:58.349031 env[1300]: time="2023-10-02T19:56:58.349001489Z" level=info msg="RemoveContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" Oct 2 19:56:58.349702 env[1300]: time="2023-10-02T19:56:58.349679898Z" level=info msg="RemoveContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\"" Oct 2 19:56:58.350027 env[1300]: time="2023-10-02T19:56:58.349909401Z" level=error msg="RemoveContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\" failed" error="failed to set removing state for container \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\": container is already in removing state" Oct 2 19:56:58.350224 kubelet[2438]: E1002 19:56:58.350212 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\": container is already in removing state" containerID="d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e" Oct 2 19:56:58.350325 kubelet[2438]: E1002 19:56:58.350315 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e": container is already in removing state; Skipping pod "cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)" Oct 2 19:56:58.350669 kubelet[2438]: E1002 19:56:58.350658 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:56:58.357253 systemd[1]: Started session-14.scope. Oct 2 19:56:58.360159 systemd-logind[1280]: New session 14 of user core. Oct 2 19:56:58.369249 kernel: audit: type=1103 audit(1696276618.339:1188): pid=3098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.369331 kernel: audit: type=1006 audit(1696276618.339:1189): pid=3098 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:56:58.339000 audit[3098]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7afe23a0 a2=3 a3=0 items=0 ppid=1 pid=3098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:58.381197 env[1300]: time="2023-10-02T19:56:58.380534394Z" level=info msg="RemoveContainer for \"d94526570a00cf10e3313d3142eb430805044b22550ac2b3f69ab080da71af2e\" returns successfully" Oct 2 19:56:58.388092 kernel: audit: type=1300 audit(1696276618.339:1189): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7afe23a0 a2=3 a3=0 items=0 ppid=1 pid=3098 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:58.339000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:58.358000 audit[3098]: USER_START pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.414709 kernel: audit: type=1327 audit(1696276618.339:1189): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:58.414793 kernel: audit: type=1105 audit(1696276618.358:1190): pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.420012 kernel: audit: type=1103 audit(1696276618.364:1191): pid=3136 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.364000 audit[3136]: CRED_ACQ pid=3136 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.822821 sshd[3098]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:58.824000 audit[3098]: USER_END pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.831103 systemd[1]: sshd@11-10.200.8.15:22-10.200.12.6:54348.service: Deactivated successfully. Oct 2 19:56:58.831919 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:56:58.833701 systemd-logind[1280]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:56:58.834695 systemd-logind[1280]: Removed session 14. Oct 2 19:56:58.827000 audit[3098]: CRED_DISP pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.861090 kernel: audit: type=1106 audit(1696276618.824:1192): pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.861248 kernel: audit: type=1104 audit(1696276618.827:1193): pid=3098 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:58.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:54348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:58.881180 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636-rootfs.mount: Deactivated successfully. Oct 2 19:57:01.148221 kubelet[2438]: W1002 19:57:01.148158 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636.scope WatchSource:0}: task 2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636 not found: not found Oct 2 19:57:01.982849 kubelet[2438]: E1002 19:57:01.982801 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:06.984249 kubelet[2438]: E1002 19:57:06.984208 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:08.925439 systemd[1]: Started sshd@12-10.200.8.15:22-10.200.12.6:50106.service. Oct 2 19:57:08.948847 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:08.949016 kernel: audit: type=1130 audit(1696276628.924:1195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:50106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:08.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:50106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:09.567000 audit[3148]: USER_ACCT pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.568549 sshd[3148]: Accepted publickey for core from 10.200.12.6 port 50106 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:09.586000 audit[3148]: CRED_ACQ pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.588387 sshd[3148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:09.595560 systemd[1]: Started session-15.scope. Oct 2 19:57:09.596207 systemd-logind[1280]: New session 15 of user core. Oct 2 19:57:09.611232 kernel: audit: type=1101 audit(1696276629.567:1196): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.611375 kernel: audit: type=1103 audit(1696276629.586:1197): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.624112 kernel: audit: type=1006 audit(1696276629.587:1198): pid=3148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:57:09.624248 kernel: audit: type=1300 audit(1696276629.587:1198): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe78331a0 a2=3 a3=0 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:09.587000 audit[3148]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe78331a0 a2=3 a3=0 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:09.587000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:09.642004 kernel: audit: type=1327 audit(1696276629.587:1198): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:09.601000 audit[3148]: USER_START pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.666663 kernel: audit: type=1105 audit(1696276629.601:1199): pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.666786 kernel: audit: type=1103 audit(1696276629.603:1200): pid=3151 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:09.603000 audit[3151]: CRED_ACQ pid=3151 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:10.066046 sshd[3148]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:10.066000 audit[3148]: USER_END pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:10.075310 systemd-logind[1280]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:10.076658 systemd[1]: sshd@12-10.200.8.15:22-10.200.12.6:50106.service: Deactivated successfully. Oct 2 19:57:10.077496 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:10.079219 systemd-logind[1280]: Removed session 15. Oct 2 19:57:10.092052 kernel: audit: type=1106 audit(1696276630.066:1201): pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:10.092141 kernel: audit: type=1104 audit(1696276630.067:1202): pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:10.067000 audit[3148]: CRED_DISP pid=3148 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:10.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:50106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.986566 kubelet[2438]: E1002 19:57:11.986518 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:12.854755 kubelet[2438]: E1002 19:57:12.854703 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:57:16.988101 kubelet[2438]: E1002 19:57:16.988060 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:20.198513 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:20.198671 kernel: audit: type=1130 audit(1696276640.173:1204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:42144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:20.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:42144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:20.173873 systemd[1]: Started sshd@13-10.200.8.15:22-10.200.12.6:42144.service. Oct 2 19:57:20.809000 audit[3167]: USER_ACCT pid=3167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.829960 sshd[3167]: Accepted publickey for core from 10.200.12.6 port 42144 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:20.830349 kernel: audit: type=1101 audit(1696276640.809:1205): pid=3167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.831214 sshd[3167]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:20.829000 audit[3167]: CRED_ACQ pid=3167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.838358 systemd[1]: Started session-16.scope. Oct 2 19:57:20.839498 systemd-logind[1280]: New session 16 of user core. Oct 2 19:57:20.854420 kernel: audit: type=1103 audit(1696276640.829:1206): pid=3167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.854511 kernel: audit: type=1006 audit(1696276640.829:1207): pid=3167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:20.829000 audit[3167]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd755ee510 a2=3 a3=0 items=0 ppid=1 pid=3167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:20.880423 kernel: audit: type=1300 audit(1696276640.829:1207): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd755ee510 a2=3 a3=0 items=0 ppid=1 pid=3167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:20.829000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:20.886619 kernel: audit: type=1327 audit(1696276640.829:1207): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:20.886709 kernel: audit: type=1105 audit(1696276640.846:1208): pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.846000 audit[3167]: USER_START pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.848000 audit[3169]: CRED_ACQ pid=3169 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:20.919450 kernel: audit: type=1103 audit(1696276640.848:1209): pid=3169 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:21.320463 sshd[3167]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:21.321000 audit[3167]: USER_END pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:21.324459 systemd[1]: sshd@13-10.200.8.15:22-10.200.12.6:42144.service: Deactivated successfully. Oct 2 19:57:21.325521 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:21.327423 systemd-logind[1280]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:21.328566 systemd-logind[1280]: Removed session 16. Oct 2 19:57:21.342008 kernel: audit: type=1106 audit(1696276641.321:1210): pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:21.342078 kernel: audit: type=1104 audit(1696276641.321:1211): pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:21.321000 audit[3167]: CRED_DISP pid=3167 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:21.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:42144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:21.989572 kubelet[2438]: E1002 19:57:21.989526 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:24.855129 kubelet[2438]: E1002 19:57:24.855083 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:57:26.991251 kubelet[2438]: E1002 19:57:26.991210 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:27.027000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:27.034334 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:27.034423 kernel: audit: type=1400 audit(1696276647.027:1213): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:27.027000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfa640 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:27.075884 kernel: audit: type=1300 audit(1696276647.027:1213): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfa640 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:27.076002 kernel: audit: type=1327 audit(1696276647.027:1213): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:27.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:27.070000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:27.070000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c041e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:27.133974 kernel: audit: type=1400 audit(1696276647.070:1214): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:27.134087 kernel: audit: type=1300 audit(1696276647.070:1214): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c041e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:27.134117 kernel: audit: type=1327 audit(1696276647.070:1214): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:27.070000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:28.289000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.307100 kernel: audit: type=1400 audit(1696276648.289:1215): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.307225 kernel: audit: type=1300 audit(1696276648.289:1215): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00bdb1dc0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.289000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00bdb1dc0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.289000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.344185 kernel: audit: type=1327 audit(1696276648.289:1215): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.344266 kernel: audit: type=1400 audit(1696276648.306:1216): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.306000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.306000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e72da40 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.306000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.306000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e72da70 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.319000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.319000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e72dc20 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.319000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.320000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.320000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00bdb1ec0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:28.320000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:28.320000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e8e1cb0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:57:28.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:31.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:31.424649 systemd[1]: Started sshd@14-10.200.8.15:22-10.200.12.6:49128.service. Oct 2 19:57:31.993042 kubelet[2438]: E1002 19:57:31.992979 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:32.063724 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:57:32.063864 kernel: audit: type=1101 audit(1696276652.055:1222): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.055000 audit[3183]: USER_ACCT pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.062659 sshd[3183]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:32.064283 sshd[3183]: Accepted publickey for core from 10.200.12.6 port 49128 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:32.068827 systemd[1]: Started session-17.scope. Oct 2 19:57:32.070035 systemd-logind[1280]: New session 17 of user core. Oct 2 19:57:32.061000 audit[3183]: CRED_ACQ pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.094644 kernel: audit: type=1103 audit(1696276652.061:1223): pid=3183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.094773 kernel: audit: type=1006 audit(1696276652.061:1224): pid=3183 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:32.061000 audit[3183]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda6035be0 a2=3 a3=0 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:32.105005 kernel: audit: type=1300 audit(1696276652.061:1224): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda6035be0 a2=3 a3=0 items=0 ppid=1 pid=3183 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:32.061000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:32.121005 kernel: audit: type=1327 audit(1696276652.061:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:32.074000 audit[3183]: USER_START pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.143468 kernel: audit: type=1105 audit(1696276652.074:1225): pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.143530 kernel: audit: type=1103 audit(1696276652.076:1226): pid=3187 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.076000 audit[3187]: CRED_ACQ pid=3187 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.555940 sshd[3183]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:32.556000 audit[3183]: USER_END pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.559829 systemd[1]: sshd@14-10.200.8.15:22-10.200.12.6:49128.service: Deactivated successfully. Oct 2 19:57:32.560807 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:32.562319 systemd-logind[1280]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:32.563424 systemd-logind[1280]: Removed session 17. Oct 2 19:57:32.556000 audit[3183]: CRED_DISP pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.591721 kernel: audit: type=1106 audit(1696276652.556:1227): pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.591804 kernel: audit: type=1104 audit(1696276652.556:1228): pid=3183 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:32.591830 kernel: audit: type=1131 audit(1696276652.556:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:32.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:34.045000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:34.045000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:34.045000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cfb7e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:34.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:34.045000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001040240 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:34.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:34.046000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:34.046000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001040260 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:34.046000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:34.046000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cfbd40 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:57:34.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:34.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:36.994341 kubelet[2438]: E1002 19:57:36.994302 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:38.855108 kubelet[2438]: E1002 19:57:38.855062 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:57:41.995729 kubelet[2438]: E1002 19:57:41.995695 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:42.688183 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 2 19:57:42.688318 kernel: audit: type=1130 audit(1696276662.662:1234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:42.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:42.663645 systemd[1]: Started sshd@15-10.200.8.15:22-10.200.12.6:60078.service. Oct 2 19:57:43.312000 audit[3200]: USER_ACCT pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.313641 sshd[3200]: Accepted publickey for core from 10.200.12.6 port 60078 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:43.331000 audit[3200]: CRED_ACQ pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.333551 sshd[3200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:43.339517 systemd[1]: Started session-18.scope. Oct 2 19:57:43.340032 systemd-logind[1280]: New session 18 of user core. Oct 2 19:57:43.351034 kernel: audit: type=1101 audit(1696276663.312:1235): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.351127 kernel: audit: type=1103 audit(1696276663.331:1236): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.351167 kernel: audit: type=1006 audit(1696276663.332:1237): pid=3200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 19:57:43.332000 audit[3200]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc295c82b0 a2=3 a3=0 items=0 ppid=1 pid=3200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:43.378298 kernel: audit: type=1300 audit(1696276663.332:1237): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc295c82b0 a2=3 a3=0 items=0 ppid=1 pid=3200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:43.332000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:43.379006 kernel: audit: type=1327 audit(1696276663.332:1237): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:43.346000 audit[3200]: USER_START pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.385054 kernel: audit: type=1105 audit(1696276663.346:1238): pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.348000 audit[3202]: CRED_ACQ pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.416963 kernel: audit: type=1103 audit(1696276663.348:1239): pid=3202 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.813409 sshd[3200]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:43.814000 audit[3200]: USER_END pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.817111 systemd-logind[1280]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:43.818622 systemd[1]: sshd@15-10.200.8.15:22-10.200.12.6:60078.service: Deactivated successfully. Oct 2 19:57:43.819423 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:43.820679 systemd-logind[1280]: Removed session 18. Oct 2 19:57:43.814000 audit[3200]: CRED_DISP pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.850169 kernel: audit: type=1106 audit(1696276663.814:1240): pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.850361 kernel: audit: type=1104 audit(1696276663.814:1241): pid=3200 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:43.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:60078 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:46.997102 kubelet[2438]: E1002 19:57:46.997063 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:51.998743 kubelet[2438]: E1002 19:57:51.998706 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:52.855491 kubelet[2438]: E1002 19:57:52.855444 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:57:53.920715 systemd[1]: Started sshd@16-10.200.8.15:22-10.200.12.6:55354.service. Oct 2 19:57:53.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:55354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.926276 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:53.926373 kernel: audit: type=1130 audit(1696276673.920:1243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:55354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.552000 audit[3216]: USER_ACCT pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.572510 sshd[3216]: Accepted publickey for core from 10.200.12.6 port 55354 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:54.572708 sshd[3216]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:54.573114 kernel: audit: type=1101 audit(1696276674.552:1244): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.553000 audit[3216]: CRED_ACQ pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.578216 systemd[1]: Started session-19.scope. Oct 2 19:57:54.579364 systemd-logind[1280]: New session 19 of user core. Oct 2 19:57:54.599519 kernel: audit: type=1103 audit(1696276674.553:1245): pid=3216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.599642 kernel: audit: type=1006 audit(1696276674.571:1246): pid=3216 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 19:57:54.599669 kernel: audit: type=1300 audit(1696276674.571:1246): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff25777890 a2=3 a3=0 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:54.571000 audit[3216]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff25777890 a2=3 a3=0 items=0 ppid=1 pid=3216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:54.616009 kernel: audit: type=1327 audit(1696276674.571:1246): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:54.571000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:54.583000 audit[3216]: USER_START pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.641107 kernel: audit: type=1105 audit(1696276674.583:1247): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.641182 kernel: audit: type=1103 audit(1696276674.586:1248): pid=3218 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:54.586000 audit[3218]: CRED_ACQ pid=3218 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:55.059952 sshd[3216]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:55.060000 audit[3216]: USER_END pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:55.064690 systemd[1]: sshd@16-10.200.8.15:22-10.200.12.6:55354.service: Deactivated successfully. Oct 2 19:57:55.065785 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:57:55.067591 systemd-logind[1280]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:57:55.068704 systemd-logind[1280]: Removed session 19. Oct 2 19:57:55.060000 audit[3216]: CRED_DISP pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:55.097626 kernel: audit: type=1106 audit(1696276675.060:1249): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:55.097713 kernel: audit: type=1104 audit(1696276675.060:1250): pid=3216 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:55.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:55354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:55.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:55.167893 systemd[1]: Started sshd@17-10.200.8.15:22-10.200.12.6:55370.service. Oct 2 19:57:56.156000 audit[3229]: USER_ACCT pid=3229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:56.157701 sshd[3229]: Accepted publickey for core from 10.200.12.6 port 55370 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:56.157000 audit[3229]: CRED_ACQ pid=3229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:56.157000 audit[3229]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcaf499a60 a2=3 a3=0 items=0 ppid=1 pid=3229 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:56.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:56.160111 sshd[3229]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:56.165317 systemd[1]: Started session-20.scope. Oct 2 19:57:56.165537 systemd-logind[1280]: New session 20 of user core. Oct 2 19:57:56.169000 audit[3229]: USER_START pid=3229 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:56.170000 audit[3231]: CRED_ACQ pid=3231 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.000176 kubelet[2438]: E1002 19:57:57.000135 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:57.579416 sshd[3229]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:57.580000 audit[3229]: USER_END pid=3229 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.580000 audit[3229]: CRED_DISP pid=3229 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:57.583369 systemd[1]: sshd@17-10.200.8.15:22-10.200.12.6:55370.service: Deactivated successfully. Oct 2 19:57:57.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:55370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.584668 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:57:57.585426 systemd-logind[1280]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:57:57.586303 systemd-logind[1280]: Removed session 20. Oct 2 19:57:57.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:45174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:57.697862 systemd[1]: Started sshd@18-10.200.8.15:22-10.200.12.6:45174.service. Oct 2 19:57:58.428000 audit[3239]: USER_ACCT pid=3239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.430127 sshd[3239]: Accepted publickey for core from 10.200.12.6 port 45174 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:58.430000 audit[3239]: CRED_ACQ pid=3239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.430000 audit[3239]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeebd6c7a0 a2=3 a3=0 items=0 ppid=1 pid=3239 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:58.430000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:58.431650 sshd[3239]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:58.437036 systemd-logind[1280]: New session 21 of user core. Oct 2 19:57:58.437554 systemd[1]: Started session-21.scope. Oct 2 19:57:58.441000 audit[3239]: USER_START pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.442000 audit[3241]: CRED_ACQ pid=3241 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.935136 sshd[3239]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:58.935000 audit[3239]: USER_END pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.939167 systemd[1]: sshd@18-10.200.8.15:22-10.200.12.6:45174.service: Deactivated successfully. Oct 2 19:57:58.940156 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:57:58.942391 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 19:57:58.942457 kernel: audit: type=1106 audit(1696276678.935:1267): pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.942726 systemd-logind[1280]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:57:58.943974 systemd-logind[1280]: Removed session 21. Oct 2 19:57:58.936000 audit[3239]: CRED_DISP pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.974920 kernel: audit: type=1104 audit(1696276678.936:1268): pid=3239 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:58.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:45174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:58.990432 kernel: audit: type=1131 audit(1696276678.938:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:45174 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:02.001248 kubelet[2438]: E1002 19:58:02.001203 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:04.855534 kubelet[2438]: E1002 19:58:04.855492 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:58:07.002200 kubelet[2438]: E1002 19:58:07.002163 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:09.041348 systemd[1]: Started sshd@19-10.200.8.15:22-10.200.12.6:49666.service. Oct 2 19:58:09.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:49666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:09.061065 kernel: audit: type=1130 audit(1696276689.041:1270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:49666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:09.667000 audit[3250]: USER_ACCT pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.687916 sshd[3250]: Accepted publickey for core from 10.200.12.6 port 49666 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:09.688302 kernel: audit: type=1101 audit(1696276689.667:1271): pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.688313 sshd[3250]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:09.686000 audit[3250]: CRED_ACQ pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.693859 systemd[1]: Started session-22.scope. Oct 2 19:58:09.695072 systemd-logind[1280]: New session 22 of user core. Oct 2 19:58:09.716655 kernel: audit: type=1103 audit(1696276689.686:1272): pid=3250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.716775 kernel: audit: type=1006 audit(1696276689.686:1273): pid=3250 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:58:09.716827 kernel: audit: type=1300 audit(1696276689.686:1273): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd546447e0 a2=3 a3=0 items=0 ppid=1 pid=3250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:09.686000 audit[3250]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd546447e0 a2=3 a3=0 items=0 ppid=1 pid=3250 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:09.686000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:09.734005 kernel: audit: type=1327 audit(1696276689.686:1273): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:09.699000 audit[3250]: USER_START pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.739062 kernel: audit: type=1105 audit(1696276689.699:1274): pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.701000 audit[3252]: CRED_ACQ pid=3252 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:09.773366 kernel: audit: type=1103 audit(1696276689.701:1275): pid=3252 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.176510 sshd[3250]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:10.177000 audit[3250]: USER_END pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.180302 systemd[1]: sshd@19-10.200.8.15:22-10.200.12.6:49666.service: Deactivated successfully. Oct 2 19:58:10.181145 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:10.182788 systemd-logind[1280]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:10.183724 systemd-logind[1280]: Removed session 22. Oct 2 19:58:10.177000 audit[3250]: CRED_DISP pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.213177 kernel: audit: type=1106 audit(1696276690.177:1276): pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.213261 kernel: audit: type=1104 audit(1696276690.177:1277): pid=3250 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:10.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:49666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:12.003790 kubelet[2438]: E1002 19:58:12.003751 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:17.004951 kubelet[2438]: E1002 19:58:17.004905 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:17.856924 kubelet[2438]: E1002 19:58:17.856787 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:58:20.283533 systemd[1]: Started sshd@20-10.200.8.15:22-10.200.12.6:54352.service. Oct 2 19:58:20.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:54352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:20.292780 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:20.292870 kernel: audit: type=1130 audit(1696276700.283:1279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:54352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:20.913000 audit[3264]: USER_ACCT pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.914438 sshd[3264]: Accepted publickey for core from 10.200.12.6 port 54352 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:20.931000 audit[3264]: CRED_ACQ pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.933285 sshd[3264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:20.938694 systemd[1]: Started session-23.scope. Oct 2 19:58:20.940436 systemd-logind[1280]: New session 23 of user core. Oct 2 19:58:20.949260 kernel: audit: type=1101 audit(1696276700.913:1280): pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.949350 kernel: audit: type=1103 audit(1696276700.931:1281): pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.949383 kernel: audit: type=1006 audit(1696276700.931:1282): pid=3264 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:58:20.931000 audit[3264]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8158af50 a2=3 a3=0 items=0 ppid=1 pid=3264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:20.976300 kernel: audit: type=1300 audit(1696276700.931:1282): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8158af50 a2=3 a3=0 items=0 ppid=1 pid=3264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:20.979610 kernel: audit: type=1327 audit(1696276700.931:1282): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:20.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:20.942000 audit[3264]: USER_START pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.985023 kernel: audit: type=1105 audit(1696276700.942:1283): pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:20.942000 audit[3266]: CRED_ACQ pid=3266 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.006008 kernel: audit: type=1103 audit(1696276700.942:1284): pid=3266 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.422831 sshd[3264]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:21.423000 audit[3264]: USER_END pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.426874 systemd-logind[1280]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:21.428766 systemd[1]: sshd@20-10.200.8.15:22-10.200.12.6:54352.service: Deactivated successfully. Oct 2 19:58:21.429699 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:21.431365 systemd-logind[1280]: Removed session 23. Oct 2 19:58:21.423000 audit[3264]: CRED_DISP pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.460044 kernel: audit: type=1106 audit(1696276701.423:1285): pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.460135 kernel: audit: type=1104 audit(1696276701.423:1286): pid=3264 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:21.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:54352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:22.006122 kubelet[2438]: E1002 19:58:22.006081 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:27.006887 kubelet[2438]: E1002 19:58:27.006824 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:27.027000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:27.033190 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:27.033276 kernel: audit: type=1400 audit(1696276707.027:1288): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:27.027000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fc80 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:27.049097 kernel: audit: type=1300 audit(1696276707.027:1288): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00238fc80 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:27.027000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:27.072014 kernel: audit: type=1327 audit(1696276707.027:1288): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:27.076000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:27.089013 kernel: audit: type=1400 audit(1696276707.076:1289): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:27.076000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e16d20 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:27.124721 kernel: audit: type=1300 audit(1696276707.076:1289): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e16d20 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:27.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:27.142354 kernel: audit: type=1327 audit(1696276707.076:1289): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:28.289000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.289000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001901660 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.307198 kernel: audit: type=1400 audit(1696276708.289:1290): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.307242 kernel: audit: type=1300 audit(1696276708.289:1290): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001901660 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.327734 kernel: audit: type=1327 audit(1696276708.289:1290): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.289000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.325000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.359189 kernel: audit: type=1400 audit(1696276708.325:1291): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.325000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00d11f500 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.325000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.325000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00d1ae1e0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.325000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.325000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00d11f530 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.325000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.325000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00d11f560 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:28.325000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:28.325000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001901680 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:58:28.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:31.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:34916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:31.529493 systemd[1]: Started sshd@21-10.200.8.15:22-10.200.12.6:34916.service. Oct 2 19:58:31.856425 kubelet[2438]: E1002 19:58:31.856109 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:58:32.008578 kubelet[2438]: E1002 19:58:32.008532 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:32.159000 audit[3277]: USER_ACCT pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.163392 sshd[3277]: Accepted publickey for core from 10.200.12.6 port 34916 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:32.186032 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:58:32.186198 kernel: audit: type=1101 audit(1696276712.159:1297): pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.185000 audit[3277]: CRED_ACQ pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.191825 systemd[1]: Started session-24.scope. Oct 2 19:58:32.186705 sshd[3277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:32.192818 systemd-logind[1280]: New session 24 of user core. Oct 2 19:58:32.212170 kernel: audit: type=1103 audit(1696276712.185:1298): pid=3277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.212284 kernel: audit: type=1006 audit(1696276712.185:1299): pid=3277 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:32.212309 kernel: audit: type=1300 audit(1696276712.185:1299): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd0532290 a2=3 a3=0 items=0 ppid=1 pid=3277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:32.185000 audit[3277]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd0532290 a2=3 a3=0 items=0 ppid=1 pid=3277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:32.234264 kernel: audit: type=1327 audit(1696276712.185:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:32.234396 kernel: audit: type=1105 audit(1696276712.198:1300): pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.185000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:32.198000 audit[3277]: USER_START pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.252011 kernel: audit: type=1103 audit(1696276712.202:1301): pid=3281 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.202000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.672372 sshd[3277]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:32.673000 audit[3277]: USER_END pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.676207 systemd[1]: sshd@21-10.200.8.15:22-10.200.12.6:34916.service: Deactivated successfully. Oct 2 19:58:32.677042 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:32.678521 systemd-logind[1280]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:32.679458 systemd-logind[1280]: Removed session 24. Oct 2 19:58:32.673000 audit[3277]: CRED_DISP pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.708249 kernel: audit: type=1106 audit(1696276712.673:1302): pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.708329 kernel: audit: type=1104 audit(1696276712.673:1303): pid=3277 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:32.708359 kernel: audit: type=1131 audit(1696276712.673:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:34916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:32.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:34916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:34.045000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:34.045000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002364980 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:34.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:34.047000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:34.047000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:34.047000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00242e1a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:34.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:34.047000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0023649a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:34.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:34.048000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:34.048000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023649c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:58:34.048000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:37.009826 kubelet[2438]: E1002 19:58:37.009786 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:42.010651 kubelet[2438]: E1002 19:58:42.010610 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:42.803352 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 2 19:58:42.803511 kernel: audit: type=1130 audit(1696276722.779:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:42708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:42.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:42708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:42.780535 systemd[1]: Started sshd@22-10.200.8.15:22-10.200.12.6:42708.service. Oct 2 19:58:42.855353 kubelet[2438]: E1002 19:58:42.855272 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:58:43.413000 audit[3291]: USER_ACCT pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.434881 sshd[3291]: Accepted publickey for core from 10.200.12.6 port 42708 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:43.435257 kernel: audit: type=1101 audit(1696276723.413:1310): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.432000 audit[3291]: CRED_ACQ pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.435356 sshd[3291]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:43.441432 systemd[1]: Started session-25.scope. Oct 2 19:58:43.442566 systemd-logind[1280]: New session 25 of user core. Oct 2 19:58:43.452014 kernel: audit: type=1103 audit(1696276723.432:1311): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.452107 kernel: audit: type=1006 audit(1696276723.432:1312): pid=3291 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:58:43.432000 audit[3291]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee6e10e70 a2=3 a3=0 items=0 ppid=1 pid=3291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:43.462018 kernel: audit: type=1300 audit(1696276723.432:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee6e10e70 a2=3 a3=0 items=0 ppid=1 pid=3291 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:43.432000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:43.483938 kernel: audit: type=1327 audit(1696276723.432:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:43.445000 audit[3291]: USER_START pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.502115 kernel: audit: type=1105 audit(1696276723.445:1313): pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.502220 kernel: audit: type=1103 audit(1696276723.448:1314): pid=3293 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.448000 audit[3293]: CRED_ACQ pid=3293 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.920810 sshd[3291]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:43.920000 audit[3291]: USER_END pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.925482 systemd[1]: sshd@22-10.200.8.15:22-10.200.12.6:42708.service: Deactivated successfully. Oct 2 19:58:43.926217 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:43.928033 systemd-logind[1280]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:43.929156 systemd-logind[1280]: Removed session 25. Oct 2 19:58:43.921000 audit[3291]: CRED_DISP pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.962589 kernel: audit: type=1106 audit(1696276723.920:1315): pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.962711 kernel: audit: type=1104 audit(1696276723.921:1316): pid=3291 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:43.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:42708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:47.012039 kubelet[2438]: E1002 19:58:47.011981 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:52.013501 kubelet[2438]: E1002 19:58:52.013453 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:54.055057 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:54.055220 kernel: audit: type=1130 audit(1696276734.027:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:41070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:54.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:41070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:54.028667 systemd[1]: Started sshd@23-10.200.8.15:22-10.200.12.6:41070.service. Oct 2 19:58:54.667000 audit[3305]: USER_ACCT pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.687873 sshd[3305]: Accepted publickey for core from 10.200.12.6 port 41070 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:54.688278 kernel: audit: type=1101 audit(1696276734.667:1319): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.688277 sshd[3305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:54.686000 audit[3305]: CRED_ACQ pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.693558 systemd[1]: Started session-26.scope. Oct 2 19:58:54.694592 systemd-logind[1280]: New session 26 of user core. Oct 2 19:58:54.715891 kernel: audit: type=1103 audit(1696276734.686:1320): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.716037 kernel: audit: type=1006 audit(1696276734.686:1321): pid=3305 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:58:54.716072 kernel: audit: type=1300 audit(1696276734.686:1321): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff28c6fb20 a2=3 a3=0 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:54.686000 audit[3305]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff28c6fb20 a2=3 a3=0 items=0 ppid=1 pid=3305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:54.732307 kernel: audit: type=1327 audit(1696276734.686:1321): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:54.686000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:54.738373 kernel: audit: type=1105 audit(1696276734.699:1322): pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.699000 audit[3305]: USER_START pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.702000 audit[3307]: CRED_ACQ pid=3307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:54.772013 kernel: audit: type=1103 audit(1696276734.702:1323): pid=3307 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:55.175860 sshd[3305]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:55.176000 audit[3305]: USER_END pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:55.179200 systemd-logind[1280]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:58:55.180597 systemd[1]: sshd@23-10.200.8.15:22-10.200.12.6:41070.service: Deactivated successfully. Oct 2 19:58:55.181389 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:58:55.182917 systemd-logind[1280]: Removed session 26. Oct 2 19:58:55.176000 audit[3305]: CRED_DISP pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:55.214198 kernel: audit: type=1106 audit(1696276735.176:1324): pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:55.214313 kernel: audit: type=1104 audit(1696276735.176:1325): pid=3305 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:55.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:41070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:56.855322 kubelet[2438]: E1002 19:58:56.855269 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:58:57.014547 kubelet[2438]: E1002 19:58:57.014503 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:02.016216 kubelet[2438]: E1002 19:59:02.016180 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:05.293176 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:05.293334 kernel: audit: type=1130 audit(1696276745.282:1327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:05.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:05.282820 systemd[1]: Started sshd@24-10.200.8.15:22-10.200.12.6:44800.service. Oct 2 19:59:06.282000 audit[3317]: USER_ACCT pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.306668 sshd[3317]: Accepted publickey for core from 10.200.12.6 port 44800 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:06.307045 kernel: audit: type=1101 audit(1696276746.282:1328): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.305000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.314268 systemd[1]: Started session-27.scope. Oct 2 19:59:06.308336 sshd[3317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:06.315950 systemd-logind[1280]: New session 27 of user core. Oct 2 19:59:06.338210 kernel: audit: type=1103 audit(1696276746.305:1329): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.338317 kernel: audit: type=1006 audit(1696276746.305:1330): pid=3317 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:59:06.338355 kernel: audit: type=1300 audit(1696276746.305:1330): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe75a653a0 a2=3 a3=0 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:06.305000 audit[3317]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe75a653a0 a2=3 a3=0 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:06.305000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:06.355005 kernel: audit: type=1327 audit(1696276746.305:1330): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:06.322000 audit[3317]: USER_START pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.377224 kernel: audit: type=1105 audit(1696276746.322:1331): pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.377296 kernel: audit: type=1103 audit(1696276746.324:1332): pid=3319 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.324000 audit[3319]: CRED_ACQ pid=3319 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.822492 sshd[3317]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:06.823000 audit[3317]: USER_END pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.835698 systemd[1]: sshd@24-10.200.8.15:22-10.200.12.6:44800.service: Deactivated successfully. Oct 2 19:59:06.836566 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:59:06.837906 systemd-logind[1280]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:59:06.838861 systemd-logind[1280]: Removed session 27. Oct 2 19:59:06.849607 kernel: audit: type=1106 audit(1696276746.823:1333): pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.849679 kernel: audit: type=1104 audit(1696276746.828:1334): pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.828000 audit[3317]: CRED_DISP pid=3317 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:06.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44800 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:07.017948 kubelet[2438]: E1002 19:59:07.017911 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:11.855341 kubelet[2438]: E1002 19:59:11.855302 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:59:12.019533 kubelet[2438]: E1002 19:59:12.019489 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:16.926363 systemd[1]: Started sshd@25-10.200.8.15:22-10.200.12.6:52130.service. Oct 2 19:59:16.949182 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:16.949312 kernel: audit: type=1130 audit(1696276756.925:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:52130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:16.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:52130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:17.020742 kubelet[2438]: E1002 19:59:17.020697 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:17.690000 audit[3331]: USER_ACCT pid=3331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.692121 sshd[3331]: Accepted publickey for core from 10.200.12.6 port 52130 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:17.712156 kernel: audit: type=1101 audit(1696276757.690:1337): pid=3331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.712273 kernel: audit: type=1103 audit(1696276757.710:1338): pid=3331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.710000 audit[3331]: CRED_ACQ pid=3331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.711771 sshd[3331]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:17.717783 systemd[1]: Started session-28.scope. Oct 2 19:59:17.719640 systemd-logind[1280]: New session 28 of user core. Oct 2 19:59:17.740830 kernel: audit: type=1006 audit(1696276757.710:1339): pid=3331 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:17.740964 kernel: audit: type=1300 audit(1696276757.710:1339): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6e25ccf0 a2=3 a3=0 items=0 ppid=1 pid=3331 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:17.710000 audit[3331]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6e25ccf0 a2=3 a3=0 items=0 ppid=1 pid=3331 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:17.710000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:17.764687 kernel: audit: type=1327 audit(1696276757.710:1339): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:17.764796 kernel: audit: type=1105 audit(1696276757.720:1340): pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.720000 audit[3331]: USER_START pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.725000 audit[3333]: CRED_ACQ pid=3333 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:17.798771 kernel: audit: type=1103 audit(1696276757.725:1341): pid=3333 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:18.274696 sshd[3331]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:18.275000 audit[3331]: USER_END pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:18.278511 systemd[1]: sshd@25-10.200.8.15:22-10.200.12.6:52130.service: Deactivated successfully. Oct 2 19:59:18.279363 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:18.281076 systemd-logind[1280]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:18.282031 systemd-logind[1280]: Removed session 28. Oct 2 19:59:18.275000 audit[3331]: CRED_DISP pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:18.295074 kernel: audit: type=1106 audit(1696276758.275:1342): pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:18.295114 kernel: audit: type=1104 audit(1696276758.275:1343): pid=3331 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:18.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:52130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:22.023008 kubelet[2438]: E1002 19:59:22.022955 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:26.855568 kubelet[2438]: E1002 19:59:26.855517 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:59:27.024603 kubelet[2438]: E1002 19:59:27.024562 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:27.028000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:27.035649 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:27.035739 kernel: audit: type=1400 audit(1696276767.028:1345): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:27.028000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000adf20 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:27.074898 kernel: audit: type=1300 audit(1696276767.028:1345): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000adf20 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:27.075032 kernel: audit: type=1327 audit(1696276767.028:1345): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:27.028000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:27.077000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:27.077000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001452b40 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:27.109348 kernel: audit: type=1400 audit(1696276767.077:1346): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:27.109418 kernel: audit: type=1300 audit(1696276767.077:1346): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001452b40 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:27.077000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:27.148143 kernel: audit: type=1327 audit(1696276767.077:1346): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:28.290000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.290000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001880ea0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.329210 kernel: audit: type=1400 audit(1696276768.290:1347): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.329360 kernel: audit: type=1300 audit(1696276768.290:1347): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001880ea0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.346590 kernel: audit: type=1327 audit(1696276768.290:1347): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.326000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.362819 kernel: audit: type=1400 audit(1696276768.326:1348): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.326000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b02be90 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.326000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.327000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.327000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b02bf80 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.327000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.327000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001880f20 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.327000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.327000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b0cc330 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.327000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:28.327000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b0cc360 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 19:59:28.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:28.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:28.380369 systemd[1]: Started sshd@26-10.200.8.15:22-10.200.12.6:34644.service. Oct 2 19:59:29.001000 audit[3343]: USER_ACCT pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.003110 sshd[3343]: Accepted publickey for core from 10.200.12.6 port 34644 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:29.003000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.003000 audit[3343]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc423b0690 a2=3 a3=0 items=0 ppid=1 pid=3343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:29.003000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:29.004933 sshd[3343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:29.011071 systemd-logind[1280]: New session 29 of user core. Oct 2 19:59:29.011681 systemd[1]: Started session-29.scope. Oct 2 19:59:29.016000 audit[3343]: USER_START pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.018000 audit[3345]: CRED_ACQ pid=3345 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.493879 sshd[3343]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:29.494000 audit[3343]: USER_END pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.494000 audit[3343]: CRED_DISP pid=3343 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:29.497215 systemd[1]: sshd@26-10.200.8.15:22-10.200.12.6:34644.service: Deactivated successfully. Oct 2 19:59:29.498198 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:29.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:29.499142 systemd-logind[1280]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:29.500007 systemd-logind[1280]: Removed session 29. Oct 2 19:59:32.026324 kubelet[2438]: E1002 19:59:32.026277 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:34.046000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.053672 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:59:34.053780 kernel: audit: type=1400 audit(1696276774.046:1362): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.046000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3a980 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.090692 kernel: audit: type=1300 audit(1696276774.046:1362): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3a980 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.090841 kernel: audit: type=1327 audit(1696276774.046:1362): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.051000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.127413 kernel: audit: type=1400 audit(1696276774.051:1363): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.127498 kernel: audit: type=1300 audit(1696276774.051:1363): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3c8a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.051000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3c8a0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.051000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.181630 kernel: audit: type=1327 audit(1696276774.051:1363): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.181719 kernel: audit: type=1400 audit(1696276774.051:1364): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.181749 kernel: audit: type=1300 audit(1696276774.051:1364): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3c8c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.051000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d3c8c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.203000 kernel: audit: type=1327 audit(1696276774.051:1364): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:34.052000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.235004 kernel: audit: type=1400 audit(1696276774.052:1365): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:34.052000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3a9c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 19:59:34.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:37.027643 kubelet[2438]: E1002 19:59:37.027593 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:39.627321 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:59:39.627478 kernel: audit: type=1130 audit(1696276779.601:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:41204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:39.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:41204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:39.601804 systemd[1]: Started sshd@27-10.200.8.15:22-10.200.12.6:41204.service. Oct 2 19:59:40.231000 audit[3357]: USER_ACCT pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.254637 sshd[3357]: Accepted publickey for core from 10.200.12.6 port 41204 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:40.255085 kernel: audit: type=1101 audit(1696276780.231:1367): pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.255168 sshd[3357]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:40.253000 audit[3357]: CRED_ACQ pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.265555 systemd[1]: Started session-30.scope. Oct 2 19:59:40.267168 systemd-logind[1280]: New session 30 of user core. Oct 2 19:59:40.285481 kernel: audit: type=1103 audit(1696276780.253:1368): pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.285608 kernel: audit: type=1006 audit(1696276780.253:1369): pid=3357 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:59:40.285634 kernel: audit: type=1300 audit(1696276780.253:1369): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd13366780 a2=3 a3=0 items=0 ppid=1 pid=3357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:40.253000 audit[3357]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd13366780 a2=3 a3=0 items=0 ppid=1 pid=3357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:40.253000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:40.309171 kernel: audit: type=1327 audit(1696276780.253:1369): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:40.309284 kernel: audit: type=1105 audit(1696276780.270:1370): pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.270000 audit[3357]: USER_START pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.270000 audit[3359]: CRED_ACQ pid=3359 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.329075 kernel: audit: type=1103 audit(1696276780.270:1371): pid=3359 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.741261 sshd[3357]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:40.741000 audit[3357]: USER_END pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.745009 systemd[1]: sshd@27-10.200.8.15:22-10.200.12.6:41204.service: Deactivated successfully. Oct 2 19:59:40.745886 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:59:40.747569 systemd-logind[1280]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:59:40.748635 systemd-logind[1280]: Removed session 30. Oct 2 19:59:40.741000 audit[3357]: CRED_DISP pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.777004 kernel: audit: type=1106 audit(1696276780.741:1372): pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.777098 kernel: audit: type=1104 audit(1696276780.741:1373): pid=3357 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:40.741000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:41204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:40.845060 systemd[1]: Started sshd@28-10.200.8.15:22-10.200.12.6:41206.service. Oct 2 19:59:40.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:41206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:41.468000 audit[3368]: USER_ACCT pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:41.469563 sshd[3368]: Accepted publickey for core from 10.200.12.6 port 41206 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:41.469000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:41.469000 audit[3368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff506c440 a2=3 a3=0 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:41.469000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:41.471325 sshd[3368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:41.476788 systemd[1]: Started session-31.scope. Oct 2 19:59:41.477482 systemd-logind[1280]: New session 31 of user core. Oct 2 19:59:41.481000 audit[3368]: USER_START pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:41.482000 audit[3370]: CRED_ACQ pid=3370 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:41.859462 env[1300]: time="2023-10-02T19:59:41.859345025Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 19:59:41.886308 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2638570215.mount: Deactivated successfully. Oct 2 19:59:41.896801 env[1300]: time="2023-10-02T19:59:41.896743879Z" level=info msg="CreateContainer within sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\"" Oct 2 19:59:41.897895 env[1300]: time="2023-10-02T19:59:41.897858113Z" level=info msg="StartContainer for \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\"" Oct 2 19:59:41.932242 systemd[1]: Started cri-containerd-f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81.scope. Oct 2 19:59:41.938832 systemd[1]: run-containerd-runc-k8s.io-f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81-runc.EKSSAs.mount: Deactivated successfully. Oct 2 19:59:41.955118 systemd[1]: cri-containerd-f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81.scope: Deactivated successfully. Oct 2 19:59:42.028761 kubelet[2438]: E1002 19:59:42.028721 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:42.068819 env[1300]: time="2023-10-02T19:59:42.068756976Z" level=info msg="shim disconnected" id=f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81 Oct 2 19:59:42.068819 env[1300]: time="2023-10-02T19:59:42.068811277Z" level=warning msg="cleaning up after shim disconnected" id=f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81 namespace=k8s.io Oct 2 19:59:42.068819 env[1300]: time="2023-10-02T19:59:42.068822378Z" level=info msg="cleaning up dead shim" Oct 2 19:59:42.079014 env[1300]: time="2023-10-02T19:59:42.078944989Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3399 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:42.079503 env[1300]: time="2023-10-02T19:59:42.079440004Z" level=error msg="copy shim log" error="read /proc/self/fd/43: file already closed" Oct 2 19:59:42.082098 env[1300]: time="2023-10-02T19:59:42.079827716Z" level=error msg="Failed to pipe stderr of container \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\"" error="reading from a closed fifo" Oct 2 19:59:42.082265 env[1300]: time="2023-10-02T19:59:42.082033283Z" level=error msg="Failed to pipe stdout of container \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\"" error="reading from a closed fifo" Oct 2 19:59:42.088184 env[1300]: time="2023-10-02T19:59:42.088138871Z" level=error msg="StartContainer for \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:42.088907 kubelet[2438]: E1002 19:59:42.088497 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81" Oct 2 19:59:42.088907 kubelet[2438]: E1002 19:59:42.088638 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:42.088907 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:42.088907 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:59:42.089197 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-8psr4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:42.089292 kubelet[2438]: E1002 19:59:42.088686 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:59:42.679880 kubelet[2438]: I1002 19:59:42.679845 2438 scope.go:115] "RemoveContainer" containerID="2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636" Oct 2 19:59:42.680363 kubelet[2438]: I1002 19:59:42.680343 2438 scope.go:115] "RemoveContainer" containerID="2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636" Oct 2 19:59:42.685852 env[1300]: time="2023-10-02T19:59:42.685806816Z" level=info msg="RemoveContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" Oct 2 19:59:42.686453 env[1300]: time="2023-10-02T19:59:42.685859717Z" level=info msg="RemoveContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\"" Oct 2 19:59:42.686776 env[1300]: time="2023-10-02T19:59:42.686733444Z" level=error msg="RemoveContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\" failed" error="failed to set removing state for container \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\": container is already in removing state" Oct 2 19:59:42.687222 kubelet[2438]: E1002 19:59:42.687135 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\": container is already in removing state" containerID="2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636" Oct 2 19:59:42.687222 kubelet[2438]: I1002 19:59:42.687178 2438 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636} err="rpc error: code = Unknown desc = failed to set removing state for container \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\": container is already in removing state" Oct 2 19:59:42.698223 env[1300]: time="2023-10-02T19:59:42.698184396Z" level=info msg="RemoveContainer for \"2b1ada236f0bb065c066d1eac5d2e8d8372664208bad7fda0d7fd1b3ed75b636\" returns successfully" Oct 2 19:59:42.699873 kubelet[2438]: E1002 19:59:42.699837 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-d2jhr_kube-system(233eaaeb-c23c-4b7a-a377-fd062c18f6c9)\"" pod="kube-system/cilium-d2jhr" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 Oct 2 19:59:42.880998 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81-rootfs.mount: Deactivated successfully. Oct 2 19:59:43.144037 env[1300]: time="2023-10-02T19:59:43.143969956Z" level=info msg="StopContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" with timeout 30 (s)" Oct 2 19:59:43.144658 env[1300]: time="2023-10-02T19:59:43.144516873Z" level=info msg="Stop container \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" with signal terminated" Oct 2 19:59:43.160254 systemd[1]: cri-containerd-9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d.scope: Deactivated successfully. Oct 2 19:59:43.159000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:59:43.166000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:59:43.183547 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d-rootfs.mount: Deactivated successfully. Oct 2 19:59:43.199248 env[1300]: time="2023-10-02T19:59:43.199191742Z" level=info msg="shim disconnected" id=9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d Oct 2 19:59:43.199480 env[1300]: time="2023-10-02T19:59:43.199256344Z" level=warning msg="cleaning up after shim disconnected" id=9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d namespace=k8s.io Oct 2 19:59:43.199480 env[1300]: time="2023-10-02T19:59:43.199269644Z" level=info msg="cleaning up dead shim" Oct 2 19:59:43.207960 env[1300]: time="2023-10-02T19:59:43.207920108Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3430 runtime=io.containerd.runc.v2\n" Oct 2 19:59:43.213746 env[1300]: time="2023-10-02T19:59:43.213707085Z" level=info msg="StopContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" returns successfully" Oct 2 19:59:43.214574 env[1300]: time="2023-10-02T19:59:43.214511410Z" level=info msg="StopPodSandbox for \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\"" Oct 2 19:59:43.214686 env[1300]: time="2023-10-02T19:59:43.214588312Z" level=info msg="Container to stop \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:43.217576 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a-shm.mount: Deactivated successfully. Oct 2 19:59:43.226453 systemd[1]: cri-containerd-033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a.scope: Deactivated successfully. Oct 2 19:59:43.225000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:59:43.230000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:59:43.247847 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a-rootfs.mount: Deactivated successfully. Oct 2 19:59:43.260275 env[1300]: time="2023-10-02T19:59:43.260227706Z" level=info msg="shim disconnected" id=033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a Oct 2 19:59:43.260434 env[1300]: time="2023-10-02T19:59:43.260279407Z" level=warning msg="cleaning up after shim disconnected" id=033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a namespace=k8s.io Oct 2 19:59:43.260434 env[1300]: time="2023-10-02T19:59:43.260292108Z" level=info msg="cleaning up dead shim" Oct 2 19:59:43.268214 env[1300]: time="2023-10-02T19:59:43.268182148Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3462 runtime=io.containerd.runc.v2\n" Oct 2 19:59:43.268512 env[1300]: time="2023-10-02T19:59:43.268479558Z" level=info msg="TearDown network for sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" successfully" Oct 2 19:59:43.268593 env[1300]: time="2023-10-02T19:59:43.268510758Z" level=info msg="StopPodSandbox for \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" returns successfully" Oct 2 19:59:43.352707 kubelet[2438]: I1002 19:59:43.352653 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5m9q9\" (UniqueName: \"kubernetes.io/projected/657f4b13-b03f-4498-910b-dd5721b301b3-kube-api-access-5m9q9\") pod \"657f4b13-b03f-4498-910b-dd5721b301b3\" (UID: \"657f4b13-b03f-4498-910b-dd5721b301b3\") " Oct 2 19:59:43.352707 kubelet[2438]: I1002 19:59:43.352715 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/657f4b13-b03f-4498-910b-dd5721b301b3-cilium-config-path\") pod \"657f4b13-b03f-4498-910b-dd5721b301b3\" (UID: \"657f4b13-b03f-4498-910b-dd5721b301b3\") " Oct 2 19:59:43.353398 kubelet[2438]: W1002 19:59:43.353059 2438 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/657f4b13-b03f-4498-910b-dd5721b301b3/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:43.356349 kubelet[2438]: I1002 19:59:43.356307 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/657f4b13-b03f-4498-910b-dd5721b301b3-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "657f4b13-b03f-4498-910b-dd5721b301b3" (UID: "657f4b13-b03f-4498-910b-dd5721b301b3"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:43.359969 systemd[1]: var-lib-kubelet-pods-657f4b13\x2db03f\x2d4498\x2d910b\x2ddd5721b301b3-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5m9q9.mount: Deactivated successfully. Oct 2 19:59:43.360764 kubelet[2438]: I1002 19:59:43.360736 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/657f4b13-b03f-4498-910b-dd5721b301b3-kube-api-access-5m9q9" (OuterVolumeSpecName: "kube-api-access-5m9q9") pod "657f4b13-b03f-4498-910b-dd5721b301b3" (UID: "657f4b13-b03f-4498-910b-dd5721b301b3"). InnerVolumeSpecName "kube-api-access-5m9q9". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:43.453143 kubelet[2438]: I1002 19:59:43.453028 2438 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-5m9q9\" (UniqueName: \"kubernetes.io/projected/657f4b13-b03f-4498-910b-dd5721b301b3-kube-api-access-5m9q9\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.453143 kubelet[2438]: I1002 19:59:43.453062 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/657f4b13-b03f-4498-910b-dd5721b301b3-cilium-config-path\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.683313 kubelet[2438]: I1002 19:59:43.683276 2438 scope.go:115] "RemoveContainer" containerID="9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d" Oct 2 19:59:43.686485 env[1300]: time="2023-10-02T19:59:43.686435219Z" level=info msg="RemoveContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\"" Oct 2 19:59:43.689674 systemd[1]: Removed slice kubepods-besteffort-pod657f4b13_b03f_4498_910b_dd5721b301b3.slice. Oct 2 19:59:43.692222 env[1300]: time="2023-10-02T19:59:43.692176894Z" level=info msg="StopPodSandbox for \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\"" Oct 2 19:59:43.692383 env[1300]: time="2023-10-02T19:59:43.692249096Z" level=info msg="Container to stop \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:43.696922 env[1300]: time="2023-10-02T19:59:43.696884538Z" level=info msg="RemoveContainer for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" returns successfully" Oct 2 19:59:43.698320 kubelet[2438]: I1002 19:59:43.698290 2438 scope.go:115] "RemoveContainer" containerID="9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d" Oct 2 19:59:43.702016 env[1300]: time="2023-10-02T19:59:43.699297911Z" level=error msg="ContainerStatus for \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\": not found" Oct 2 19:59:43.702102 kubelet[2438]: E1002 19:59:43.699585 2438 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\": not found" containerID="9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d" Oct 2 19:59:43.702102 kubelet[2438]: I1002 19:59:43.699622 2438 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d} err="failed to get container status \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\": rpc error: code = NotFound desc = an error occurred when try to find container \"9fb441df6827dfc72ce471ffff026f46bcfd79848c0168a6881d72df8996bb0d\": not found" Oct 2 19:59:43.706000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:59:43.707077 systemd[1]: cri-containerd-4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07.scope: Deactivated successfully. Oct 2 19:59:43.712000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:59:43.771711 env[1300]: time="2023-10-02T19:59:43.771661821Z" level=info msg="shim disconnected" id=4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07 Oct 2 19:59:43.771711 env[1300]: time="2023-10-02T19:59:43.771708322Z" level=warning msg="cleaning up after shim disconnected" id=4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07 namespace=k8s.io Oct 2 19:59:43.772012 env[1300]: time="2023-10-02T19:59:43.771719823Z" level=info msg="cleaning up dead shim" Oct 2 19:59:43.780136 env[1300]: time="2023-10-02T19:59:43.780099778Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3494 runtime=io.containerd.runc.v2\n" Oct 2 19:59:43.780435 env[1300]: time="2023-10-02T19:59:43.780402888Z" level=info msg="TearDown network for sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" successfully" Oct 2 19:59:43.780518 env[1300]: time="2023-10-02T19:59:43.780434889Z" level=info msg="StopPodSandbox for \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" returns successfully" Oct 2 19:59:43.855746 kubelet[2438]: I1002 19:59:43.855699 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-kernel\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.855968 kubelet[2438]: I1002 19:59:43.855780 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-config-path\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.855968 kubelet[2438]: I1002 19:59:43.855829 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-xtables-lock\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.855968 kubelet[2438]: I1002 19:59:43.855860 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hostproc\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.855968 kubelet[2438]: I1002 19:59:43.855904 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-etc-cni-netd\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.855968 kubelet[2438]: I1002 19:59:43.855935 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-cgroup\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.855965 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-lib-modules\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.856027 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-net\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.856086 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8psr4\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-kube-api-access-8psr4\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.856120 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-run\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.856226 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cni-path\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856368 kubelet[2438]: I1002 19:59:43.856284 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hubble-tls\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856794 kubelet[2438]: I1002 19:59:43.856327 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-clustermesh-secrets\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856794 kubelet[2438]: I1002 19:59:43.856375 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-bpf-maps\") pod \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\" (UID: \"233eaaeb-c23c-4b7a-a377-fd062c18f6c9\") " Oct 2 19:59:43.856794 kubelet[2438]: I1002 19:59:43.856464 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.856794 kubelet[2438]: I1002 19:59:43.856575 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.857036 kubelet[2438]: W1002 19:59:43.856926 2438 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/233eaaeb-c23c-4b7a-a377-fd062c18f6c9/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:43.857964 kubelet[2438]: I1002 19:59:43.857932 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858207 kubelet[2438]: I1002 19:59:43.858182 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858379 kubelet[2438]: I1002 19:59:43.858355 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hostproc" (OuterVolumeSpecName: "hostproc") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858512 kubelet[2438]: I1002 19:59:43.858498 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858597 kubelet[2438]: I1002 19:59:43.858583 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858740 kubelet[2438]: I1002 19:59:43.858672 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.858890 kubelet[2438]: I1002 19:59:43.858871 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cni-path" (OuterVolumeSpecName: "cni-path") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.860910 kubelet[2438]: I1002 19:59:43.860831 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:43.863118 kubelet[2438]: I1002 19:59:43.863095 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:43.863687 kubelet[2438]: I1002 19:59:43.863662 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-kube-api-access-8psr4" (OuterVolumeSpecName: "kube-api-access-8psr4") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "kube-api-access-8psr4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:43.865141 kubelet[2438]: I1002 19:59:43.865123 2438 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=657f4b13-b03f-4498-910b-dd5721b301b3 path="/var/lib/kubelet/pods/657f4b13-b03f-4498-910b-dd5721b301b3/volumes" Oct 2 19:59:43.867337 kubelet[2438]: I1002 19:59:43.867267 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:43.868816 kubelet[2438]: I1002 19:59:43.868791 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "233eaaeb-c23c-4b7a-a377-fd062c18f6c9" (UID: "233eaaeb-c23c-4b7a-a377-fd062c18f6c9"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:43.881016 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07-rootfs.mount: Deactivated successfully. Oct 2 19:59:43.881193 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07-shm.mount: Deactivated successfully. Oct 2 19:59:43.881297 systemd[1]: var-lib-kubelet-pods-233eaaeb\x2dc23c\x2d4b7a\x2da377\x2dfd062c18f6c9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8psr4.mount: Deactivated successfully. Oct 2 19:59:43.881377 systemd[1]: var-lib-kubelet-pods-233eaaeb\x2dc23c\x2d4b7a\x2da377\x2dfd062c18f6c9-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:43.881523 systemd[1]: var-lib-kubelet-pods-233eaaeb\x2dc23c\x2d4b7a\x2da377\x2dfd062c18f6c9-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:43.957191 kubelet[2438]: I1002 19:59:43.957142 2438 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-xtables-lock\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957191 kubelet[2438]: I1002 19:59:43.957191 2438 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957191 kubelet[2438]: I1002 19:59:43.957214 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-config-path\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957232 2438 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hostproc\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957248 2438 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-etc-cni-netd\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957272 2438 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-lib-modules\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957289 2438 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-host-proc-sys-net\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957306 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-cgroup\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957325 2438 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-8psr4\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-kube-api-access-8psr4\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957341 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cilium-run\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957521 kubelet[2438]: I1002 19:59:43.957357 2438 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-cni-path\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957790 kubelet[2438]: I1002 19:59:43.957373 2438 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-hubble-tls\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957790 kubelet[2438]: I1002 19:59:43.957389 2438 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-clustermesh-secrets\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:43.957790 kubelet[2438]: I1002 19:59:43.957405 2438 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/233eaaeb-c23c-4b7a-a377-fd062c18f6c9-bpf-maps\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 19:59:44.695173 kubelet[2438]: I1002 19:59:44.695140 2438 scope.go:115] "RemoveContainer" containerID="f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81" Oct 2 19:59:44.697248 env[1300]: time="2023-10-02T19:59:44.697187668Z" level=info msg="RemoveContainer for \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\"" Oct 2 19:59:44.701462 systemd[1]: Removed slice kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice. Oct 2 19:59:44.708421 env[1300]: time="2023-10-02T19:59:44.708375507Z" level=info msg="RemoveContainer for \"f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81\" returns successfully" Oct 2 19:59:45.174824 kubelet[2438]: W1002 19:59:45.174771 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod233eaaeb_c23c_4b7a_a377_fd062c18f6c9.slice/cri-containerd-f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81.scope WatchSource:0}: container "f0ac1531c6d7533bb88f936d2727c35672ea2d9b30c7ae82d1a834cc597e3e81" in namespace "k8s.io": not found Oct 2 19:59:45.189752 sshd[3368]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:45.190000 audit[3368]: USER_END pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:45.193486 systemd[1]: sshd@28-10.200.8.15:22-10.200.12.6:41206.service: Deactivated successfully. Oct 2 19:59:45.194408 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 19:59:45.196182 systemd-logind[1280]: Session 31 logged out. Waiting for processes to exit. Oct 2 19:59:45.196813 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:59:45.196866 kernel: audit: type=1106 audit(1696276785.190:1387): pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:45.197405 systemd-logind[1280]: Removed session 31. Oct 2 19:59:45.190000 audit[3368]: CRED_DISP pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:45.229805 kernel: audit: type=1104 audit(1696276785.190:1388): pid=3368 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:45.229882 kernel: audit: type=1131 audit(1696276785.192:1389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:41206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:45.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:41206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:45.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:41218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:45.296469 systemd[1]: Started sshd@29-10.200.8.15:22-10.200.12.6:41218.service. Oct 2 19:59:45.316727 kernel: audit: type=1130 audit(1696276785.295:1390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:41218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:45.856785 kubelet[2438]: I1002 19:59:45.856748 2438 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=233eaaeb-c23c-4b7a-a377-fd062c18f6c9 path="/var/lib/kubelet/pods/233eaaeb-c23c-4b7a-a377-fd062c18f6c9/volumes" Oct 2 19:59:46.239000 audit[3512]: USER_ACCT pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.241884 sshd[3512]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:46.259519 kernel: audit: type=1101 audit(1696276786.239:1391): pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.259571 sshd[3512]: Accepted publickey for core from 10.200.12.6 port 41218 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:46.240000 audit[3512]: CRED_ACQ pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.264400 systemd[1]: Started session-32.scope. Oct 2 19:59:46.265645 systemd-logind[1280]: New session 32 of user core. Oct 2 19:59:46.277012 kernel: audit: type=1103 audit(1696276786.240:1392): pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.277087 kernel: audit: type=1006 audit(1696276786.240:1393): pid=3512 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 19:59:46.240000 audit[3512]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc13a28a80 a2=3 a3=0 items=0 ppid=1 pid=3512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:46.288033 kernel: audit: type=1300 audit(1696276786.240:1393): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc13a28a80 a2=3 a3=0 items=0 ppid=1 pid=3512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:46.240000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:46.305009 kernel: audit: type=1327 audit(1696276786.240:1393): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:46.269000 audit[3512]: USER_START pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.311008 kernel: audit: type=1105 audit(1696276786.269:1394): pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:46.271000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.029705 kubelet[2438]: E1002 19:59:47.029666 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:47.175548 kubelet[2438]: I1002 19:59:47.175503 2438 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:59:47.175922 kubelet[2438]: E1002 19:59:47.175895 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="657f4b13-b03f-4498-910b-dd5721b301b3" containerName="cilium-operator" Oct 2 19:59:47.176132 kubelet[2438]: E1002 19:59:47.176118 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176274 kubelet[2438]: E1002 19:59:47.176260 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176392 kubelet[2438]: E1002 19:59:47.176379 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176502 kubelet[2438]: E1002 19:59:47.176490 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176598 kubelet[2438]: E1002 19:59:47.176589 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176707 kubelet[2438]: I1002 19:59:47.176699 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176789 kubelet[2438]: I1002 19:59:47.176782 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176866 kubelet[2438]: I1002 19:59:47.176859 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.176937 kubelet[2438]: I1002 19:59:47.176931 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.177010 kubelet[2438]: I1002 19:59:47.177002 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="657f4b13-b03f-4498-910b-dd5721b301b3" containerName="cilium-operator" Oct 2 19:59:47.177095 kubelet[2438]: I1002 19:59:47.177085 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.177216 kubelet[2438]: E1002 19:59:47.177204 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.177315 kubelet[2438]: E1002 19:59:47.177305 2438 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.177448 kubelet[2438]: I1002 19:59:47.177435 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.177549 kubelet[2438]: I1002 19:59:47.177540 2438 memory_manager.go:346] "RemoveStaleState removing state" podUID="233eaaeb-c23c-4b7a-a377-fd062c18f6c9" containerName="mount-cgroup" Oct 2 19:59:47.180381 kubelet[2438]: I1002 19:59:47.180361 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-clustermesh-secrets\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.181075 kubelet[2438]: I1002 19:59:47.181058 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-kernel\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.181266 kubelet[2438]: I1002 19:59:47.181254 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-bpf-maps\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.181452 kubelet[2438]: I1002 19:59:47.181440 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bxslv\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-kube-api-access-bxslv\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.181699 kubelet[2438]: I1002 19:59:47.181686 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-run\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.182197 kubelet[2438]: I1002 19:59:47.182183 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-ipsec-secrets\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.182668 kubelet[2438]: I1002 19:59:47.182653 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-hubble-tls\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.182878 kubelet[2438]: I1002 19:59:47.182864 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cni-path\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.183077 kubelet[2438]: I1002 19:59:47.183056 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-net\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.183454 kubelet[2438]: I1002 19:59:47.183439 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-xtables-lock\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.183846 kubelet[2438]: I1002 19:59:47.183833 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-config-path\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.183976 kubelet[2438]: I1002 19:59:47.183966 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-hostproc\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.184236 kubelet[2438]: I1002 19:59:47.184220 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-lib-modules\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.184393 kubelet[2438]: I1002 19:59:47.184379 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-cgroup\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.188060 kubelet[2438]: I1002 19:59:47.184871 2438 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-etc-cni-netd\") pod \"cilium-p68d5\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " pod="kube-system/cilium-p68d5" Oct 2 19:59:47.189418 systemd[1]: Created slice kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice. Oct 2 19:59:47.497961 env[1300]: time="2023-10-02T19:59:47.497907517Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-p68d5,Uid:c079ef30-35d1-4455-909e-ae1893b4ebce,Namespace:kube-system,Attempt:0,}" Oct 2 19:59:47.532885 env[1300]: time="2023-10-02T19:59:47.532804360Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:59:47.532885 env[1300]: time="2023-10-02T19:59:47.532852461Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:59:47.533192 env[1300]: time="2023-10-02T19:59:47.532866262Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:59:47.533192 env[1300]: time="2023-10-02T19:59:47.533008066Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285 pid=3533 runtime=io.containerd.runc.v2 Oct 2 19:59:47.549192 systemd[1]: Started cri-containerd-60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285.scope. Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit: BPF prog-id=132 op=LOAD Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3533 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630643536346534376532306436636538306332353034393836646663 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3533 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630643536346534376532306436636538306332353034393836646663 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit: BPF prog-id=133 op=LOAD Oct 2 19:59:47.561000 audit[3542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00037c720 items=0 ppid=3533 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630643536346534376532306436636538306332353034393836646663 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit: BPF prog-id=134 op=LOAD Oct 2 19:59:47.561000 audit[3542]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00037c768 items=0 ppid=3533 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630643536346534376532306436636538306332353034393836646663 Oct 2 19:59:47.561000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:59:47.561000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { perfmon } for pid=3542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit[3542]: AVC avc: denied { bpf } for pid=3542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:47.561000 audit: BPF prog-id=135 op=LOAD Oct 2 19:59:47.561000 audit[3542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00037cb78 items=0 ppid=3533 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630643536346534376532306436636538306332353034393836646663 Oct 2 19:59:47.574069 env[1300]: time="2023-10-02T19:59:47.574025192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-p68d5,Uid:c079ef30-35d1-4455-909e-ae1893b4ebce,Namespace:kube-system,Attempt:0,} returns sandbox id \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\"" Oct 2 19:59:47.579178 env[1300]: time="2023-10-02T19:59:47.579146646Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:59:47.615121 env[1300]: time="2023-10-02T19:59:47.614976117Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" Oct 2 19:59:47.615732 env[1300]: time="2023-10-02T19:59:47.615701538Z" level=info msg="StartContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" Oct 2 19:59:47.632274 systemd[1]: Started cri-containerd-c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6.scope. Oct 2 19:59:47.643873 systemd[1]: cri-containerd-c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6.scope: Deactivated successfully. Oct 2 19:59:47.735446 env[1300]: time="2023-10-02T19:59:47.735329915Z" level=info msg="shim disconnected" id=c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6 Oct 2 19:59:47.735446 env[1300]: time="2023-10-02T19:59:47.735446318Z" level=warning msg="cleaning up after shim disconnected" id=c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6 namespace=k8s.io Oct 2 19:59:47.735862 env[1300]: time="2023-10-02T19:59:47.735467319Z" level=info msg="cleaning up dead shim" Oct 2 19:59:47.753873 env[1300]: time="2023-10-02T19:59:47.749638843Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3593 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:47.753873 env[1300]: time="2023-10-02T19:59:47.750031154Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 19:59:47.753873 env[1300]: time="2023-10-02T19:59:47.751330893Z" level=error msg="Failed to pipe stdout of container \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" error="reading from a closed fifo" Oct 2 19:59:47.755605 env[1300]: time="2023-10-02T19:59:47.755555520Z" level=error msg="Failed to pipe stderr of container \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" error="reading from a closed fifo" Oct 2 19:59:47.766128 env[1300]: time="2023-10-02T19:59:47.766072434Z" level=error msg="StartContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:47.767449 kubelet[2438]: E1002 19:59:47.767420 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6" Oct 2 19:59:47.767633 kubelet[2438]: E1002 19:59:47.767615 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:47.767633 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:47.767633 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:59:47.767633 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bxslv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:47.772123 kubelet[2438]: E1002 19:59:47.767669 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 19:59:48.715241 env[1300]: time="2023-10-02T19:59:48.715182099Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:59:48.745885 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount971148578.mount: Deactivated successfully. Oct 2 19:59:48.763549 env[1300]: time="2023-10-02T19:59:48.763483635Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" Oct 2 19:59:48.764419 env[1300]: time="2023-10-02T19:59:48.764139055Z" level=info msg="StartContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" Oct 2 19:59:48.783396 systemd[1]: Started cri-containerd-ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586.scope. Oct 2 19:59:48.796319 systemd[1]: cri-containerd-ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586.scope: Deactivated successfully. Oct 2 19:59:48.824095 env[1300]: time="2023-10-02T19:59:48.824025136Z" level=info msg="shim disconnected" id=ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586 Oct 2 19:59:48.824695 env[1300]: time="2023-10-02T19:59:48.824089838Z" level=warning msg="cleaning up after shim disconnected" id=ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586 namespace=k8s.io Oct 2 19:59:48.824843 env[1300]: time="2023-10-02T19:59:48.824824860Z" level=info msg="cleaning up dead shim" Oct 2 19:59:48.834887 env[1300]: time="2023-10-02T19:59:48.834841758Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3629 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:48.835173 env[1300]: time="2023-10-02T19:59:48.835111766Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 19:59:48.835404 env[1300]: time="2023-10-02T19:59:48.835369273Z" level=error msg="Failed to pipe stderr of container \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" error="reading from a closed fifo" Oct 2 19:59:48.836733 env[1300]: time="2023-10-02T19:59:48.836691913Z" level=error msg="Failed to pipe stdout of container \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" error="reading from a closed fifo" Oct 2 19:59:48.840862 env[1300]: time="2023-10-02T19:59:48.840818535Z" level=error msg="StartContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:48.841052 kubelet[2438]: E1002 19:59:48.841031 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586" Oct 2 19:59:48.841475 kubelet[2438]: E1002 19:59:48.841157 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:48.841475 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:48.841475 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 19:59:48.841475 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bxslv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:48.842146 kubelet[2438]: E1002 19:59:48.841209 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 19:59:49.298366 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586-rootfs.mount: Deactivated successfully. Oct 2 19:59:49.715783 kubelet[2438]: I1002 19:59:49.715618 2438 scope.go:115] "RemoveContainer" containerID="c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6" Oct 2 19:59:49.716332 kubelet[2438]: I1002 19:59:49.716296 2438 scope.go:115] "RemoveContainer" containerID="c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6" Oct 2 19:59:49.717108 env[1300]: time="2023-10-02T19:59:49.717070786Z" level=info msg="RemoveContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" Oct 2 19:59:49.717910 env[1300]: time="2023-10-02T19:59:49.717430896Z" level=info msg="RemoveContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\"" Oct 2 19:59:49.718136 env[1300]: time="2023-10-02T19:59:49.718101016Z" level=error msg="RemoveContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\" failed" error="failed to set removing state for container \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\": container is already in removing state" Oct 2 19:59:49.718896 kubelet[2438]: E1002 19:59:49.718842 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\": container is already in removing state" containerID="c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6" Oct 2 19:59:49.718896 kubelet[2438]: E1002 19:59:49.718881 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6": container is already in removing state; Skipping pod "cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)" Oct 2 19:59:49.719272 kubelet[2438]: E1002 19:59:49.719249 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 19:59:49.733220 env[1300]: time="2023-10-02T19:59:49.733175262Z" level=info msg="RemoveContainer for \"c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6\" returns successfully" Oct 2 19:59:50.719726 kubelet[2438]: E1002 19:59:50.719680 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 19:59:50.841952 kubelet[2438]: W1002 19:59:50.841907 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice/cri-containerd-c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6.scope WatchSource:0}: container "c8b6cfffe08470a33f3f5311ef97dee593d6c4fa972fe752abf9e95d7b2081c6" in namespace "k8s.io": not found Oct 2 19:59:52.030804 kubelet[2438]: E1002 19:59:52.030766 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:53.950111 kubelet[2438]: W1002 19:59:53.950053 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice/cri-containerd-ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586.scope WatchSource:0}: task ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586 not found: not found Oct 2 19:59:57.032656 kubelet[2438]: E1002 19:59:57.032570 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:02.033649 kubelet[2438]: E1002 20:00:02.033607 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:04.858022 env[1300]: time="2023-10-02T20:00:04.857715015Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:00:04.886454 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1000286569.mount: Deactivated successfully. Oct 2 20:00:04.899143 env[1300]: time="2023-10-02T20:00:04.899032348Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" Oct 2 20:00:04.899779 env[1300]: time="2023-10-02T20:00:04.899747567Z" level=info msg="StartContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" Oct 2 20:00:04.921965 systemd[1]: Started cri-containerd-67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790.scope. Oct 2 20:00:04.933061 systemd[1]: cri-containerd-67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790.scope: Deactivated successfully. Oct 2 20:00:04.938094 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790-rootfs.mount: Deactivated successfully. Oct 2 20:00:04.974822 env[1300]: time="2023-10-02T20:00:04.974763123Z" level=info msg="shim disconnected" id=67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790 Oct 2 20:00:04.975094 env[1300]: time="2023-10-02T20:00:04.975059631Z" level=warning msg="cleaning up after shim disconnected" id=67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790 namespace=k8s.io Oct 2 20:00:04.975196 env[1300]: time="2023-10-02T20:00:04.975093032Z" level=info msg="cleaning up dead shim" Oct 2 20:00:04.983854 env[1300]: time="2023-10-02T20:00:04.983817371Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3669 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:04.984165 env[1300]: time="2023-10-02T20:00:04.984105379Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:04.984370 env[1300]: time="2023-10-02T20:00:04.984324785Z" level=error msg="Failed to pipe stdout of container \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" error="reading from a closed fifo" Oct 2 20:00:04.984511 env[1300]: time="2023-10-02T20:00:04.984474189Z" level=error msg="Failed to pipe stderr of container \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" error="reading from a closed fifo" Oct 2 20:00:04.989500 env[1300]: time="2023-10-02T20:00:04.989462026Z" level=error msg="StartContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:04.989755 kubelet[2438]: E1002 20:00:04.989731 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790" Oct 2 20:00:04.990132 kubelet[2438]: E1002 20:00:04.989881 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:04.990132 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:04.990132 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 20:00:04.990132 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bxslv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:04.990333 kubelet[2438]: E1002 20:00:04.989931 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 20:00:05.750061 kubelet[2438]: I1002 20:00:05.749461 2438 scope.go:115] "RemoveContainer" containerID="ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586" Oct 2 20:00:05.750061 kubelet[2438]: I1002 20:00:05.749824 2438 scope.go:115] "RemoveContainer" containerID="ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586" Oct 2 20:00:05.751311 env[1300]: time="2023-10-02T20:00:05.751269103Z" level=info msg="RemoveContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" Oct 2 20:00:05.752061 env[1300]: time="2023-10-02T20:00:05.752033324Z" level=info msg="RemoveContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\"" Oct 2 20:00:05.752297 env[1300]: time="2023-10-02T20:00:05.752260530Z" level=error msg="RemoveContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\" failed" error="failed to set removing state for container \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\": container is already in removing state" Oct 2 20:00:05.752562 kubelet[2438]: E1002 20:00:05.752531 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\": container is already in removing state" containerID="ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586" Oct 2 20:00:05.752657 kubelet[2438]: E1002 20:00:05.752572 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586": container is already in removing state; Skipping pod "cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)" Oct 2 20:00:05.752867 kubelet[2438]: E1002 20:00:05.752851 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 20:00:05.770217 env[1300]: time="2023-10-02T20:00:05.770167019Z" level=info msg="RemoveContainer for \"ba49d6359848d7ccc192f4d8981ead2a7554016542b614cef6f7a81f5b0ab586\" returns successfully" Oct 2 20:00:07.035045 kubelet[2438]: E1002 20:00:07.035007 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:08.080703 kubelet[2438]: W1002 20:00:08.080652 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice/cri-containerd-67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790.scope WatchSource:0}: task 67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790 not found: not found Oct 2 20:00:12.036793 kubelet[2438]: E1002 20:00:12.036747 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:17.038163 kubelet[2438]: E1002 20:00:17.038126 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:20.855639 kubelet[2438]: E1002 20:00:20.855598 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 20:00:22.039780 kubelet[2438]: E1002 20:00:22.039729 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:27.030000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:27.039044 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:00:27.039159 kernel: audit: type=1400 audit(1696276827.030:1414): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:27.042296 kubelet[2438]: E1002 20:00:27.042271 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:27.060838 kernel: audit: type=1300 audit(1696276827.030:1414): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001357200 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:27.030000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001357200 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:27.030000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:27.101136 kernel: audit: type=1327 audit(1696276827.030:1414): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:27.101314 kernel: audit: type=1400 audit(1696276827.081:1415): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:27.081000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:27.081000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000910d50 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:27.140918 kernel: audit: type=1300 audit(1696276827.081:1415): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000910d50 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:27.141078 kernel: audit: type=1327 audit(1696276827.081:1415): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:27.081000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:28.292000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.292000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c003319340 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.329289 kernel: audit: type=1400 audit(1696276828.292:1416): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.329435 kernel: audit: type=1300 audit(1696276828.292:1416): arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c003319340 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.329467 kernel: audit: type=1327 audit(1696276828.292:1416): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.292000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.328000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.361676 kernel: audit: type=1400 audit(1696276828.328:1417): avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.328000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ccbea20 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.328000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.328000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ccbea50 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.329000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.329000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ccbeab0 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.329000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.329000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.329000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c003db5b60 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.329000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:28.329000 audit[2310]: AVC avc: denied { watch } for pid=2310 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:28.329000 audit[2310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ccbec30 a2=fc6 a3=0 items=0 ppid=2184 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c337,c685 key=(null) Oct 2 20:00:28.329000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:31.856748 env[1300]: time="2023-10-02T20:00:31.856458670Z" level=info msg="StopPodSandbox for \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\"" Oct 2 20:00:31.856748 env[1300]: time="2023-10-02T20:00:31.856601373Z" level=info msg="TearDown network for sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" successfully" Oct 2 20:00:31.856748 env[1300]: time="2023-10-02T20:00:31.856666575Z" level=info msg="StopPodSandbox for \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" returns successfully" Oct 2 20:00:31.857526 env[1300]: time="2023-10-02T20:00:31.857490395Z" level=info msg="RemovePodSandbox for \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\"" Oct 2 20:00:31.857648 env[1300]: time="2023-10-02T20:00:31.857544996Z" level=info msg="Forcibly stopping sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\"" Oct 2 20:00:31.857648 env[1300]: time="2023-10-02T20:00:31.857623798Z" level=info msg="TearDown network for sandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" successfully" Oct 2 20:00:31.870174 env[1300]: time="2023-10-02T20:00:31.870130699Z" level=info msg="RemovePodSandbox \"4b3f7194c5234c20a327b8075a924b3e54f56ab7b5ccf7c184dd31d23356bd07\" returns successfully" Oct 2 20:00:31.870740 env[1300]: time="2023-10-02T20:00:31.870703213Z" level=info msg="StopPodSandbox for \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\"" Oct 2 20:00:31.870878 env[1300]: time="2023-10-02T20:00:31.870801415Z" level=info msg="TearDown network for sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" successfully" Oct 2 20:00:31.870878 env[1300]: time="2023-10-02T20:00:31.870846416Z" level=info msg="StopPodSandbox for \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" returns successfully" Oct 2 20:00:31.871166 env[1300]: time="2023-10-02T20:00:31.871138923Z" level=info msg="RemovePodSandbox for \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\"" Oct 2 20:00:31.871265 env[1300]: time="2023-10-02T20:00:31.871168224Z" level=info msg="Forcibly stopping sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\"" Oct 2 20:00:31.871265 env[1300]: time="2023-10-02T20:00:31.871246526Z" level=info msg="TearDown network for sandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" successfully" Oct 2 20:00:31.882199 env[1300]: time="2023-10-02T20:00:31.882152089Z" level=info msg="RemovePodSandbox \"033c24d3b8e1c60f8fe3e9151cb10b1fb78aa68c7efd878b314164ecf718410a\" returns successfully" Oct 2 20:00:32.044535 kubelet[2438]: E1002 20:00:32.044495 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:34.047000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.054744 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:00:34.054854 kernel: audit: type=1400 audit(1696276834.047:1422): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.047000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3a4c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.093065 kernel: audit: type=1300 audit(1696276834.047:1422): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a3a4c0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.093201 kernel: audit: type=1327 audit(1696276834.047:1422): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.047000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.051000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.051000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000ac4e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.148703 kernel: audit: type=1400 audit(1696276834.051:1423): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.148823 kernel: audit: type=1300 audit(1696276834.051:1423): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000ac4e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.148856 kernel: audit: type=1327 audit(1696276834.051:1423): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.051000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.052000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.182424 kernel: audit: type=1400 audit(1696276834.052:1424): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.182542 kernel: audit: type=1300 audit(1696276834.052:1424): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000ac560 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.052000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000ac560 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.220361 kernel: audit: type=1327 audit(1696276834.052:1424): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:34.221898 kernel: audit: type=1400 audit(1696276834.052:1425): avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.052000 audit[2264]: AVC avc: denied { watch } for pid=2264 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:34.052000 audit[2264]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0000ac8e0 a2=fc6 a3=0 items=0 ppid=2139 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:00:34.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:35.859335 env[1300]: time="2023-10-02T20:00:35.857794981Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:00:35.894600 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1606920423.mount: Deactivated successfully. Oct 2 20:00:35.901815 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2170481959.mount: Deactivated successfully. Oct 2 20:00:35.913604 env[1300]: time="2023-10-02T20:00:35.913537198Z" level=info msg="CreateContainer within sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\"" Oct 2 20:00:35.914321 env[1300]: time="2023-10-02T20:00:35.914286016Z" level=info msg="StartContainer for \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\"" Oct 2 20:00:35.938875 systemd[1]: Started cri-containerd-51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e.scope. Oct 2 20:00:35.953024 systemd[1]: cri-containerd-51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e.scope: Deactivated successfully. Oct 2 20:00:36.037803 env[1300]: time="2023-10-02T20:00:36.037734531Z" level=info msg="shim disconnected" id=51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e Oct 2 20:00:36.037803 env[1300]: time="2023-10-02T20:00:36.037800633Z" level=warning msg="cleaning up after shim disconnected" id=51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e namespace=k8s.io Oct 2 20:00:36.037803 env[1300]: time="2023-10-02T20:00:36.037816233Z" level=info msg="cleaning up dead shim" Oct 2 20:00:36.047484 env[1300]: time="2023-10-02T20:00:36.047427059Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3711 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:36.047776 env[1300]: time="2023-10-02T20:00:36.047713566Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:36.048051 env[1300]: time="2023-10-02T20:00:36.047954572Z" level=error msg="Failed to pipe stdout of container \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\"" error="reading from a closed fifo" Oct 2 20:00:36.048143 env[1300]: time="2023-10-02T20:00:36.048049474Z" level=error msg="Failed to pipe stderr of container \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\"" error="reading from a closed fifo" Oct 2 20:00:36.053658 env[1300]: time="2023-10-02T20:00:36.053596505Z" level=error msg="StartContainer for \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:36.053944 kubelet[2438]: E1002 20:00:36.053917 2438 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e" Oct 2 20:00:36.054368 kubelet[2438]: E1002 20:00:36.054081 2438 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:36.054368 kubelet[2438]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:36.054368 kubelet[2438]: rm /hostbin/cilium-mount Oct 2 20:00:36.054368 kubelet[2438]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bxslv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:36.054936 kubelet[2438]: E1002 20:00:36.054138 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 20:00:36.813254 kubelet[2438]: I1002 20:00:36.813207 2438 scope.go:115] "RemoveContainer" containerID="67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790" Oct 2 20:00:36.813717 kubelet[2438]: I1002 20:00:36.813672 2438 scope.go:115] "RemoveContainer" containerID="67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790" Oct 2 20:00:36.815456 env[1300]: time="2023-10-02T20:00:36.815367932Z" level=info msg="RemoveContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" Oct 2 20:00:36.816164 env[1300]: time="2023-10-02T20:00:36.815367632Z" level=info msg="RemoveContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\"" Oct 2 20:00:36.816164 env[1300]: time="2023-10-02T20:00:36.816067049Z" level=error msg="RemoveContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\" failed" error="failed to set removing state for container \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\": container is already in removing state" Oct 2 20:00:36.817014 kubelet[2438]: E1002 20:00:36.816474 2438 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\": container is already in removing state" containerID="67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790" Oct 2 20:00:36.817014 kubelet[2438]: E1002 20:00:36.816535 2438 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790": container is already in removing state; Skipping pod "cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)" Oct 2 20:00:36.817170 kubelet[2438]: E1002 20:00:36.817126 2438 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-p68d5_kube-system(c079ef30-35d1-4455-909e-ae1893b4ebce)\"" pod="kube-system/cilium-p68d5" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce Oct 2 20:00:36.827072 env[1300]: time="2023-10-02T20:00:36.827030907Z" level=info msg="RemoveContainer for \"67cb223a7b418a686be29f0ff03529cd6d010856898513efa2c79683f2756790\" returns successfully" Oct 2 20:00:36.891345 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e-rootfs.mount: Deactivated successfully. Oct 2 20:00:37.046044 kubelet[2438]: E1002 20:00:37.046003 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:39.143836 kubelet[2438]: W1002 20:00:39.143779 2438 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice/cri-containerd-51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e.scope WatchSource:0}: task 51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e not found: not found Oct 2 20:00:42.047823 kubelet[2438]: E1002 20:00:42.047768 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:47.049533 kubelet[2438]: E1002 20:00:47.049477 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:48.498190 env[1300]: time="2023-10-02T20:00:48.498135754Z" level=info msg="StopPodSandbox for \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\"" Oct 2 20:00:48.498716 env[1300]: time="2023-10-02T20:00:48.498245856Z" level=info msg="Container to stop \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:48.500620 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285-shm.mount: Deactivated successfully. Oct 2 20:00:48.513577 systemd[1]: cri-containerd-60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285.scope: Deactivated successfully. Oct 2 20:00:48.512000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:00:48.519019 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:00:48.519105 kernel: audit: type=1334 audit(1696276848.512:1426): prog-id=132 op=UNLOAD Oct 2 20:00:48.525000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:00:48.534012 kernel: audit: type=1334 audit(1696276848.525:1427): prog-id=135 op=UNLOAD Oct 2 20:00:48.548539 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285-rootfs.mount: Deactivated successfully. Oct 2 20:00:48.586609 env[1300]: time="2023-10-02T20:00:48.586548826Z" level=info msg="shim disconnected" id=60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285 Oct 2 20:00:48.586881 env[1300]: time="2023-10-02T20:00:48.586618228Z" level=warning msg="cleaning up after shim disconnected" id=60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285 namespace=k8s.io Oct 2 20:00:48.586881 env[1300]: time="2023-10-02T20:00:48.586632528Z" level=info msg="cleaning up dead shim" Oct 2 20:00:48.597588 env[1300]: time="2023-10-02T20:00:48.597543772Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3746 runtime=io.containerd.runc.v2\n" Oct 2 20:00:48.597907 env[1300]: time="2023-10-02T20:00:48.597870879Z" level=info msg="TearDown network for sandbox \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" successfully" Oct 2 20:00:48.598023 env[1300]: time="2023-10-02T20:00:48.597907080Z" level=info msg="StopPodSandbox for \"60d564e47e20d6ce80c2504986dfc51d547500a8ca94b1a11355e0871001f285\" returns successfully" Oct 2 20:00:48.676661 sshd[3512]: pam_unix(sshd:session): session closed for user core Oct 2 20:00:48.677000 audit[3512]: USER_END pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:48.681795 systemd[1]: sshd@29-10.200.8.15:22-10.200.12.6:41218.service: Deactivated successfully. Oct 2 20:00:48.682558 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:00:48.684295 systemd-logind[1280]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:00:48.685557 systemd-logind[1280]: Removed session 32. Oct 2 20:00:48.702015 kernel: audit: type=1106 audit(1696276848.677:1428): pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:48.702130 kernel: audit: type=1104 audit(1696276848.679:1429): pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:48.679000 audit[3512]: CRED_DISP pid=3512 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718325 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cni-path\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718377 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-etc-cni-netd\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718455 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-ipsec-secrets\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718503 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-bpf-maps\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718530 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-lib-modules\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.719740 kubelet[2438]: I1002 20:00:48.718560 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-clustermesh-secrets\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718588 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-xtables-lock\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718616 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-hostproc\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718643 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-cgroup\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718674 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-net\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718707 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-config-path\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720491 kubelet[2438]: I1002 20:00:48.718739 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-hubble-tls\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720801 kubelet[2438]: I1002 20:00:48.718765 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-run\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720801 kubelet[2438]: I1002 20:00:48.718848 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-kernel\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720801 kubelet[2438]: I1002 20:00:48.718883 2438 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bxslv\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-kube-api-access-bxslv\") pod \"c079ef30-35d1-4455-909e-ae1893b4ebce\" (UID: \"c079ef30-35d1-4455-909e-ae1893b4ebce\") " Oct 2 20:00:48.720801 kubelet[2438]: I1002 20:00:48.719780 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.720801 kubelet[2438]: I1002 20:00:48.719851 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cni-path" (OuterVolumeSpecName: "cni-path") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.721065 kubelet[2438]: I1002 20:00:48.719883 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.722007 kubelet[2438]: I1002 20:00:48.721172 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-hostproc" (OuterVolumeSpecName: "hostproc") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.722007 kubelet[2438]: I1002 20:00:48.721263 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.722007 kubelet[2438]: I1002 20:00:48.721289 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.722007 kubelet[2438]: W1002 20:00:48.721481 2438 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/c079ef30-35d1-4455-909e-ae1893b4ebce/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:48.722681 kubelet[2438]: I1002 20:00:48.722347 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.722681 kubelet[2438]: I1002 20:00:48.722392 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:41218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:48.723133 kubelet[2438]: I1002 20:00:48.723112 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.723231 kubelet[2438]: I1002 20:00:48.723218 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:48.725235 kubelet[2438]: I1002 20:00:48.725212 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:48.734702 systemd[1]: var-lib-kubelet-pods-c079ef30\x2d35d1\x2d4455\x2d909e\x2dae1893b4ebce-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbxslv.mount: Deactivated successfully. Oct 2 20:00:48.734815 systemd[1]: var-lib-kubelet-pods-c079ef30\x2d35d1\x2d4455\x2d909e\x2dae1893b4ebce-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:48.734876 systemd[1]: var-lib-kubelet-pods-c079ef30\x2d35d1\x2d4455\x2d909e\x2dae1893b4ebce-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:48.734931 systemd[1]: var-lib-kubelet-pods-c079ef30\x2d35d1\x2d4455\x2d909e\x2dae1893b4ebce-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:00:48.740840 kubelet[2438]: I1002 20:00:48.740811 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-kube-api-access-bxslv" (OuterVolumeSpecName: "kube-api-access-bxslv") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "kube-api-access-bxslv". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:48.741075 kernel: audit: type=1131 audit(1696276848.681:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:41218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:48.741178 kubelet[2438]: I1002 20:00:48.741154 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:48.744621 kubelet[2438]: I1002 20:00:48.744581 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:48.747340 kubelet[2438]: I1002 20:00:48.747315 2438 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "c079ef30-35d1-4455-909e-ae1893b4ebce" (UID: "c079ef30-35d1-4455-909e-ae1893b4ebce"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819701 2438 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-clustermesh-secrets\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819735 2438 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-xtables-lock\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819749 2438 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-hostproc\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819762 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-cgroup\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819777 2438 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-net\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819790 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-config-path\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819806 2438 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-hubble-tls\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821333 kubelet[2438]: I1002 20:00:48.819819 2438 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819832 2438 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-bxslv\" (UniqueName: \"kubernetes.io/projected/c079ef30-35d1-4455-909e-ae1893b4ebce-kube-api-access-bxslv\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819844 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-run\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819858 2438 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/c079ef30-35d1-4455-909e-ae1893b4ebce-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819888 2438 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-cni-path\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819902 2438 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-etc-cni-netd\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819917 2438 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-bpf-maps\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.821633 kubelet[2438]: I1002 20:00:48.819936 2438 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c079ef30-35d1-4455-909e-ae1893b4ebce-lib-modules\") on node \"ci-3510.3.0-a-8915d29de4\" DevicePath \"\"" Oct 2 20:00:48.839494 kubelet[2438]: I1002 20:00:48.839469 2438 scope.go:115] "RemoveContainer" containerID="51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e" Oct 2 20:00:48.840738 env[1300]: time="2023-10-02T20:00:48.840698998Z" level=info msg="RemoveContainer for \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\"" Oct 2 20:00:48.845879 systemd[1]: Removed slice kubepods-burstable-podc079ef30_35d1_4455_909e_ae1893b4ebce.slice. Oct 2 20:00:48.853953 env[1300]: time="2023-10-02T20:00:48.853911393Z" level=info msg="RemoveContainer for \"51d1491cc6a80830d92e9f785b5550e0a280dbd1d024e0fc8ac452c62b26370e\" returns successfully" Oct 2 20:00:49.858653 kubelet[2438]: I1002 20:00:49.858611 2438 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=c079ef30-35d1-4455-909e-ae1893b4ebce path="/var/lib/kubelet/pods/c079ef30-35d1-4455-909e-ae1893b4ebce/volumes" Oct 2 20:00:52.050810 kubelet[2438]: E1002 20:00:52.050742 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:57.052079 kubelet[2438]: E1002 20:00:57.052027 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:02.053616 kubelet[2438]: E1002 20:01:02.053568 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:04.007888 kubelet[2438]: E1002 20:01:04.007844 2438 controller.go:189] failed to update lease, error: rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.15:38536->10.200.8.10:2379: read: connection timed out Oct 2 20:01:04.010426 systemd[1]: cri-containerd-090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0.scope: Deactivated successfully. Oct 2 20:01:04.010763 systemd[1]: cri-containerd-090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0.scope: Consumed 2.790s CPU time. Oct 2 20:01:04.013000 audit: BPF prog-id=91 op=UNLOAD Oct 2 20:01:04.021111 kernel: audit: type=1334 audit(1696276864.013:1431): prog-id=91 op=UNLOAD Oct 2 20:01:04.013000 audit: BPF prog-id=102 op=UNLOAD Oct 2 20:01:04.028012 kernel: audit: type=1334 audit(1696276864.013:1432): prog-id=102 op=UNLOAD Oct 2 20:01:04.036895 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0-rootfs.mount: Deactivated successfully. Oct 2 20:01:04.094663 env[1300]: time="2023-10-02T20:01:04.094604378Z" level=info msg="shim disconnected" id=090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0 Oct 2 20:01:04.094663 env[1300]: time="2023-10-02T20:01:04.094661779Z" level=warning msg="cleaning up after shim disconnected" id=090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0 namespace=k8s.io Oct 2 20:01:04.094663 env[1300]: time="2023-10-02T20:01:04.094673979Z" level=info msg="cleaning up dead shim" Oct 2 20:01:04.103409 env[1300]: time="2023-10-02T20:01:04.103362360Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3776 runtime=io.containerd.runc.v2\n" Oct 2 20:01:04.619472 systemd[1]: cri-containerd-0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591.scope: Deactivated successfully. Oct 2 20:01:04.619811 systemd[1]: cri-containerd-0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591.scope: Consumed 5.326s CPU time. Oct 2 20:01:04.621000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:01:04.621000 audit: BPF prog-id=94 op=UNLOAD Oct 2 20:01:04.637418 kernel: audit: type=1334 audit(1696276864.621:1433): prog-id=83 op=UNLOAD Oct 2 20:01:04.637550 kernel: audit: type=1334 audit(1696276864.621:1434): prog-id=94 op=UNLOAD Oct 2 20:01:04.648889 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591-rootfs.mount: Deactivated successfully. Oct 2 20:01:04.668039 env[1300]: time="2023-10-02T20:01:04.667953736Z" level=info msg="shim disconnected" id=0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591 Oct 2 20:01:04.668039 env[1300]: time="2023-10-02T20:01:04.668039738Z" level=warning msg="cleaning up after shim disconnected" id=0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591 namespace=k8s.io Oct 2 20:01:04.668359 env[1300]: time="2023-10-02T20:01:04.668053138Z" level=info msg="cleaning up dead shim" Oct 2 20:01:04.676832 env[1300]: time="2023-10-02T20:01:04.676795021Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3804 runtime=io.containerd.runc.v2\n" Oct 2 20:01:04.871863 kubelet[2438]: I1002 20:01:04.871333 2438 scope.go:115] "RemoveContainer" containerID="0962a40acab43f7dd07e93dcb0365e054d1d5af8316e0f5327390913a9f3c591" Oct 2 20:01:04.873960 kubelet[2438]: I1002 20:01:04.873597 2438 scope.go:115] "RemoveContainer" containerID="090015f1c6fbeced1d9f6c4a741a6a6a63210e736511c3aeb7642c891aec7ea0" Oct 2 20:01:04.874239 env[1300]: time="2023-10-02T20:01:04.874108536Z" level=info msg="CreateContainer within sandbox \"4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:01:04.876082 env[1300]: time="2023-10-02T20:01:04.876043277Z" level=info msg="CreateContainer within sandbox \"e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:01:04.905793 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2112459823.mount: Deactivated successfully. Oct 2 20:01:04.948510 env[1300]: time="2023-10-02T20:01:04.948457987Z" level=info msg="CreateContainer within sandbox \"4004172215b059558bf88b98669fdc023e1dc54c7422d2aa7dec10bea9759ffd\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"5fb29733fe00078b9dd872c9de7b7d30db6a70984ee3734533a767f581dd44d6\"" Oct 2 20:01:04.949062 env[1300]: time="2023-10-02T20:01:04.949028999Z" level=info msg="StartContainer for \"5fb29733fe00078b9dd872c9de7b7d30db6a70984ee3734533a767f581dd44d6\"" Oct 2 20:01:04.954701 env[1300]: time="2023-10-02T20:01:04.954664016Z" level=info msg="CreateContainer within sandbox \"e6a13b1178aaedf27e38ec7bdfc5b3e76273ed0502f6f1e297102a29ac9320ee\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"95163942ef62930063fbabc83ab5095f1c7e7e7bf7d62e4b2f9b8702a5d44c95\"" Oct 2 20:01:04.955269 env[1300]: time="2023-10-02T20:01:04.955238528Z" level=info msg="StartContainer for \"95163942ef62930063fbabc83ab5095f1c7e7e7bf7d62e4b2f9b8702a5d44c95\"" Oct 2 20:01:04.971674 systemd[1]: Started cri-containerd-5fb29733fe00078b9dd872c9de7b7d30db6a70984ee3734533a767f581dd44d6.scope. Oct 2 20:01:04.989534 systemd[1]: Started cri-containerd-95163942ef62930063fbabc83ab5095f1c7e7e7bf7d62e4b2f9b8702a5d44c95.scope. Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.016044 kernel: audit: type=1400 audit(1696276864.998:1435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.042889 kernel: audit: type=1400 audit(1696276864.998:1436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.042996 kernel: audit: type=1400 audit(1696276864.998:1437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.043026 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.065053 kernel: audit: type=1400 audit(1696276864.998:1438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.065179 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit: BPF prog-id=136 op=LOAD Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2139 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:04.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623239373333666530303037386239646438373263396465376237 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2139 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:04.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623239373333666530303037386239646438373263396465376237 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit: BPF prog-id=137 op=LOAD Oct 2 20:01:04.999000 audit[3825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00027c520 items=0 ppid=2139 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:04.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623239373333666530303037386239646438373263396465376237 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit: BPF prog-id=138 op=LOAD Oct 2 20:01:04.999000 audit[3825]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00027c568 items=0 ppid=2139 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:04.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623239373333666530303037386239646438373263396465376237 Oct 2 20:01:04.999000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:01:04.999000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { perfmon } for pid=3825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit[3825]: AVC avc: denied { bpf } for pid=3825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:04.999000 audit: BPF prog-id=139 op=LOAD Oct 2 20:01:04.999000 audit[3825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00027c978 items=0 ppid=2139 pid=3825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:04.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566623239373333666530303037386239646438373263396465376237 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.059000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.059000 audit: BPF prog-id=141 op=LOAD Oct 2 20:01:05.059000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024820 items=0 ppid=2119 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:05.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935313633393432656636323933303036336662616263383361623530 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit: BPF prog-id=142 op=LOAD Oct 2 20:01:05.069000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024868 items=0 ppid=2119 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:05.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935313633393432656636323933303036336662616263383361623530 Oct 2 20:01:05.069000 audit: BPF prog-id=142 op=UNLOAD Oct 2 20:01:05.069000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:05.069000 audit: BPF prog-id=143 op=LOAD Oct 2 20:01:05.069000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024c78 items=0 ppid=2119 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:05.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935313633393432656636323933303036336662616263383361623530 Oct 2 20:01:05.129177 env[1300]: time="2023-10-02T20:01:05.129113744Z" level=info msg="StartContainer for \"95163942ef62930063fbabc83ab5095f1c7e7e7bf7d62e4b2f9b8702a5d44c95\" returns successfully" Oct 2 20:01:05.129588 env[1300]: time="2023-10-02T20:01:05.129279948Z" level=info msg="StartContainer for \"5fb29733fe00078b9dd872c9de7b7d30db6a70984ee3734533a767f581dd44d6\" returns successfully" Oct 2 20:01:06.334000 audit[3851]: AVC avc: denied { watch } for pid=3851 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:06.334000 audit[3851]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001593b0 a2=fc6 a3=0 items=0 ppid=2139 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:01:06.334000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:06.336000 audit[3851]: AVC avc: denied { watch } for pid=3851 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:06.336000 audit[3851]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000059500 a2=fc6 a3=0 items=0 ppid=2139 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c458,c1008 key=(null) Oct 2 20:01:06.336000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:07.055285 kubelet[2438]: E1002 20:01:07.055240 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:07.269363 kubelet[2438]: E1002 20:01:07.269213 2438 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-8915d29de4.178a62d06419b8e5", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-8915d29de4", UID:"c96c6428304375deecbca3e23f6d0a49", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-8915d29de4"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 0, 56, 830540005, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 0, 56, 830540005, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.15:38334->10.200.8.10:2379: read: connection timed out' (will not retry!) Oct 2 20:01:12.056305 kubelet[2438]: E1002 20:01:12.056267 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:14.009009 kubelet[2438]: E1002 20:01:14.008930 2438 controller.go:189] failed to update lease, error: Put "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-8915d29de4?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 20:01:17.057721 kubelet[2438]: E1002 20:01:17.057682 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:22.059302 kubelet[2438]: E1002 20:01:22.059243 2438 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"