Oct 2 19:51:16.005403 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:51:16.005433 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.005445 kernel: BIOS-provided physical RAM map: Oct 2 19:51:16.005454 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 19:51:16.005463 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 19:51:16.005472 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 19:51:16.005486 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 19:51:16.005496 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 19:51:16.005506 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 19:51:16.005515 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 19:51:16.005524 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 19:51:16.005534 kernel: printk: bootconsole [earlyser0] enabled Oct 2 19:51:16.005543 kernel: NX (Execute Disable) protection: active Oct 2 19:51:16.005553 kernel: efi: EFI v2.70 by Microsoft Oct 2 19:51:16.005569 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 19:51:16.010946 kernel: random: crng init done Oct 2 19:51:16.010973 kernel: SMBIOS 3.1.0 present. Oct 2 19:51:16.010980 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 19:51:16.011003 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 19:51:16.011009 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 19:51:16.011016 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 19:51:16.011022 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 19:51:16.011032 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 19:51:16.011039 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 19:51:16.011045 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 19:51:16.011051 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 19:51:16.011058 kernel: tsc: Detected 2593.905 MHz processor Oct 2 19:51:16.011068 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:51:16.011075 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:51:16.011081 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 19:51:16.011089 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:51:16.011097 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 19:51:16.011105 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 19:51:16.011115 kernel: Using GB pages for direct mapping Oct 2 19:51:16.011121 kernel: Secure boot disabled Oct 2 19:51:16.011127 kernel: ACPI: Early table checksum verification disabled Oct 2 19:51:16.011137 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 19:51:16.011143 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011149 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011160 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 19:51:16.011171 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 19:51:16.011182 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011189 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011196 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011205 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011212 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011224 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011231 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 19:51:16.011237 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 19:51:16.011247 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 19:51:16.011254 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 19:51:16.011261 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 19:51:16.011270 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 19:51:16.011277 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 19:51:16.011288 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 19:51:16.011295 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 19:51:16.011302 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 19:51:16.011312 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 19:51:16.011320 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:51:16.011330 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:51:16.011338 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 19:51:16.011346 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 19:51:16.011356 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 19:51:16.011367 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 19:51:16.011375 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 19:51:16.011383 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 19:51:16.011390 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 19:51:16.011398 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 19:51:16.011406 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 19:51:16.011413 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 19:51:16.011420 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 19:51:16.011427 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 19:51:16.011438 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 19:51:16.011445 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 19:51:16.011452 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 19:51:16.011462 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 19:51:16.011469 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 19:51:16.011477 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 19:51:16.011486 kernel: Zone ranges: Oct 2 19:51:16.011493 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:51:16.011502 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 19:51:16.011512 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:16.011519 kernel: Movable zone start for each node Oct 2 19:51:16.011528 kernel: Early memory node ranges Oct 2 19:51:16.011535 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 19:51:16.011543 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 19:51:16.011552 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 19:51:16.011558 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 19:51:16.011567 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 19:51:16.011575 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:51:16.011595 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 19:51:16.011602 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 19:51:16.011610 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 19:51:16.011618 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 19:51:16.011625 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 19:51:16.011634 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:51:16.011642 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:51:16.011649 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 19:51:16.011659 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:51:16.011667 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 19:51:16.011676 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 19:51:16.011684 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:51:16.011691 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:51:16.011701 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:51:16.011708 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:51:16.011715 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:51:16.011725 kernel: Hyper-V: PV spinlocks enabled Oct 2 19:51:16.011733 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:51:16.011744 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 19:51:16.011754 kernel: Policy zone: Normal Oct 2 19:51:16.011765 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.011773 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:51:16.011781 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 19:51:16.011791 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 19:51:16.011798 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:51:16.011806 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 19:51:16.011817 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:51:16.011824 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:51:16.011842 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:51:16.011854 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:51:16.011863 kernel: rcu: RCU event tracing is enabled. Oct 2 19:51:16.011871 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:51:16.011880 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:51:16.011888 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:51:16.011898 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:51:16.011906 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:51:16.011915 kernel: Using NULL legacy PIC Oct 2 19:51:16.011926 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 19:51:16.011935 kernel: Console: colour dummy device 80x25 Oct 2 19:51:16.011943 kernel: printk: console [tty1] enabled Oct 2 19:51:16.011952 kernel: printk: console [ttyS0] enabled Oct 2 19:51:16.011959 kernel: printk: bootconsole [earlyser0] disabled Oct 2 19:51:16.011971 kernel: ACPI: Core revision 20210730 Oct 2 19:51:16.011978 kernel: Failed to register legacy timer interrupt Oct 2 19:51:16.011988 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:51:16.011996 kernel: Hyper-V: Using IPI hypercalls Oct 2 19:51:16.012004 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593905) Oct 2 19:51:16.012014 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:51:16.012021 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:51:16.012031 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:51:16.012039 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:51:16.012046 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:51:16.012057 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:51:16.012065 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:51:16.012072 kernel: RETBleed: Vulnerable Oct 2 19:51:16.012082 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:51:16.012089 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:16.012096 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:51:16.012106 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:51:16.012115 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:51:16.012123 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:51:16.012134 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:51:16.012145 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:51:16.012154 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:51:16.012162 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:51:16.012172 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:51:16.012179 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 19:51:16.012188 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 19:51:16.012197 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 19:51:16.012204 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 19:51:16.012214 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:51:16.012221 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:51:16.012229 kernel: LSM: Security Framework initializing Oct 2 19:51:16.012238 kernel: SELinux: Initializing. Oct 2 19:51:16.012248 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.012259 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.012267 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:51:16.012275 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:51:16.012284 kernel: signal: max sigframe size: 3632 Oct 2 19:51:16.012291 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:51:16.012302 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:51:16.012309 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:51:16.012316 kernel: x86: Booting SMP configuration: Oct 2 19:51:16.012326 kernel: .... node #0, CPUs: #1 Oct 2 19:51:16.012336 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 19:51:16.012347 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:51:16.012354 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:51:16.012362 kernel: smpboot: Max logical packages: 1 Oct 2 19:51:16.012371 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 19:51:16.012379 kernel: devtmpfs: initialized Oct 2 19:51:16.012388 kernel: x86/mm: Memory block size: 128MB Oct 2 19:51:16.012396 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 19:51:16.012408 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:51:16.012415 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:51:16.012423 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:51:16.012430 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:51:16.012440 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:51:16.012448 kernel: audit: type=2000 audit(1696276274.023:1): state=initialized audit_enabled=0 res=1 Oct 2 19:51:16.012455 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:51:16.012462 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:51:16.012469 kernel: cpuidle: using governor menu Oct 2 19:51:16.012482 kernel: ACPI: bus type PCI registered Oct 2 19:51:16.012489 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:51:16.012498 kernel: dca service started, version 1.12.1 Oct 2 19:51:16.012506 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:51:16.012514 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:51:16.012521 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:51:16.012528 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:51:16.012535 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:51:16.012542 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:51:16.012552 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:51:16.012562 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:51:16.012570 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:51:16.012585 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:51:16.012596 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 19:51:16.012605 kernel: ACPI: Interpreter enabled Oct 2 19:51:16.012616 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:51:16.012628 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:51:16.012640 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:51:16.012655 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 19:51:16.012668 kernel: iommu: Default domain type: Translated Oct 2 19:51:16.012681 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:51:16.012694 kernel: vgaarb: loaded Oct 2 19:51:16.012707 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:51:16.012721 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:51:16.012734 kernel: PTP clock support registered Oct 2 19:51:16.012748 kernel: Registered efivars operations Oct 2 19:51:16.012761 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:51:16.012774 kernel: PCI: System does not support PCI Oct 2 19:51:16.015510 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 19:51:16.015526 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:51:16.015556 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:51:16.015571 kernel: pnp: PnP ACPI init Oct 2 19:51:16.015598 kernel: pnp: PnP ACPI: found 3 devices Oct 2 19:51:16.015611 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:51:16.015624 kernel: NET: Registered PF_INET protocol family Oct 2 19:51:16.015637 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:51:16.015654 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 19:51:16.015668 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:51:16.015682 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 19:51:16.015695 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 19:51:16.015709 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 19:51:16.015722 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.015736 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 19:51:16.015750 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:51:16.015763 kernel: NET: Registered PF_XDP protocol family Oct 2 19:51:16.015779 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:51:16.015792 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 19:51:16.015806 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 19:51:16.015819 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:51:16.015833 kernel: Initialise system trusted keyrings Oct 2 19:51:16.015846 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 19:51:16.015859 kernel: Key type asymmetric registered Oct 2 19:51:16.015872 kernel: Asymmetric key parser 'x509' registered Oct 2 19:51:16.015885 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:51:16.015901 kernel: io scheduler mq-deadline registered Oct 2 19:51:16.015914 kernel: io scheduler kyber registered Oct 2 19:51:16.015928 kernel: io scheduler bfq registered Oct 2 19:51:16.015941 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:51:16.015954 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:51:16.015968 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:51:16.015981 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 19:51:16.015995 kernel: i8042: PNP: No PS/2 controller found. Oct 2 19:51:16.016151 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 19:51:16.016265 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T19:51:15 UTC (1696276275) Oct 2 19:51:16.016373 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 19:51:16.016390 kernel: fail to initialize ptp_kvm Oct 2 19:51:16.016404 kernel: intel_pstate: CPU model not supported Oct 2 19:51:16.016417 kernel: efifb: probing for efifb Oct 2 19:51:16.016431 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 19:51:16.016445 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 19:51:16.016458 kernel: efifb: scrolling: redraw Oct 2 19:51:16.016475 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 19:51:16.016488 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:51:16.016502 kernel: fb0: EFI VGA frame buffer device Oct 2 19:51:16.016515 kernel: pstore: Registered efi as persistent store backend Oct 2 19:51:16.016528 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:51:16.016542 kernel: Segment Routing with IPv6 Oct 2 19:51:16.016555 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:51:16.016568 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:51:16.016592 kernel: Key type dns_resolver registered Oct 2 19:51:16.016607 kernel: IPI shorthand broadcast: enabled Oct 2 19:51:16.016620 kernel: sched_clock: Marking stable (743241500, 22728900)->(950633800, -184663400) Oct 2 19:51:16.016633 kernel: registered taskstats version 1 Oct 2 19:51:16.016646 kernel: Loading compiled-in X.509 certificates Oct 2 19:51:16.016660 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:51:16.016673 kernel: Key type .fscrypt registered Oct 2 19:51:16.016686 kernel: Key type fscrypt-provisioning registered Oct 2 19:51:16.016699 kernel: pstore: Using crash dump compression: deflate Oct 2 19:51:16.016715 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:51:16.016728 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:51:16.016741 kernel: ima: No architecture policies found Oct 2 19:51:16.016754 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:51:16.016768 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:51:16.016781 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:51:16.016795 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:51:16.016808 kernel: Run /init as init process Oct 2 19:51:16.016821 kernel: with arguments: Oct 2 19:51:16.016835 kernel: /init Oct 2 19:51:16.016850 kernel: with environment: Oct 2 19:51:16.016863 kernel: HOME=/ Oct 2 19:51:16.016876 kernel: TERM=linux Oct 2 19:51:16.016889 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:51:16.016905 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:51:16.016921 systemd[1]: Detected virtualization microsoft. Oct 2 19:51:16.016935 systemd[1]: Detected architecture x86-64. Oct 2 19:51:16.016951 systemd[1]: Running in initrd. Oct 2 19:51:16.016965 systemd[1]: No hostname configured, using default hostname. Oct 2 19:51:16.016978 systemd[1]: Hostname set to . Oct 2 19:51:16.016993 systemd[1]: Initializing machine ID from random generator. Oct 2 19:51:16.017007 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:51:16.017020 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:51:16.017034 systemd[1]: Reached target cryptsetup.target. Oct 2 19:51:16.017048 systemd[1]: Reached target paths.target. Oct 2 19:51:16.017062 systemd[1]: Reached target slices.target. Oct 2 19:51:16.017078 systemd[1]: Reached target swap.target. Oct 2 19:51:16.017093 systemd[1]: Reached target timers.target. Oct 2 19:51:16.017108 systemd[1]: Listening on iscsid.socket. Oct 2 19:51:16.017122 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:51:16.017136 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:51:16.017151 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:51:16.017165 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:51:16.017182 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:51:16.017197 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:51:16.017211 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:51:16.017225 systemd[1]: Reached target sockets.target. Oct 2 19:51:16.017239 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:51:16.017253 systemd[1]: Finished network-cleanup.service. Oct 2 19:51:16.017268 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:51:16.017283 systemd[1]: Starting systemd-journald.service... Oct 2 19:51:16.017297 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:51:16.017314 systemd[1]: Starting systemd-resolved.service... Oct 2 19:51:16.017328 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:51:16.017346 systemd-journald[183]: Journal started Oct 2 19:51:16.017407 systemd-journald[183]: Runtime Journal (/run/log/journal/c2f733f42e61486cb3daaafebb99913b) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:16.017802 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 19:51:16.031603 systemd[1]: Started systemd-journald.service. Oct 2 19:51:16.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.049594 kernel: audit: type=1130 audit(1696276276.038:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.049713 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:51:16.057603 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:51:16.067599 kernel: Bridge firewalling registered Oct 2 19:51:16.063139 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 19:51:16.065550 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:51:16.072301 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:51:16.079862 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:51:16.096197 kernel: audit: type=1130 audit(1696276276.064:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.096215 kernel: SCSI subsystem initialized Oct 2 19:51:16.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.096429 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:51:16.110741 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:51:16.140063 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:51:16.140091 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:51:16.140103 kernel: audit: type=1130 audit(1696276276.071:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.140114 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:51:16.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.146515 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:51:16.149490 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 19:51:16.203474 kernel: audit: type=1130 audit(1696276276.076:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.203511 kernel: audit: type=1130 audit(1696276276.115:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.203533 kernel: audit: type=1130 audit(1696276276.147:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.203563 kernel: audit: type=1130 audit(1696276276.159:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.149986 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:51:16.207522 dracut-cmdline[201]: dracut-dracut-053 Oct 2 19:51:16.159077 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:51:16.171619 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:51:16.245179 kernel: audit: type=1130 audit(1696276276.215:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.245217 kernel: audit: type=1130 audit(1696276276.230:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.245319 dracut-cmdline[201]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:51:16.199074 systemd-resolved[185]: Positive Trust Anchors: Oct 2 19:51:16.199089 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:51:16.199124 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:51:16.204066 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 19:51:16.205307 systemd[1]: Started systemd-resolved.service. Oct 2 19:51:16.220888 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:51:16.231454 systemd[1]: Reached target nss-lookup.target. Oct 2 19:51:16.289600 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:51:16.302601 kernel: iscsi: registered transport (tcp) Oct 2 19:51:16.326126 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:51:16.326169 kernel: QLogic iSCSI HBA Driver Oct 2 19:51:16.354975 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:51:16.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.359662 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:51:16.410602 kernel: raid6: avx512x4 gen() 18344 MB/s Oct 2 19:51:16.430600 kernel: raid6: avx512x4 xor() 7146 MB/s Oct 2 19:51:16.450593 kernel: raid6: avx512x2 gen() 18382 MB/s Oct 2 19:51:16.470598 kernel: raid6: avx512x2 xor() 29951 MB/s Oct 2 19:51:16.490591 kernel: raid6: avx512x1 gen() 18266 MB/s Oct 2 19:51:16.510595 kernel: raid6: avx512x1 xor() 26941 MB/s Oct 2 19:51:16.530597 kernel: raid6: avx2x4 gen() 18235 MB/s Oct 2 19:51:16.550595 kernel: raid6: avx2x4 xor() 6875 MB/s Oct 2 19:51:16.570592 kernel: raid6: avx2x2 gen() 18146 MB/s Oct 2 19:51:16.590598 kernel: raid6: avx2x2 xor() 22222 MB/s Oct 2 19:51:16.610593 kernel: raid6: avx2x1 gen() 13819 MB/s Oct 2 19:51:16.630594 kernel: raid6: avx2x1 xor() 19387 MB/s Oct 2 19:51:16.651597 kernel: raid6: sse2x4 gen() 11740 MB/s Oct 2 19:51:16.670591 kernel: raid6: sse2x4 xor() 5948 MB/s Oct 2 19:51:16.690592 kernel: raid6: sse2x2 gen() 12820 MB/s Oct 2 19:51:16.710596 kernel: raid6: sse2x2 xor() 7696 MB/s Oct 2 19:51:16.729593 kernel: raid6: sse2x1 gen() 11670 MB/s Oct 2 19:51:16.752685 kernel: raid6: sse2x1 xor() 5915 MB/s Oct 2 19:51:16.752705 kernel: raid6: using algorithm avx512x2 gen() 18382 MB/s Oct 2 19:51:16.752716 kernel: raid6: .... xor() 29951 MB/s, rmw enabled Oct 2 19:51:16.759062 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:51:16.775601 kernel: xor: automatically using best checksumming function avx Oct 2 19:51:16.870617 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:51:16.878942 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:51:16.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.882000 audit: BPF prog-id=7 op=LOAD Oct 2 19:51:16.882000 audit: BPF prog-id=8 op=LOAD Oct 2 19:51:16.883987 systemd[1]: Starting systemd-udevd.service... Oct 2 19:51:16.898808 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:51:16.903449 systemd[1]: Started systemd-udevd.service. Oct 2 19:51:16.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.911213 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:51:16.927448 dracut-pre-trigger[401]: rd.md=0: removing MD RAID activation Oct 2 19:51:16.957648 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:51:16.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.962359 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:51:16.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:16.996774 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:51:17.041597 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:51:17.069173 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 19:51:17.084282 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 19:51:17.097597 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 19:51:17.110597 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 19:51:17.115612 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 19:51:17.118592 kernel: scsi host1: storvsc_host_t Oct 2 19:51:17.128736 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:51:17.128771 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 19:51:17.128787 kernel: scsi host0: storvsc_host_t Oct 2 19:51:17.137440 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 19:51:17.137507 kernel: AES CTR mode by8 optimization enabled Oct 2 19:51:17.145948 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 19:51:17.159611 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 19:51:17.179602 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 19:51:17.188597 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 19:51:17.196523 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 19:51:17.196765 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 19:51:17.204305 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 19:51:17.204467 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 19:51:17.204619 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 19:51:17.209157 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 19:51:17.209327 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 19:51:17.209459 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 19:51:17.227609 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:17.231617 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 19:51:17.338217 kernel: hv_netvsc 000d3ab4-c1e3-000d-3ab4-c1e3000d3ab4 eth0: VF slot 1 added Oct 2 19:51:17.346599 kernel: hv_vmbus: registering driver hv_pci Oct 2 19:51:17.346642 kernel: hv_pci a6051523-7756-4de4-b3df-f912b3c27332: PCI VMBus probing: Using version 0x10004 Oct 2 19:51:17.359598 kernel: hv_pci a6051523-7756-4de4-b3df-f912b3c27332: PCI host bridge to bus 7756:00 Oct 2 19:51:17.359764 kernel: pci_bus 7756:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 19:51:17.368158 kernel: pci_bus 7756:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 19:51:17.373670 kernel: pci 7756:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 19:51:17.383450 kernel: pci 7756:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:17.401697 kernel: pci 7756:00:02.0: enabling Extended Tags Oct 2 19:51:17.419431 kernel: pci 7756:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7756:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 19:51:17.419637 kernel: pci_bus 7756:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 19:51:17.419758 kernel: pci 7756:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 19:51:17.522741 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:51:17.538604 kernel: mlx5_core 7756:00:02.0: firmware version: 14.30.1224 Oct 2 19:51:17.546596 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (435) Oct 2 19:51:17.568229 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:51:17.682395 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:51:17.689721 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:51:17.694647 systemd[1]: Starting disk-uuid.service... Oct 2 19:51:17.714787 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:51:17.720138 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:17.727597 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:17.737068 kernel: mlx5_core 7756:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 19:51:17.882470 kernel: mlx5_core 7756:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 19:51:17.882775 kernel: mlx5_core 7756:00:02.0: mlx5e_tc_post_act_init:40:(pid 190): firmware level support is missing Oct 2 19:51:17.906592 kernel: hv_netvsc 000d3ab4-c1e3-000d-3ab4-c1e3000d3ab4 eth0: VF registering: eth1 Oct 2 19:51:17.906765 kernel: mlx5_core 7756:00:02.0 eth1: joined to eth0 Oct 2 19:51:17.931557 kernel: mlx5_core 7756:00:02.0 enP30550s1: renamed from eth1 Oct 2 19:51:18.727606 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 19:51:18.731628 disk-uuid[548]: The operation has completed successfully. Oct 2 19:51:18.814262 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:51:18.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:18.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:18.814363 systemd[1]: Finished disk-uuid.service. Oct 2 19:51:18.821140 systemd[1]: Starting verity-setup.service... Oct 2 19:51:18.864596 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:51:19.067059 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:51:19.074716 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:51:19.079574 systemd[1]: Finished verity-setup.service. Oct 2 19:51:19.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.156618 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:51:19.156618 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:51:19.158850 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:51:19.159656 systemd[1]: Starting ignition-setup.service... Oct 2 19:51:19.189298 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:19.189333 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:19.189351 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:19.167541 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:51:19.238167 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:51:19.251610 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:51:19.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.255000 audit: BPF prog-id=9 op=LOAD Oct 2 19:51:19.256533 systemd[1]: Starting systemd-networkd.service... Oct 2 19:51:19.282865 systemd-networkd[797]: lo: Link UP Oct 2 19:51:19.282874 systemd-networkd[797]: lo: Gained carrier Oct 2 19:51:19.286879 systemd-networkd[797]: Enumeration completed Oct 2 19:51:19.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.286983 systemd[1]: Started systemd-networkd.service. Oct 2 19:51:19.287908 systemd-networkd[797]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:51:19.289199 systemd[1]: Reached target network.target. Oct 2 19:51:19.300150 systemd[1]: Starting iscsiuio.service... Oct 2 19:51:19.309055 systemd[1]: Started iscsiuio.service. Oct 2 19:51:19.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.311905 systemd[1]: Starting iscsid.service... Oct 2 19:51:19.317573 iscsid[802]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:19.317573 iscsid[802]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:51:19.317573 iscsid[802]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:51:19.317573 iscsid[802]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:51:19.317573 iscsid[802]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:51:19.317573 iscsid[802]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:51:19.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.317682 systemd[1]: Started iscsid.service. Oct 2 19:51:19.348251 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:51:19.356322 kernel: mlx5_core 7756:00:02.0 enP30550s1: Link up Oct 2 19:51:19.366182 systemd[1]: Finished ignition-setup.service. Oct 2 19:51:19.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.368280 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:51:19.371933 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:51:19.373884 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:51:19.376136 systemd[1]: Reached target remote-fs.target. Oct 2 19:51:19.380572 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:51:19.397000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:19.392171 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:51:19.394406 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:51:19.430604 kernel: hv_netvsc 000d3ab4-c1e3-000d-3ab4-c1e3000d3ab4 eth0: Data path switched to VF: enP30550s1 Oct 2 19:51:19.436182 systemd-networkd[797]: enP30550s1: Link UP Oct 2 19:51:19.438163 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:51:19.436434 systemd-networkd[797]: eth0: Link UP Oct 2 19:51:19.436940 systemd-networkd[797]: eth0: Gained carrier Oct 2 19:51:19.445044 systemd-networkd[797]: enP30550s1: Gained carrier Oct 2 19:51:19.482675 systemd-networkd[797]: eth0: DHCPv4 address 10.200.8.17/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:51:20.860806 systemd-networkd[797]: eth0: Gained IPv6LL Oct 2 19:51:21.596940 ignition[817]: Ignition 2.14.0 Oct 2 19:51:21.596958 ignition[817]: Stage: fetch-offline Oct 2 19:51:21.597054 ignition[817]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.597108 ignition[817]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.632273 ignition[817]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.676369 ignition[817]: parsed url from cmdline: "" Oct 2 19:51:21.676503 ignition[817]: no config URL provided Oct 2 19:51:21.676531 ignition[817]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:21.676548 ignition[817]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:21.681194 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:51:21.703339 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:51:21.703371 kernel: audit: type=1130 audit(1696276281.685:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.676556 ignition[817]: failed to fetch config: resource requires networking Oct 2 19:51:21.686463 systemd[1]: Starting ignition-fetch.service... Oct 2 19:51:21.679694 ignition[817]: Ignition finished successfully Oct 2 19:51:21.695137 ignition[824]: Ignition 2.14.0 Oct 2 19:51:21.695144 ignition[824]: Stage: fetch Oct 2 19:51:21.695247 ignition[824]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.695272 ignition[824]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.698593 ignition[824]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.700772 ignition[824]: parsed url from cmdline: "" Oct 2 19:51:21.700783 ignition[824]: no config URL provided Oct 2 19:51:21.700801 ignition[824]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:51:21.700818 ignition[824]: no config at "/usr/lib/ignition/user.ign" Oct 2 19:51:21.700889 ignition[824]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 19:51:21.742830 ignition[824]: GET result: OK Oct 2 19:51:21.742849 ignition[824]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 19:51:21.823996 ignition[824]: opening config device: "/dev/sr0" Oct 2 19:51:21.824482 ignition[824]: getting drive status for "/dev/sr0" Oct 2 19:51:21.824542 ignition[824]: drive status: OK Oct 2 19:51:21.824602 ignition[824]: mounting config device Oct 2 19:51:21.824634 ignition[824]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure2977186170" Oct 2 19:51:21.847923 ignition[824]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure2977186170" Oct 2 19:51:21.851205 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 19:51:21.849924 systemd[1]: tmp-ignition\x2dazure2977186170.mount: Deactivated successfully. Oct 2 19:51:21.847936 ignition[824]: checking for config drive Oct 2 19:51:21.848343 ignition[824]: reading config Oct 2 19:51:21.849620 ignition[824]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure2977186170" Oct 2 19:51:21.850985 ignition[824]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure2977186170" Oct 2 19:51:21.851020 ignition[824]: config has been read from custom data Oct 2 19:51:21.851100 ignition[824]: parsing config with SHA512: 8845310b1f795e33885c112d974c98ab67b50ec9ed2b257c36ce70acb4dd1b7755ff3c6cdb2acdb2f7c28b815ffe53d42fc0093d4b563a355aee7cf5de444074 Oct 2 19:51:21.877177 unknown[824]: fetched base config from "system" Oct 2 19:51:21.878424 unknown[824]: fetched base config from "system" Oct 2 19:51:21.878987 ignition[824]: fetch: fetch complete Oct 2 19:51:21.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.878432 unknown[824]: fetched user config from "azure" Oct 2 19:51:21.898979 kernel: audit: type=1130 audit(1696276281.882:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.878993 ignition[824]: fetch: fetch passed Oct 2 19:51:21.880985 systemd[1]: Finished ignition-fetch.service. Oct 2 19:51:21.879031 ignition[824]: Ignition finished successfully Oct 2 19:51:21.884166 systemd[1]: Starting ignition-kargs.service... Oct 2 19:51:21.906842 ignition[832]: Ignition 2.14.0 Oct 2 19:51:21.906853 ignition[832]: Stage: kargs Oct 2 19:51:21.906974 ignition[832]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.907001 ignition[832]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.910556 ignition[832]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.913562 ignition[832]: kargs: kargs passed Oct 2 19:51:21.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.916261 systemd[1]: Finished ignition-kargs.service. Oct 2 19:51:21.937260 kernel: audit: type=1130 audit(1696276281.918:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.913632 ignition[832]: Ignition finished successfully Oct 2 19:51:21.938750 ignition[838]: Ignition 2.14.0 Oct 2 19:51:21.940914 systemd[1]: Starting ignition-disks.service... Oct 2 19:51:21.938755 ignition[838]: Stage: disks Oct 2 19:51:21.938856 ignition[838]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:21.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.945781 systemd[1]: Finished ignition-disks.service. Oct 2 19:51:21.968318 kernel: audit: type=1130 audit(1696276281.947:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:21.938877 ignition[838]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:21.948493 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:51:21.942396 ignition[838]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:21.962193 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:51:21.944534 ignition[838]: disks: disks passed Oct 2 19:51:21.966526 systemd[1]: Reached target local-fs.target. Oct 2 19:51:21.944590 ignition[838]: Ignition finished successfully Oct 2 19:51:21.968338 systemd[1]: Reached target sysinit.target. Oct 2 19:51:21.970160 systemd[1]: Reached target basic.target. Oct 2 19:51:21.972940 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:51:22.020951 systemd-fsck[846]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 19:51:22.025825 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:51:22.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.031157 systemd[1]: Mounting sysroot.mount... Oct 2 19:51:22.046763 kernel: audit: type=1130 audit(1696276282.030:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.056424 systemd[1]: Mounted sysroot.mount. Oct 2 19:51:22.061313 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:51:22.061382 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:51:22.087614 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:51:22.093512 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 19:51:22.098237 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:51:22.098276 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:51:22.107348 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:51:22.132881 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:22.135840 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:51:22.150620 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (856) Oct 2 19:51:22.157383 initrd-setup-root[861]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:51:22.165687 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:22.165707 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:22.165724 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:22.168658 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:22.175138 initrd-setup-root[887]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:51:22.192461 initrd-setup-root[895]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:51:22.199140 initrd-setup-root[903]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:51:22.550310 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:51:22.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.556992 systemd[1]: Starting ignition-mount.service... Oct 2 19:51:22.572143 kernel: audit: type=1130 audit(1696276282.555:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.572006 systemd[1]: Starting sysroot-boot.service... Oct 2 19:51:22.593534 ignition[923]: INFO : Ignition 2.14.0 Oct 2 19:51:22.593534 ignition[923]: INFO : Stage: mount Oct 2 19:51:22.598019 ignition[923]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:22.598019 ignition[923]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:22.607284 ignition[923]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:22.607284 ignition[923]: INFO : mount: mount passed Oct 2 19:51:22.607284 ignition[923]: INFO : Ignition finished successfully Oct 2 19:51:22.614812 systemd[1]: Finished sysroot-boot.service. Oct 2 19:51:22.616000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.616888 systemd[1]: Finished ignition-mount.service. Oct 2 19:51:22.634384 kernel: audit: type=1130 audit(1696276282.616:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.646599 kernel: audit: type=1130 audit(1696276282.634:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:22.849338 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:22.849434 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:51:23.081453 coreos-metadata[855]: Oct 02 19:51:23.081 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 19:51:23.096789 coreos-metadata[855]: Oct 02 19:51:23.096 INFO Fetch successful Oct 2 19:51:23.131853 coreos-metadata[855]: Oct 02 19:51:23.131 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 19:51:23.142268 coreos-metadata[855]: Oct 02 19:51:23.142 INFO Fetch successful Oct 2 19:51:23.155999 coreos-metadata[855]: Oct 02 19:51:23.155 INFO wrote hostname ci-3510.3.0-a-74ed58c6f8 to /sysroot/etc/hostname Oct 2 19:51:23.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:23.157815 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 19:51:23.180952 kernel: audit: type=1130 audit(1696276283.165:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:23.167167 systemd[1]: Starting ignition-files.service... Oct 2 19:51:23.187188 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:51:23.200613 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (934) Oct 2 19:51:23.213018 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:51:23.213048 kernel: BTRFS info (device sda6): using free space tree Oct 2 19:51:23.213063 kernel: BTRFS info (device sda6): has skinny extents Oct 2 19:51:23.221003 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:51:23.233353 ignition[953]: INFO : Ignition 2.14.0 Oct 2 19:51:23.235547 ignition[953]: INFO : Stage: files Oct 2 19:51:23.235547 ignition[953]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:23.235547 ignition[953]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:23.245799 ignition[953]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:23.254140 ignition[953]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:51:23.257247 ignition[953]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:51:23.257247 ignition[953]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:51:23.291033 ignition[953]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:51:23.294818 ignition[953]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:51:23.317098 unknown[953]: wrote ssh authorized keys file for user: core Oct 2 19:51:23.319729 ignition[953]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:51:23.323722 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:51:23.328479 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:51:23.833343 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 19:51:24.616828 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:51:24.624851 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:51:24.624851 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:51:24.624851 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:24.932919 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 19:51:25.021808 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:51:25.028872 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:51:25.054439 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:25.058665 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:51:25.218653 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 19:51:27.174959 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:51:27.183238 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:51:27.183238 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:27.183238 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:51:27.332341 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 19:51:31.160992 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:51:31.170492 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:51:31.170492 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:31.170492 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:51:31.297824 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 19:51:33.339107 ignition[953]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:51:33.347409 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:51:33.347409 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:33.347409 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:51:33.347409 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:33.347409 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:51:33.729378 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 19:51:34.198884 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:51:34.198884 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:34.207902 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:51:34.207902 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:34.216244 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:51:34.220410 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:34.225748 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:34.238311 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4025561214" Oct 2 19:51:34.238311 ignition[953]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4025561214": device or resource busy Oct 2 19:51:34.238311 ignition[953]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4025561214", trying btrfs: device or resource busy Oct 2 19:51:34.238311 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4025561214" Oct 2 19:51:34.264460 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (956) Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4025561214" Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem4025561214" Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem4025561214" Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:34.264490 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:51:34.298523 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3659342372" Oct 2 19:51:34.303480 ignition[953]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3659342372": device or resource busy Oct 2 19:51:34.303480 ignition[953]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3659342372", trying btrfs: device or resource busy Oct 2 19:51:34.303480 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3659342372" Oct 2 19:51:34.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.321496 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3659342372" Oct 2 19:51:34.321496 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem3659342372" Oct 2 19:51:34.321496 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem3659342372" Oct 2 19:51:34.321496 ignition[953]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:51:34.321496 ignition[953]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:34.437980 kernel: audit: type=1130 audit(1696276294.319:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.438005 kernel: audit: type=1130 audit(1696276294.363:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.438016 kernel: audit: type=1131 audit(1696276294.371:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.307495 systemd[1]: mnt-oem3659342372.mount: Deactivated successfully. Oct 2 19:51:34.440664 ignition[953]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:51:34.440664 ignition[953]: INFO : files: op(1c): [started] setting preset to enabled for "waagent.service" Oct 2 19:51:34.440664 ignition[953]: INFO : files: op(1c): [finished] setting preset to enabled for "waagent.service" Oct 2 19:51:34.440664 ignition[953]: INFO : files: op(1d): [started] setting preset to enabled for "nvidia.service" Oct 2 19:51:34.440664 ignition[953]: INFO : files: op(1d): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:51:34.440664 ignition[953]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:34.440664 ignition[953]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:51:34.440664 ignition[953]: INFO : files: files passed Oct 2 19:51:34.440664 ignition[953]: INFO : Ignition finished successfully Oct 2 19:51:34.491558 kernel: audit: type=1130 audit(1696276294.471:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.315992 systemd[1]: Finished ignition-files.service. Oct 2 19:51:34.339693 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:51:34.495745 initrd-setup-root-after-ignition[979]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:51:34.342458 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:51:34.345672 systemd[1]: Starting ignition-quench.service... Oct 2 19:51:34.357178 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:51:34.357273 systemd[1]: Finished ignition-quench.service. Oct 2 19:51:34.466726 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:51:34.471921 systemd[1]: Reached target ignition-complete.target. Oct 2 19:51:34.504342 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:51:34.519889 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:51:34.520001 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:51:34.549904 kernel: audit: type=1130 audit(1696276294.524:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.549935 kernel: audit: type=1131 audit(1696276294.524:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.524344 systemd[1]: Reached target initrd-fs.target. Oct 2 19:51:34.546651 systemd[1]: Reached target initrd.target. Oct 2 19:51:34.549938 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:51:34.550714 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:51:34.563714 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:51:34.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.568220 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:51:34.583545 kernel: audit: type=1130 audit(1696276294.567:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.588987 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:51:34.593052 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:51:34.597132 systemd[1]: Stopped target timers.target. Oct 2 19:51:34.600764 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:51:34.603062 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:51:34.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.606903 systemd[1]: Stopped target initrd.target. Oct 2 19:51:34.620875 kernel: audit: type=1131 audit(1696276294.606:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.620997 systemd[1]: Stopped target basic.target. Oct 2 19:51:34.624653 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:51:34.628991 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:51:34.633179 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:51:34.637285 systemd[1]: Stopped target remote-fs.target. Oct 2 19:51:34.641417 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:51:34.645525 systemd[1]: Stopped target sysinit.target. Oct 2 19:51:34.649090 systemd[1]: Stopped target local-fs.target. Oct 2 19:51:34.652855 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:51:34.656992 systemd[1]: Stopped target swap.target. Oct 2 19:51:34.660419 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:51:34.662700 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:51:34.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.666616 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:51:34.681554 kernel: audit: type=1131 audit(1696276294.666:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.681649 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:51:34.683991 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:51:34.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.688089 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:51:34.725186 kernel: audit: type=1131 audit(1696276294.687:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.688222 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:51:34.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.727534 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:51:34.729812 systemd[1]: Stopped ignition-files.service. Oct 2 19:51:34.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.733483 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 19:51:34.736047 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 19:51:34.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.741222 systemd[1]: Stopping ignition-mount.service... Oct 2 19:51:34.743331 systemd[1]: Stopping iscsiuio.service... Oct 2 19:51:34.750156 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:51:34.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.751899 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:51:34.762801 ignition[992]: INFO : Ignition 2.14.0 Oct 2 19:51:34.762801 ignition[992]: INFO : Stage: umount Oct 2 19:51:34.762801 ignition[992]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:51:34.762801 ignition[992]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 19:51:34.753598 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:51:34.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.778834 ignition[992]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 19:51:34.778834 ignition[992]: INFO : umount: umount passed Oct 2 19:51:34.778834 ignition[992]: INFO : Ignition finished successfully Oct 2 19:51:34.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.757500 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:51:34.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.757663 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:51:34.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.779196 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:51:34.779299 systemd[1]: Stopped iscsiuio.service. Oct 2 19:51:34.784131 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:51:34.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.784218 systemd[1]: Stopped ignition-mount.service. Oct 2 19:51:34.788341 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:51:34.788428 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:51:34.792207 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:51:34.792254 systemd[1]: Stopped ignition-disks.service. Oct 2 19:51:34.795674 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:51:34.795720 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:51:34.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.797694 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:51:34.797731 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:51:34.801285 systemd[1]: Stopped target network.target. Oct 2 19:51:34.803224 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:51:34.803274 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:51:34.810970 systemd[1]: Stopped target paths.target. Oct 2 19:51:34.812729 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:51:34.817646 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:51:34.820801 systemd[1]: Stopped target slices.target. Oct 2 19:51:34.822490 systemd[1]: Stopped target sockets.target. Oct 2 19:51:34.828048 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:51:34.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.828084 systemd[1]: Closed iscsid.socket. Oct 2 19:51:34.831512 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:51:34.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.831556 systemd[1]: Closed iscsiuio.socket. Oct 2 19:51:34.835402 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:51:34.874000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:51:34.835451 systemd[1]: Stopped ignition-setup.service. Oct 2 19:51:34.839234 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:51:34.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.842276 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:51:34.862632 systemd-networkd[797]: eth0: DHCPv6 lease lost Oct 2 19:51:34.889000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:51:34.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.863892 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:51:34.863995 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:51:34.868719 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:51:34.868814 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:51:34.874671 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:51:34.874706 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:51:34.879487 systemd[1]: Stopping network-cleanup.service... Oct 2 19:51:34.882165 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:51:34.882226 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:51:34.886158 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:51:34.886212 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:51:34.892236 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:51:34.894802 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:51:34.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.919516 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:51:34.924965 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 19:51:34.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.925507 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:51:34.925644 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:51:34.932845 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:51:34.932887 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:51:34.938512 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:51:34.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.938549 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:51:34.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.942327 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:51:34.942377 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:51:34.946750 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:51:34.946795 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:51:34.948658 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:51:34.948698 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:51:34.953065 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:51:34.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.967339 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:51:34.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:34.967394 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:51:34.973937 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:51:34.973981 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:51:34.976118 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:51:34.976167 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:51:34.978546 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:51:34.978649 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:51:35.014602 kernel: hv_netvsc 000d3ab4-c1e3-000d-3ab4-c1e3000d3ab4 eth0: Data path switched from VF: enP30550s1 Oct 2 19:51:35.032301 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:51:35.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.032416 systemd[1]: Stopped network-cleanup.service. Oct 2 19:51:35.106128 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:51:35.106260 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:51:35.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.113538 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:51:35.118313 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:51:35.118376 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:51:35.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:35.124947 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:51:35.139772 systemd[1]: Switching root. Oct 2 19:51:35.169019 iscsid[802]: iscsid shutting down. Oct 2 19:51:35.170876 systemd-journald[183]: Received SIGTERM from PID 1 (n/a). Oct 2 19:51:35.170943 systemd-journald[183]: Journal stopped Oct 2 19:51:51.090733 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:51:51.090800 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:51:51.090818 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:51:51.090831 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:51:51.090843 kernel: SELinux: policy capability open_perms=1 Oct 2 19:51:51.090857 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:51:51.090883 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:51:51.090900 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:51:51.090913 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:51:51.090926 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:51:51.090939 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:51:51.090955 systemd[1]: Successfully loaded SELinux policy in 541.154ms. Oct 2 19:51:51.090971 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 28.369ms. Oct 2 19:51:51.090988 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:51:51.091008 systemd[1]: Detected virtualization microsoft. Oct 2 19:51:51.091022 systemd[1]: Detected architecture x86-64. Oct 2 19:51:51.091037 systemd[1]: Detected first boot. Oct 2 19:51:51.091053 systemd[1]: Hostname set to . Oct 2 19:51:51.091067 systemd[1]: Initializing machine ID from random generator. Oct 2 19:51:51.091083 kernel: kauditd_printk_skb: 34 callbacks suppressed Oct 2 19:51:51.091098 kernel: audit: type=1400 audit(1696276299.927:82): avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:51.091114 kernel: audit: type=1400 audit(1696276299.944:83): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:51.091132 kernel: audit: type=1400 audit(1696276299.944:84): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:51.091145 kernel: audit: type=1334 audit(1696276299.959:85): prog-id=10 op=LOAD Oct 2 19:51:51.091161 kernel: audit: type=1334 audit(1696276299.959:86): prog-id=10 op=UNLOAD Oct 2 19:51:51.091178 kernel: audit: type=1334 audit(1696276299.972:87): prog-id=11 op=LOAD Oct 2 19:51:51.091192 kernel: audit: type=1334 audit(1696276299.972:88): prog-id=11 op=UNLOAD Oct 2 19:51:51.091206 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:51:51.091222 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:51:51.091238 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:51:51.091255 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:51:51.091271 kernel: audit: type=1334 audit(1696276310.567:89): prog-id=12 op=LOAD Oct 2 19:51:51.091284 kernel: audit: type=1334 audit(1696276310.567:90): prog-id=3 op=UNLOAD Oct 2 19:51:51.091301 kernel: audit: type=1334 audit(1696276310.573:91): prog-id=13 op=LOAD Oct 2 19:51:51.091317 kernel: audit: type=1334 audit(1696276310.578:92): prog-id=14 op=LOAD Oct 2 19:51:51.091330 kernel: audit: type=1334 audit(1696276310.578:93): prog-id=4 op=UNLOAD Oct 2 19:51:51.091346 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:51:51.091359 kernel: audit: type=1334 audit(1696276310.578:94): prog-id=5 op=UNLOAD Oct 2 19:51:51.091375 kernel: audit: type=1131 audit(1696276310.580:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.091400 kernel: audit: type=1334 audit(1696276310.613:96): prog-id=12 op=UNLOAD Oct 2 19:51:51.091419 systemd[1]: Stopped iscsid.service. Oct 2 19:51:51.091454 kernel: audit: type=1131 audit(1696276310.622:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.091469 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:51:51.091487 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:51:51.091500 kernel: audit: type=1130 audit(1696276310.644:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.091509 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:51:51.094055 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:51:51.094082 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:51:51.094099 systemd[1]: Created slice system-getty.slice. Oct 2 19:51:51.094111 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:51:51.094122 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:51:51.094134 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:51:51.094147 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:51:51.094157 systemd[1]: Created slice user.slice. Oct 2 19:51:51.094169 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:51:51.094183 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:51:51.094192 systemd[1]: Set up automount boot.automount. Oct 2 19:51:51.094207 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:51:51.094220 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:51:51.094230 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:51:51.094242 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:51:51.094253 systemd[1]: Reached target integritysetup.target. Oct 2 19:51:51.094264 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:51:51.094276 systemd[1]: Reached target remote-fs.target. Oct 2 19:51:51.094290 systemd[1]: Reached target slices.target. Oct 2 19:51:51.094301 systemd[1]: Reached target swap.target. Oct 2 19:51:51.094313 systemd[1]: Reached target torcx.target. Oct 2 19:51:51.094325 systemd[1]: Reached target veritysetup.target. Oct 2 19:51:51.094336 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:51:51.094348 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:51:51.094363 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:51:51.094374 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:51:51.094387 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:51:51.094401 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:51:51.094411 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:51:51.094423 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:51:51.094437 systemd[1]: Mounting media.mount... Oct 2 19:51:51.094447 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:51:51.094461 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:51:51.094474 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:51:51.094484 systemd[1]: Mounting tmp.mount... Oct 2 19:51:51.094496 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:51:51.094510 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:51:51.094520 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:51:51.094529 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:51:51.094540 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:51:51.094552 systemd[1]: Starting modprobe@drm.service... Oct 2 19:51:51.094566 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:51:51.094578 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:51:51.094607 systemd[1]: Starting modprobe@loop.service... Oct 2 19:51:51.094621 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:51:51.094631 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:51:51.094641 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:51:51.094654 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:51:51.094664 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:51:51.094676 systemd[1]: Stopped systemd-journald.service. Oct 2 19:51:51.094686 systemd[1]: Starting systemd-journald.service... Oct 2 19:51:51.094695 kernel: loop: module loaded Oct 2 19:51:51.094705 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:51:51.094714 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:51:51.094724 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:51:51.094733 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:51:51.094743 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:51:51.094752 systemd[1]: Stopped verity-setup.service. Oct 2 19:51:51.094768 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:51:51.094781 kernel: fuse: init (API version 7.34) Oct 2 19:51:51.094791 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:51:51.094803 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:51:51.094814 systemd[1]: Mounted media.mount. Oct 2 19:51:51.094827 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:51:51.094837 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:51:51.094850 systemd[1]: Mounted tmp.mount. Oct 2 19:51:51.094862 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:51:51.094875 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:51:51.094894 systemd-journald[1106]: Journal started Oct 2 19:51:51.094944 systemd-journald[1106]: Runtime Journal (/run/log/journal/3fea1c115f15481e91472edd344abecb) is 8.0M, max 159.0M, 151.0M free. Oct 2 19:51:38.892000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:51:39.927000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:39.944000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:39.944000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:51:39.959000 audit: BPF prog-id=10 op=LOAD Oct 2 19:51:39.959000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:51:39.972000 audit: BPF prog-id=11 op=LOAD Oct 2 19:51:39.972000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:51:50.567000 audit: BPF prog-id=12 op=LOAD Oct 2 19:51:50.567000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:51:50.573000 audit: BPF prog-id=13 op=LOAD Oct 2 19:51:50.578000 audit: BPF prog-id=14 op=LOAD Oct 2 19:51:50.578000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:51:50.578000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:51:50.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.613000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:51:50.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.967000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.968000 audit: BPF prog-id=15 op=LOAD Oct 2 19:51:50.968000 audit: BPF prog-id=16 op=LOAD Oct 2 19:51:50.968000 audit: BPF prog-id=17 op=LOAD Oct 2 19:51:50.968000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:51:50.968000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:51:51.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.086000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:51:51.086000 audit[1106]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffcee0aa340 a2=4000 a3=7ffcee0aa3dc items=0 ppid=1 pid=1106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:51.086000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:51:51.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:50.566490 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:51:42.984014 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:51:50.580563 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:51:42.984395 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:42.984418 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:42.984459 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:51:42.984471 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:51:42.984517 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:51:42.984532 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:51:42.984793 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:51:42.984853 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:51:42.984871 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:51:42.985297 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:51:42.985339 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:51:42.985360 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:51:51.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:42.985378 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:51:42.985398 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:51:42.985414 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:42Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:51:49.587608 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:49.587887 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:49.588016 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:49.588190 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:51:49.588241 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:51:49.588299 /usr/lib/systemd/system-generators/torcx-generator[1025]: time="2023-10-02T19:51:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:51:51.102608 systemd[1]: Started systemd-journald.service. Oct 2 19:51:51.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.105496 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:51:51.105659 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:51:51.107861 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:51:51.108006 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:51:51.110153 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:51:51.110335 systemd[1]: Finished modprobe@drm.service. Oct 2 19:51:51.112568 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:51:51.112755 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:51:51.115057 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:51:51.115215 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:51:51.117401 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:51:51.117692 systemd[1]: Finished modprobe@loop.service. Oct 2 19:51:51.120066 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:51:51.122490 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:51:51.125099 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:51:51.128097 systemd[1]: Reached target network-pre.target. Oct 2 19:51:51.131664 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:51:51.135304 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:51:51.139500 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:51:51.151781 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:51:51.155351 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:51:51.157502 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:51:51.159060 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:51:51.161108 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:51:51.162667 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:51:51.167166 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:51:51.172161 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:51:51.176088 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:51:51.195026 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:51:51.198846 systemd-journald[1106]: Time spent on flushing to /var/log/journal/3fea1c115f15481e91472edd344abecb is 24.162ms for 1177 entries. Oct 2 19:51:51.198846 systemd-journald[1106]: System Journal (/var/log/journal/3fea1c115f15481e91472edd344abecb) is 8.0M, max 2.6G, 2.6G free. Oct 2 19:51:51.259369 systemd-journald[1106]: Received client request to flush runtime journal. Oct 2 19:51:51.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.203688 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:51:51.217641 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:51:51.262097 udevadm[1149]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:51:51.221199 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:51:51.253906 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:51:51.260399 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:51:51.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.592772 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:51:51.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:51.596448 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:51:51.920404 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:51:51.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.428326 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:51:52.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.430000 audit: BPF prog-id=18 op=LOAD Oct 2 19:51:52.430000 audit: BPF prog-id=19 op=LOAD Oct 2 19:51:52.430000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:51:52.430000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:51:52.431969 systemd[1]: Starting systemd-udevd.service... Oct 2 19:51:52.449532 systemd-udevd[1153]: Using default interface naming scheme 'v252'. Oct 2 19:51:52.643775 systemd[1]: Started systemd-udevd.service. Oct 2 19:51:52.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.647000 audit: BPF prog-id=20 op=LOAD Oct 2 19:51:52.649042 systemd[1]: Starting systemd-networkd.service... Oct 2 19:51:52.685358 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:51:52.721000 audit: BPF prog-id=21 op=LOAD Oct 2 19:51:52.721000 audit: BPF prog-id=22 op=LOAD Oct 2 19:51:52.721000 audit: BPF prog-id=23 op=LOAD Oct 2 19:51:52.723151 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:51:52.750608 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:51:52.769000 audit[1177]: AVC avc: denied { confidentiality } for pid=1177 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:51:52.778753 kernel: hv_vmbus: registering driver hv_balloon Oct 2 19:51:52.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:52.784507 systemd[1]: Started systemd-userdbd.service. Oct 2 19:51:52.804618 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 19:51:52.844173 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 19:51:52.844265 kernel: hv_vmbus: registering driver hv_utils Oct 2 19:51:52.852662 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 19:51:52.769000 audit[1177]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=559cc2aff100 a1=f884 a2=7fde75dd1bc5 a3=5 items=10 ppid=1153 pid=1177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:52.769000 audit: CWD cwd="/" Oct 2 19:51:52.769000 audit: PATH item=0 name=(null) inode=15836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=1 name=(null) inode=15837 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=2 name=(null) inode=15836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=3 name=(null) inode=15838 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=4 name=(null) inode=15836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=5 name=(null) inode=15839 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=6 name=(null) inode=15836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=7 name=(null) inode=15840 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=8 name=(null) inode=15836 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PATH item=9 name=(null) inode=15847 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:51:52.769000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:51:52.869813 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 19:51:52.869894 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 19:51:52.876267 kernel: Console: switching to colour dummy device 80x25 Oct 2 19:51:52.876593 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 19:51:52.902654 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 19:51:52.902709 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 19:51:52.911868 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 19:51:52.980885 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1161) Oct 2 19:51:53.067909 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:51:53.139239 systemd-networkd[1159]: lo: Link UP Oct 2 19:51:53.139588 systemd-networkd[1159]: lo: Gained carrier Oct 2 19:51:53.140306 systemd-networkd[1159]: Enumeration completed Oct 2 19:51:53.140547 systemd[1]: Started systemd-networkd.service. Oct 2 19:51:53.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:53.144661 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:51:53.162646 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 19:51:53.168284 systemd-networkd[1159]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:51:53.222657 kernel: mlx5_core 7756:00:02.0 enP30550s1: Link up Oct 2 19:51:53.259651 kernel: hv_netvsc 000d3ab4-c1e3-000d-3ab4-c1e3000d3ab4 eth0: Data path switched to VF: enP30550s1 Oct 2 19:51:53.260245 systemd-networkd[1159]: enP30550s1: Link UP Oct 2 19:51:53.260416 systemd-networkd[1159]: eth0: Link UP Oct 2 19:51:53.260424 systemd-networkd[1159]: eth0: Gained carrier Oct 2 19:51:53.265889 systemd-networkd[1159]: enP30550s1: Gained carrier Oct 2 19:51:53.286085 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:51:53.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:53.290509 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:51:53.297749 systemd-networkd[1159]: eth0: DHCPv4 address 10.200.8.17/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:51:53.570267 lvm[1231]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:51:53.600816 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:51:53.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:53.603619 systemd[1]: Reached target cryptsetup.target. Oct 2 19:51:53.606996 systemd[1]: Starting lvm2-activation.service... Oct 2 19:51:53.611698 lvm[1232]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:51:53.636613 systemd[1]: Finished lvm2-activation.service. Oct 2 19:51:53.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:53.639643 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:51:53.642335 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:51:53.642376 systemd[1]: Reached target local-fs.target. Oct 2 19:51:53.644840 systemd[1]: Reached target machines.target. Oct 2 19:51:53.647979 systemd[1]: Starting ldconfig.service... Oct 2 19:51:53.660050 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:51:53.660162 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:51:53.661380 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:51:53.664612 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:51:53.668174 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:51:53.670407 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:51:53.670497 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:51:53.671771 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:51:53.699368 systemd-tmpfiles[1237]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:51:53.753922 systemd-tmpfiles[1237]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:51:54.124919 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1234 (bootctl) Oct 2 19:51:54.126569 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:51:54.289618 systemd-tmpfiles[1237]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:51:54.593186 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:51:54.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:54.931959 systemd-networkd[1159]: eth0: Gained IPv6LL Oct 2 19:51:54.937677 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:51:54.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.411241 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:51:55.411961 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:51:55.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.705502 systemd-fsck[1242]: fsck.fat 4.2 (2021-01-31) Oct 2 19:51:55.705502 systemd-fsck[1242]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 19:51:55.707978 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:51:55.715444 kernel: kauditd_printk_skb: 70 callbacks suppressed Oct 2 19:51:55.715530 kernel: audit: type=1130 audit(1696276315.710:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.712440 systemd[1]: Mounting boot.mount... Oct 2 19:51:55.734522 systemd[1]: Mounted boot.mount. Oct 2 19:51:55.752453 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:51:55.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.765682 kernel: audit: type=1130 audit(1696276315.753:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.905016 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:51:55.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.909100 systemd[1]: Starting audit-rules.service... Oct 2 19:51:55.919652 kernel: audit: type=1130 audit(1696276315.906:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:55.922244 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:51:55.925785 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:51:55.928000 audit: BPF prog-id=24 op=LOAD Oct 2 19:51:55.930673 systemd[1]: Starting systemd-resolved.service... Oct 2 19:51:55.934149 kernel: audit: type=1334 audit(1696276315.928:157): prog-id=24 op=LOAD Oct 2 19:51:55.934000 audit: BPF prog-id=25 op=LOAD Oct 2 19:51:55.936889 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:51:55.944658 kernel: audit: type=1334 audit(1696276315.934:158): prog-id=25 op=LOAD Oct 2 19:51:55.943165 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:51:55.982000 audit[1254]: SYSTEM_BOOT pid=1254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.004235 kernel: audit: type=1127 audit(1696276315.982:159): pid=1254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.004761 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:51:56.018817 kernel: audit: type=1130 audit(1696276316.005:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.020747 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:51:56.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.023056 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:51:56.034649 kernel: audit: type=1130 audit(1696276316.021:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.064749 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:51:56.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.082918 kernel: audit: type=1130 audit(1696276316.067:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.103911 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:51:56.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.106348 systemd[1]: Reached target time-set.target. Oct 2 19:51:56.118666 kernel: audit: type=1130 audit(1696276316.105:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:51:56.137082 systemd-resolved[1252]: Positive Trust Anchors: Oct 2 19:51:56.137099 systemd-resolved[1252]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:51:56.137141 systemd-resolved[1252]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:51:56.154000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:51:56.154000 audit[1269]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffecc563b90 a2=420 a3=0 items=0 ppid=1248 pid=1269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:51:56.154000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:51:56.156079 augenrules[1269]: No rules Oct 2 19:51:56.156355 systemd[1]: Finished audit-rules.service. Oct 2 19:51:56.221820 systemd-resolved[1252]: Using system hostname 'ci-3510.3.0-a-74ed58c6f8'. Oct 2 19:51:56.223503 systemd[1]: Started systemd-resolved.service. Oct 2 19:51:56.225933 systemd[1]: Reached target network.target. Oct 2 19:51:56.227919 systemd[1]: Reached target network-online.target. Oct 2 19:51:56.230068 systemd[1]: Reached target nss-lookup.target. Oct 2 19:51:56.306228 systemd-timesyncd[1253]: Contacted time server 88.81.100.130:123 (0.flatcar.pool.ntp.org). Oct 2 19:51:56.306304 systemd-timesyncd[1253]: Initial clock synchronization to Mon 2023-10-02 19:51:56.306150 UTC. Oct 2 19:52:00.452829 ldconfig[1233]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:52:00.465300 systemd[1]: Finished ldconfig.service. Oct 2 19:52:00.469370 systemd[1]: Starting systemd-update-done.service... Oct 2 19:52:00.486789 systemd[1]: Finished systemd-update-done.service. Oct 2 19:52:00.489193 systemd[1]: Reached target sysinit.target. Oct 2 19:52:00.491169 systemd[1]: Started motdgen.path. Oct 2 19:52:00.492970 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:52:00.495812 systemd[1]: Started logrotate.timer. Oct 2 19:52:00.497592 systemd[1]: Started mdadm.timer. Oct 2 19:52:00.499240 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:52:00.501578 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:52:00.501622 systemd[1]: Reached target paths.target. Oct 2 19:52:00.503564 systemd[1]: Reached target timers.target. Oct 2 19:52:00.505825 systemd[1]: Listening on dbus.socket. Oct 2 19:52:00.509788 systemd[1]: Starting docker.socket... Oct 2 19:52:00.524713 systemd[1]: Listening on sshd.socket. Oct 2 19:52:00.526830 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:52:00.527338 systemd[1]: Listening on docker.socket. Oct 2 19:52:00.529363 systemd[1]: Reached target sockets.target. Oct 2 19:52:00.531311 systemd[1]: Reached target basic.target. Oct 2 19:52:00.533334 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:52:00.533373 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:52:00.534500 systemd[1]: Starting containerd.service... Oct 2 19:52:00.537604 systemd[1]: Starting dbus.service... Oct 2 19:52:00.540426 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:52:00.545258 systemd[1]: Starting extend-filesystems.service... Oct 2 19:52:00.547498 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:52:00.548871 systemd[1]: Starting motdgen.service... Oct 2 19:52:00.552680 systemd[1]: Started nvidia.service. Oct 2 19:52:00.556117 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:52:00.559362 systemd[1]: Starting prepare-critools.service... Oct 2 19:52:00.563520 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:52:00.566736 systemd[1]: Starting sshd-keygen.service... Oct 2 19:52:00.572333 systemd[1]: Starting systemd-logind.service... Oct 2 19:52:00.577148 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:52:00.577239 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:52:00.577779 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:52:00.578598 systemd[1]: Starting update-engine.service... Oct 2 19:52:00.581948 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:52:00.590842 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:52:00.591248 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:52:00.629597 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:52:00.629836 systemd[1]: Finished motdgen.service. Oct 2 19:52:00.640871 extend-filesystems[1280]: Found sda Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda1 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda2 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda3 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found usr Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda4 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda6 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda7 Oct 2 19:52:00.643046 extend-filesystems[1280]: Found sda9 Oct 2 19:52:00.643046 extend-filesystems[1280]: Checking size of /dev/sda9 Oct 2 19:52:00.730547 tar[1301]: crictl Oct 2 19:52:00.736886 extend-filesystems[1280]: Old size kept for /dev/sda9 Oct 2 19:52:00.736886 extend-filesystems[1280]: Found sr0 Oct 2 19:52:00.742382 jq[1294]: true Oct 2 19:52:00.663467 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:52:00.742595 jq[1279]: false Oct 2 19:52:00.747435 tar[1300]: ./ Oct 2 19:52:00.747435 tar[1300]: ./loopback Oct 2 19:52:00.750253 jq[1311]: true Oct 2 19:52:00.663708 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:52:00.669210 systemd-logind[1289]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:52:00.680405 systemd-logind[1289]: New seat seat0. Oct 2 19:52:00.705380 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:52:00.705576 systemd[1]: Finished extend-filesystems.service. Oct 2 19:52:00.771012 tar[1300]: ./bandwidth Oct 2 19:52:00.781388 dbus-daemon[1278]: [system] SELinux support is enabled Oct 2 19:52:00.781551 systemd[1]: Started dbus.service. Oct 2 19:52:00.786368 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:52:00.786409 systemd[1]: Reached target system-config.target. Oct 2 19:52:00.789059 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:52:00.789085 systemd[1]: Reached target user-config.target. Oct 2 19:52:00.793832 systemd[1]: Started systemd-logind.service. Oct 2 19:52:00.795456 dbus-daemon[1278]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:52:00.842129 env[1306]: time="2023-10-02T19:52:00.842074708Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:52:00.885269 tar[1300]: ./ptp Oct 2 19:52:00.922213 bash[1342]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:52:00.923189 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:52:00.967810 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:52:00.973190 tar[1300]: ./vlan Oct 2 19:52:01.014772 env[1306]: time="2023-10-02T19:52:01.014677946Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:52:01.014883 env[1306]: time="2023-10-02T19:52:01.014846147Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.022768457Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.022810257Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023088057Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023110557Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023129557Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023143657Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023242257Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023489958Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023698758Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:52:01.023929 env[1306]: time="2023-10-02T19:52:01.023723758Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:52:01.024335 env[1306]: time="2023-10-02T19:52:01.023786258Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:52:01.024335 env[1306]: time="2023-10-02T19:52:01.023801058Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:52:01.039652 tar[1300]: ./host-device Oct 2 19:52:01.043542 env[1306]: time="2023-10-02T19:52:01.043507484Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:52:01.043638 env[1306]: time="2023-10-02T19:52:01.043578684Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:52:01.043638 env[1306]: time="2023-10-02T19:52:01.043601784Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:52:01.043742 env[1306]: time="2023-10-02T19:52:01.043671484Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043742 env[1306]: time="2023-10-02T19:52:01.043693284Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043826 env[1306]: time="2023-10-02T19:52:01.043713184Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043826 env[1306]: time="2023-10-02T19:52:01.043792484Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043826 env[1306]: time="2023-10-02T19:52:01.043811784Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043932 env[1306]: time="2023-10-02T19:52:01.043843984Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043932 env[1306]: time="2023-10-02T19:52:01.043866184Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043932 env[1306]: time="2023-10-02T19:52:01.043883784Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.043932 env[1306]: time="2023-10-02T19:52:01.043901884Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:52:01.044076 env[1306]: time="2023-10-02T19:52:01.044048085Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:52:01.044199 env[1306]: time="2023-10-02T19:52:01.044178485Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:52:01.044613 env[1306]: time="2023-10-02T19:52:01.044590985Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:52:01.044685 env[1306]: time="2023-10-02T19:52:01.044654085Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.044685 env[1306]: time="2023-10-02T19:52:01.044675785Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:52:01.044835 env[1306]: time="2023-10-02T19:52:01.044762485Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.044880 env[1306]: time="2023-10-02T19:52:01.044845086Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.044922 env[1306]: time="2023-10-02T19:52:01.044877686Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.044922 env[1306]: time="2023-10-02T19:52:01.044898886Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.044922 env[1306]: time="2023-10-02T19:52:01.044917586Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045032 env[1306]: time="2023-10-02T19:52:01.044949986Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045032 env[1306]: time="2023-10-02T19:52:01.044967386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045032 env[1306]: time="2023-10-02T19:52:01.044984286Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045032 env[1306]: time="2023-10-02T19:52:01.045017886Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:52:01.045230 env[1306]: time="2023-10-02T19:52:01.045209486Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045284 env[1306]: time="2023-10-02T19:52:01.045239386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045284 env[1306]: time="2023-10-02T19:52:01.045271886Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045361 env[1306]: time="2023-10-02T19:52:01.045289186Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:52:01.045361 env[1306]: time="2023-10-02T19:52:01.045311586Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:52:01.045361 env[1306]: time="2023-10-02T19:52:01.045343986Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:52:01.045475 env[1306]: time="2023-10-02T19:52:01.045371286Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:52:01.045475 env[1306]: time="2023-10-02T19:52:01.045428486Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:52:01.045835 env[1306]: time="2023-10-02T19:52:01.045756187Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.045855587Z" level=info msg="Connect containerd service" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.045914287Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.046729188Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.047026588Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.047076088Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069696218Z" level=info msg="containerd successfully booted in 0.238494s" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.049955992Z" level=info msg="Start subscribing containerd event" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069766818Z" level=info msg="Start recovering state" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069862518Z" level=info msg="Start event monitor" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069877418Z" level=info msg="Start snapshots syncer" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069895718Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:52:01.072047 env[1306]: time="2023-10-02T19:52:01.069908418Z" level=info msg="Start streaming server" Oct 2 19:52:01.047200 systemd[1]: Started containerd.service. Oct 2 19:52:01.098366 tar[1300]: ./tuning Oct 2 19:52:01.139072 tar[1300]: ./vrf Oct 2 19:52:01.179675 tar[1300]: ./sbr Oct 2 19:52:01.223120 tar[1300]: ./tap Oct 2 19:52:01.271972 tar[1300]: ./dhcp Oct 2 19:52:01.338840 update_engine[1291]: I1002 19:52:01.338337 1291 main.cc:92] Flatcar Update Engine starting Oct 2 19:52:01.379554 systemd[1]: Started update-engine.service. Oct 2 19:52:01.389327 update_engine[1291]: I1002 19:52:01.379602 1291 update_check_scheduler.cc:74] Next update check in 7m33s Oct 2 19:52:01.384910 systemd[1]: Started locksmithd.service. Oct 2 19:52:01.395482 tar[1300]: ./static Oct 2 19:52:01.429724 tar[1300]: ./firewall Oct 2 19:52:01.509221 tar[1300]: ./macvlan Oct 2 19:52:01.588657 tar[1300]: ./dummy Oct 2 19:52:01.671770 tar[1300]: ./bridge Oct 2 19:52:01.759617 tar[1300]: ./ipvlan Oct 2 19:52:01.838403 tar[1300]: ./portmap Oct 2 19:52:01.864038 systemd[1]: Finished prepare-critools.service. Oct 2 19:52:01.894271 tar[1300]: ./host-local Oct 2 19:52:01.965006 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:52:02.501753 sshd_keygen[1296]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:52:02.522038 systemd[1]: Finished sshd-keygen.service. Oct 2 19:52:02.526352 systemd[1]: Starting issuegen.service... Oct 2 19:52:02.530053 systemd[1]: Started waagent.service. Oct 2 19:52:02.536600 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:52:02.536842 systemd[1]: Finished issuegen.service. Oct 2 19:52:02.540969 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:52:02.558565 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:52:02.562707 systemd[1]: Started getty@tty1.service. Oct 2 19:52:02.566227 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:52:02.568730 systemd[1]: Reached target getty.target. Oct 2 19:52:02.570686 systemd[1]: Reached target multi-user.target. Oct 2 19:52:02.574039 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:52:02.583165 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:52:02.583341 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:52:02.586086 systemd[1]: Startup finished in 926ms (firmware) + 20.275s (loader) + 903ms (kernel) + 22.461s (initrd) + 24.391s (userspace) = 1min 8.958s. Oct 2 19:52:02.907707 locksmithd[1377]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:52:02.917439 login[1399]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 19:52:02.917845 login[1398]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:52:02.951088 systemd[1]: Created slice user-500.slice. Oct 2 19:52:02.952873 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:52:02.955469 systemd-logind[1289]: New session 2 of user core. Oct 2 19:52:02.972281 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:52:02.973962 systemd[1]: Starting user@500.service... Oct 2 19:52:02.977285 (systemd)[1403]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:52:03.203566 systemd[1403]: Queued start job for default target default.target. Oct 2 19:52:03.204436 systemd[1403]: Reached target paths.target. Oct 2 19:52:03.204470 systemd[1403]: Reached target sockets.target. Oct 2 19:52:03.204492 systemd[1403]: Reached target timers.target. Oct 2 19:52:03.204512 systemd[1403]: Reached target basic.target. Oct 2 19:52:03.204587 systemd[1403]: Reached target default.target. Oct 2 19:52:03.204652 systemd[1403]: Startup finished in 221ms. Oct 2 19:52:03.204699 systemd[1]: Started user@500.service. Oct 2 19:52:03.206341 systemd[1]: Started session-2.scope. Oct 2 19:52:03.919570 login[1399]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 19:52:03.924028 systemd-logind[1289]: New session 1 of user core. Oct 2 19:52:03.925278 systemd[1]: Started session-1.scope. Oct 2 19:52:08.299607 waagent[1393]: 2023-10-02T19:52:08.299493Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 19:52:08.301329 waagent[1393]: 2023-10-02T19:52:08.300831Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 19:52:08.301454 waagent[1393]: 2023-10-02T19:52:08.301336Z INFO Daemon Daemon Python: 3.9.16 Oct 2 19:52:08.301870 waagent[1393]: 2023-10-02T19:52:08.301801Z INFO Daemon Daemon Run daemon Oct 2 19:52:08.313276 waagent[1393]: 2023-10-02T19:52:08.303107Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 19:52:08.316048 waagent[1393]: 2023-10-02T19:52:08.315944Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:08.322504 waagent[1393]: 2023-10-02T19:52:08.322401Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.322798Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.323679Z INFO Daemon Daemon Using waagent for provisioning Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.325033Z INFO Daemon Daemon Activate resource disk Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.325805Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.333614Z INFO Daemon Daemon Found device: None Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.334348Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.335179Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.336920Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:08.351895 waagent[1393]: 2023-10-02T19:52:08.337838Z INFO Daemon Daemon Running default provisioning handler Oct 2 19:52:08.354317 waagent[1393]: 2023-10-02T19:52:08.354194Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 19:52:08.361004 waagent[1393]: 2023-10-02T19:52:08.360898Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 19:52:08.365474 waagent[1393]: 2023-10-02T19:52:08.365413Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 19:52:08.368019 waagent[1393]: 2023-10-02T19:52:08.367958Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 19:52:08.389006 waagent[1393]: 2023-10-02T19:52:08.385404Z INFO Daemon Daemon Successfully mounted dvd Oct 2 19:52:08.448947 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 19:52:08.464475 waagent[1393]: 2023-10-02T19:52:08.464362Z INFO Daemon Daemon Detect protocol endpoint Oct 2 19:52:08.469400 waagent[1393]: 2023-10-02T19:52:08.469323Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 19:52:08.472534 waagent[1393]: 2023-10-02T19:52:08.472464Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 19:52:08.475931 waagent[1393]: 2023-10-02T19:52:08.475865Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 19:52:08.478883 waagent[1393]: 2023-10-02T19:52:08.478820Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 19:52:08.481394 waagent[1393]: 2023-10-02T19:52:08.481332Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 19:52:08.590072 waagent[1393]: 2023-10-02T19:52:08.589935Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 19:52:08.599714 waagent[1393]: 2023-10-02T19:52:08.590833Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 19:52:08.599714 waagent[1393]: 2023-10-02T19:52:08.591957Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 19:52:09.506413 waagent[1393]: 2023-10-02T19:52:09.506246Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 19:52:09.516652 waagent[1393]: 2023-10-02T19:52:09.516575Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 19:52:09.521513 waagent[1393]: 2023-10-02T19:52:09.517013Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 19:52:09.590767 waagent[1393]: 2023-10-02T19:52:09.590613Z INFO Daemon Daemon Found private key matching thumbprint D3594E87515ED13328977EEF146E1FC5332A9693 Oct 2 19:52:09.594894 waagent[1393]: 2023-10-02T19:52:09.594814Z INFO Daemon Daemon Certificate with thumbprint CED1E4CEA51E275B8539B938A1E3D539940B47FA has no matching private key. Oct 2 19:52:09.599366 waagent[1393]: 2023-10-02T19:52:09.599300Z INFO Daemon Daemon Fetch goal state completed Oct 2 19:52:09.653224 waagent[1393]: 2023-10-02T19:52:09.653143Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 1ca19bc1-d5d9-45a9-94dc-8e74ca82ca68 New eTag: 18344301746319342500] Oct 2 19:52:09.658683 waagent[1393]: 2023-10-02T19:52:09.658596Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:09.670477 waagent[1393]: 2023-10-02T19:52:09.670413Z INFO Daemon Daemon Starting provisioning Oct 2 19:52:09.672996 waagent[1393]: 2023-10-02T19:52:09.672934Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 19:52:09.675525 waagent[1393]: 2023-10-02T19:52:09.675465Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-74ed58c6f8] Oct 2 19:52:09.692366 waagent[1393]: 2023-10-02T19:52:09.692267Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-74ed58c6f8] Oct 2 19:52:09.695817 waagent[1393]: 2023-10-02T19:52:09.695753Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 19:52:09.699104 waagent[1393]: 2023-10-02T19:52:09.699042Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 19:52:09.713522 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 19:52:09.713800 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 19:52:09.713883 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 19:52:09.714250 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:52:09.719686 systemd-networkd[1159]: eth0: DHCPv6 lease lost Oct 2 19:52:09.721170 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:52:09.721350 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:52:09.723986 systemd[1]: Starting systemd-networkd.service... Oct 2 19:52:09.754732 systemd-networkd[1448]: enP30550s1: Link UP Oct 2 19:52:09.754742 systemd-networkd[1448]: enP30550s1: Gained carrier Oct 2 19:52:09.756142 systemd-networkd[1448]: eth0: Link UP Oct 2 19:52:09.756152 systemd-networkd[1448]: eth0: Gained carrier Oct 2 19:52:09.756576 systemd-networkd[1448]: lo: Link UP Oct 2 19:52:09.756591 systemd-networkd[1448]: lo: Gained carrier Oct 2 19:52:09.756984 systemd-networkd[1448]: eth0: Gained IPv6LL Oct 2 19:52:09.757550 systemd-networkd[1448]: Enumeration completed Oct 2 19:52:09.762507 waagent[1393]: 2023-10-02T19:52:09.759340Z INFO Daemon Daemon Create user account if not exists Oct 2 19:52:09.757671 systemd[1]: Started systemd-networkd.service. Oct 2 19:52:09.759961 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:52:09.763881 waagent[1393]: 2023-10-02T19:52:09.763792Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 19:52:09.768152 waagent[1393]: 2023-10-02T19:52:09.767947Z INFO Daemon Daemon Configure sudoer Oct 2 19:52:09.773788 waagent[1393]: 2023-10-02T19:52:09.768860Z INFO Daemon Daemon Configure sshd Oct 2 19:52:09.773788 waagent[1393]: 2023-10-02T19:52:09.769723Z INFO Daemon Daemon Deploy ssh public key. Oct 2 19:52:09.771993 systemd-networkd[1448]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:52:09.806763 waagent[1393]: 2023-10-02T19:52:09.806664Z INFO Daemon Daemon Decode custom data Oct 2 19:52:09.809695 waagent[1393]: 2023-10-02T19:52:09.809618Z INFO Daemon Daemon Save custom data Oct 2 19:52:09.848734 systemd-networkd[1448]: eth0: DHCPv4 address 10.200.8.17/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 19:52:09.852261 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:52:40.076408 waagent[1393]: 2023-10-02T19:52:40.076296Z INFO Daemon Daemon Provisioning complete Oct 2 19:52:40.093408 waagent[1393]: 2023-10-02T19:52:40.093327Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 19:52:40.096717 waagent[1393]: 2023-10-02T19:52:40.096645Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 19:52:40.101934 waagent[1393]: 2023-10-02T19:52:40.101870Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 19:52:40.368057 waagent[1457]: 2023-10-02T19:52:40.367869Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 19:52:40.368781 waagent[1457]: 2023-10-02T19:52:40.368717Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:40.368931 waagent[1457]: 2023-10-02T19:52:40.368876Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:40.380121 waagent[1457]: 2023-10-02T19:52:40.380044Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 19:52:40.380282 waagent[1457]: 2023-10-02T19:52:40.380228Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 19:52:40.441014 waagent[1457]: 2023-10-02T19:52:40.440884Z INFO ExtHandler ExtHandler Found private key matching thumbprint D3594E87515ED13328977EEF146E1FC5332A9693 Oct 2 19:52:40.441240 waagent[1457]: 2023-10-02T19:52:40.441179Z INFO ExtHandler ExtHandler Certificate with thumbprint CED1E4CEA51E275B8539B938A1E3D539940B47FA has no matching private key. Oct 2 19:52:40.441478 waagent[1457]: 2023-10-02T19:52:40.441428Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 19:52:40.460962 waagent[1457]: 2023-10-02T19:52:40.460905Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 1e679d91-ab31-4579-b92b-0e109274d0a9 New eTag: 18344301746319342500] Oct 2 19:52:40.461533 waagent[1457]: 2023-10-02T19:52:40.461475Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 19:52:40.570472 waagent[1457]: 2023-10-02T19:52:40.570304Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:40.580128 waagent[1457]: 2023-10-02T19:52:40.580050Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1457 Oct 2 19:52:40.583538 waagent[1457]: 2023-10-02T19:52:40.583468Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:40.584809 waagent[1457]: 2023-10-02T19:52:40.584750Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:40.631882 waagent[1457]: 2023-10-02T19:52:40.631771Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:40.632220 waagent[1457]: 2023-10-02T19:52:40.632157Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:40.640348 waagent[1457]: 2023-10-02T19:52:40.640294Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:40.640814 waagent[1457]: 2023-10-02T19:52:40.640759Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:40.641896 waagent[1457]: 2023-10-02T19:52:40.641834Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 19:52:40.643145 waagent[1457]: 2023-10-02T19:52:40.643086Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:40.643822 waagent[1457]: 2023-10-02T19:52:40.643764Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:40.643953 waagent[1457]: 2023-10-02T19:52:40.643872Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:40.644364 waagent[1457]: 2023-10-02T19:52:40.644304Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:40.644485 waagent[1457]: 2023-10-02T19:52:40.644427Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:40.645324 waagent[1457]: 2023-10-02T19:52:40.645269Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:40.645569 waagent[1457]: 2023-10-02T19:52:40.645515Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:40.645717 waagent[1457]: 2023-10-02T19:52:40.645670Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:40.646309 waagent[1457]: 2023-10-02T19:52:40.646254Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:40.647098 waagent[1457]: 2023-10-02T19:52:40.647053Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:40.647768 waagent[1457]: 2023-10-02T19:52:40.647711Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:40.648156 waagent[1457]: 2023-10-02T19:52:40.648087Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:40.650752 waagent[1457]: 2023-10-02T19:52:40.650684Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:40.650752 waagent[1457]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:40.650752 waagent[1457]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:40.650752 waagent[1457]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:40.650752 waagent[1457]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:40.650752 waagent[1457]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:40.650752 waagent[1457]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:40.656419 waagent[1457]: 2023-10-02T19:52:40.656354Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:40.656709 waagent[1457]: 2023-10-02T19:52:40.656656Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:40.657673 waagent[1457]: 2023-10-02T19:52:40.657605Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:40.661662 waagent[1457]: 2023-10-02T19:52:40.661592Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 19:52:40.662243 waagent[1457]: 2023-10-02T19:52:40.662192Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:40.663060 waagent[1457]: 2023-10-02T19:52:40.663002Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 19:52:40.680538 waagent[1457]: 2023-10-02T19:52:40.680456Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1448' Oct 2 19:52:40.722131 waagent[1457]: 2023-10-02T19:52:40.722065Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 19:52:40.747860 waagent[1457]: 2023-10-02T19:52:40.747736Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:40.747860 waagent[1457]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:40.747860 waagent[1457]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:40.747860 waagent[1457]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:c1:e3 brd ff:ff:ff:ff:ff:ff Oct 2 19:52:40.747860 waagent[1457]: 3: enP30550s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:c1:e3 brd ff:ff:ff:ff:ff:ff\ altname enP30550p0s2 Oct 2 19:52:40.747860 waagent[1457]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:40.747860 waagent[1457]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:40.747860 waagent[1457]: 2: eth0 inet 10.200.8.17/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:40.747860 waagent[1457]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:40.747860 waagent[1457]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:40.747860 waagent[1457]: 2: eth0 inet6 fe80::20d:3aff:feb4:c1e3/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:40.956484 waagent[1457]: 2023-10-02T19:52:40.956323Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 19:52:40.961907 waagent[1457]: 2023-10-02T19:52:40.961840Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 19:52:40.961907 waagent[1457]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:40.961907 waagent[1457]: pkts bytes target prot opt in out source destination Oct 2 19:52:40.961907 waagent[1457]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:40.961907 waagent[1457]: pkts bytes target prot opt in out source destination Oct 2 19:52:40.961907 waagent[1457]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:40.961907 waagent[1457]: pkts bytes target prot opt in out source destination Oct 2 19:52:40.961907 waagent[1457]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:40.961907 waagent[1457]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:40.963048 waagent[1457]: 2023-10-02T19:52:40.962995Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 19:52:40.994508 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 19:52:41.212008 waagent[1457]: 2023-10-02T19:52:41.211873Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 19:52:42.106886 waagent[1393]: 2023-10-02T19:52:42.106706Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 19:52:42.113082 waagent[1393]: 2023-10-02T19:52:42.113017Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 19:52:43.097291 waagent[1497]: 2023-10-02T19:52:43.097171Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 19:52:43.098029 waagent[1497]: 2023-10-02T19:52:43.097959Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 19:52:43.098185 waagent[1497]: 2023-10-02T19:52:43.098130Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 19:52:43.107925 waagent[1497]: 2023-10-02T19:52:43.107820Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 19:52:43.108317 waagent[1497]: 2023-10-02T19:52:43.108255Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:43.108481 waagent[1497]: 2023-10-02T19:52:43.108432Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:43.130617 waagent[1497]: 2023-10-02T19:52:43.130528Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 19:52:43.139473 waagent[1497]: 2023-10-02T19:52:43.139410Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 19:52:43.140389 waagent[1497]: 2023-10-02T19:52:43.140328Z INFO ExtHandler Oct 2 19:52:43.140537 waagent[1497]: 2023-10-02T19:52:43.140485Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: fb0d186c-57fb-47c8-8a33-06db465baab4 eTag: 18344301746319342500 source: Fabric] Oct 2 19:52:43.141233 waagent[1497]: 2023-10-02T19:52:43.141175Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 19:52:43.142278 waagent[1497]: 2023-10-02T19:52:43.142201Z INFO ExtHandler Oct 2 19:52:43.142410 waagent[1497]: 2023-10-02T19:52:43.142356Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 19:52:43.148952 waagent[1497]: 2023-10-02T19:52:43.148899Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 19:52:43.149367 waagent[1497]: 2023-10-02T19:52:43.149318Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 19:52:43.169489 waagent[1497]: 2023-10-02T19:52:43.169407Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 19:52:43.233381 waagent[1497]: 2023-10-02T19:52:43.233240Z INFO ExtHandler Downloaded certificate {'thumbprint': 'D3594E87515ED13328977EEF146E1FC5332A9693', 'hasPrivateKey': True} Oct 2 19:52:43.234362 waagent[1497]: 2023-10-02T19:52:43.234291Z INFO ExtHandler Downloaded certificate {'thumbprint': 'CED1E4CEA51E275B8539B938A1E3D539940B47FA', 'hasPrivateKey': False} Oct 2 19:52:43.235369 waagent[1497]: 2023-10-02T19:52:43.235308Z INFO ExtHandler Fetch goal state completed Oct 2 19:52:43.256613 waagent[1497]: 2023-10-02T19:52:43.256542Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1497 Oct 2 19:52:43.259920 waagent[1497]: 2023-10-02T19:52:43.259857Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 19:52:43.261402 waagent[1497]: 2023-10-02T19:52:43.261343Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 19:52:43.266245 waagent[1497]: 2023-10-02T19:52:43.266189Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 19:52:43.266610 waagent[1497]: 2023-10-02T19:52:43.266548Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 19:52:43.274464 waagent[1497]: 2023-10-02T19:52:43.274408Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 19:52:43.274942 waagent[1497]: 2023-10-02T19:52:43.274885Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 19:52:43.294874 waagent[1497]: 2023-10-02T19:52:43.294765Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 19:52:43.297619 waagent[1497]: 2023-10-02T19:52:43.297515Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 19:52:43.303028 waagent[1497]: 2023-10-02T19:52:43.302969Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 19:52:43.304430 waagent[1497]: 2023-10-02T19:52:43.304371Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 19:52:43.305341 waagent[1497]: 2023-10-02T19:52:43.305285Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:43.305509 waagent[1497]: 2023-10-02T19:52:43.305459Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:43.306070 waagent[1497]: 2023-10-02T19:52:43.306013Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 19:52:43.306507 waagent[1497]: 2023-10-02T19:52:43.306450Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 19:52:43.307114 waagent[1497]: 2023-10-02T19:52:43.307059Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 19:52:43.307114 waagent[1497]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 19:52:43.307114 waagent[1497]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 19:52:43.307114 waagent[1497]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 19:52:43.307114 waagent[1497]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:43.307114 waagent[1497]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:43.307114 waagent[1497]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 19:52:43.309321 waagent[1497]: 2023-10-02T19:52:43.309011Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 19:52:43.310403 waagent[1497]: 2023-10-02T19:52:43.310339Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 19:52:43.310957 waagent[1497]: 2023-10-02T19:52:43.310897Z INFO EnvHandler ExtHandler Configure routes Oct 2 19:52:43.311196 waagent[1497]: 2023-10-02T19:52:43.311143Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 19:52:43.311196 waagent[1497]: 2023-10-02T19:52:43.311048Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 19:52:43.311583 waagent[1497]: 2023-10-02T19:52:43.311516Z INFO EnvHandler ExtHandler Gateway:None Oct 2 19:52:43.311768 waagent[1497]: 2023-10-02T19:52:43.311706Z INFO EnvHandler ExtHandler Routes:None Oct 2 19:52:43.315021 waagent[1497]: 2023-10-02T19:52:43.314956Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 19:52:43.317702 waagent[1497]: 2023-10-02T19:52:43.317590Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 19:52:43.325884 waagent[1497]: 2023-10-02T19:52:43.325153Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 19:52:43.330191 waagent[1497]: 2023-10-02T19:52:43.330130Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 19:52:43.330191 waagent[1497]: Executing ['ip', '-a', '-o', 'link']: Oct 2 19:52:43.330191 waagent[1497]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 19:52:43.330191 waagent[1497]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:c1:e3 brd ff:ff:ff:ff:ff:ff Oct 2 19:52:43.330191 waagent[1497]: 3: enP30550s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b4:c1:e3 brd ff:ff:ff:ff:ff:ff\ altname enP30550p0s2 Oct 2 19:52:43.330191 waagent[1497]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 19:52:43.330191 waagent[1497]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 19:52:43.330191 waagent[1497]: 2: eth0 inet 10.200.8.17/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 19:52:43.330191 waagent[1497]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 19:52:43.330191 waagent[1497]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 19:52:43.330191 waagent[1497]: 2: eth0 inet6 fe80::20d:3aff:feb4:c1e3/64 scope link \ valid_lft forever preferred_lft forever Oct 2 19:52:43.345985 waagent[1497]: 2023-10-02T19:52:43.345896Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 19:52:43.400705 waagent[1497]: 2023-10-02T19:52:43.400553Z INFO ExtHandler ExtHandler Oct 2 19:52:43.400857 waagent[1497]: 2023-10-02T19:52:43.400786Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: dfe0f4f9-12dc-4e61-8e0f-96c095aa2ff2 correlation 1241667b-dbeb-4319-b2ea-32abab615726 created: 2023-10-02T19:50:42.778915Z] Oct 2 19:52:43.402326 waagent[1497]: 2023-10-02T19:52:43.402264Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 19:52:43.402326 waagent[1497]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:43.402326 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 19:52:43.402326 waagent[1497]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:43.402326 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 19:52:43.402326 waagent[1497]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 19:52:43.402326 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 19:52:43.402326 waagent[1497]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 19:52:43.402326 waagent[1497]: 148 16788 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 19:52:43.402326 waagent[1497]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 19:52:43.402776 waagent[1497]: 2023-10-02T19:52:43.402475Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 19:52:43.405406 waagent[1497]: 2023-10-02T19:52:43.405345Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 4 ms] Oct 2 19:52:43.430940 waagent[1497]: 2023-10-02T19:52:43.430867Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 19:52:43.442276 waagent[1497]: 2023-10-02T19:52:43.442191Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 9218E4C6-7AEE-458D-8CD4-B563536F693A;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 19:52:46.867491 update_engine[1291]: I1002 19:52:46.867393 1291 update_attempter.cc:505] Updating boot flags... Oct 2 19:53:19.863428 systemd[1]: Created slice system-sshd.slice. Oct 2 19:53:19.865098 systemd[1]: Started sshd@0-10.200.8.17:22-10.200.12.6:56756.service. Oct 2 19:53:20.648702 sshd[1578]: Accepted publickey for core from 10.200.12.6 port 56756 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:20.650414 sshd[1578]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:20.655689 systemd-logind[1289]: New session 3 of user core. Oct 2 19:53:20.656694 systemd[1]: Started session-3.scope. Oct 2 19:53:21.189964 systemd[1]: Started sshd@1-10.200.8.17:22-10.200.12.6:56770.service. Oct 2 19:53:21.817501 sshd[1583]: Accepted publickey for core from 10.200.12.6 port 56770 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:21.819275 sshd[1583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:21.825162 systemd[1]: Started session-4.scope. Oct 2 19:53:21.825783 systemd-logind[1289]: New session 4 of user core. Oct 2 19:53:22.296177 sshd[1583]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:22.299501 systemd[1]: sshd@1-10.200.8.17:22-10.200.12.6:56770.service: Deactivated successfully. Oct 2 19:53:22.300582 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:53:22.301371 systemd-logind[1289]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:53:22.302292 systemd-logind[1289]: Removed session 4. Oct 2 19:53:22.403780 systemd[1]: Started sshd@2-10.200.8.17:22-10.200.12.6:56786.service. Oct 2 19:53:23.033572 sshd[1589]: Accepted publickey for core from 10.200.12.6 port 56786 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:23.035293 sshd[1589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:23.040741 systemd[1]: Started session-5.scope. Oct 2 19:53:23.041202 systemd-logind[1289]: New session 5 of user core. Oct 2 19:53:23.472335 sshd[1589]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:23.475765 systemd[1]: sshd@2-10.200.8.17:22-10.200.12.6:56786.service: Deactivated successfully. Oct 2 19:53:23.476806 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:53:23.477561 systemd-logind[1289]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:53:23.478451 systemd-logind[1289]: Removed session 5. Oct 2 19:53:23.584366 systemd[1]: Started sshd@3-10.200.8.17:22-10.200.12.6:56802.service. Oct 2 19:53:24.218370 sshd[1595]: Accepted publickey for core from 10.200.12.6 port 56802 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:24.220105 sshd[1595]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:24.225249 systemd[1]: Started session-6.scope. Oct 2 19:53:24.225861 systemd-logind[1289]: New session 6 of user core. Oct 2 19:53:24.669002 sshd[1595]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:24.671590 systemd[1]: sshd@3-10.200.8.17:22-10.200.12.6:56802.service: Deactivated successfully. Oct 2 19:53:24.672470 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:53:24.673117 systemd-logind[1289]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:53:24.673950 systemd-logind[1289]: Removed session 6. Oct 2 19:53:24.772726 systemd[1]: Started sshd@4-10.200.8.17:22-10.200.12.6:56810.service. Oct 2 19:53:25.706517 sshd[1601]: Accepted publickey for core from 10.200.12.6 port 56810 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:25.708276 sshd[1601]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:25.713295 systemd[1]: Started session-7.scope. Oct 2 19:53:25.714020 systemd-logind[1289]: New session 7 of user core. Oct 2 19:53:26.263642 sudo[1604]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:53:26.263990 sudo[1604]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:26.283053 dbus-daemon[1278]: \xd0}/4\xa9U: received setenforce notice (enforcing=-2007857920) Oct 2 19:53:26.285312 sudo[1604]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:26.398617 sshd[1601]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:26.402362 systemd[1]: sshd@4-10.200.8.17:22-10.200.12.6:56810.service: Deactivated successfully. Oct 2 19:53:26.403365 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:53:26.404035 systemd-logind[1289]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:53:26.404903 systemd-logind[1289]: Removed session 7. Oct 2 19:53:26.503672 systemd[1]: Started sshd@5-10.200.8.17:22-10.200.12.6:56812.service. Oct 2 19:53:27.287671 sshd[1608]: Accepted publickey for core from 10.200.12.6 port 56812 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:27.289453 sshd[1608]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:27.294415 systemd[1]: Started session-8.scope. Oct 2 19:53:27.295139 systemd-logind[1289]: New session 8 of user core. Oct 2 19:53:27.830731 sudo[1612]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:53:27.830998 sudo[1612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:27.833802 sudo[1612]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:27.838280 sudo[1611]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:53:27.838539 sudo[1611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:27.847436 systemd[1]: Stopping audit-rules.service... Oct 2 19:53:27.847000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:53:27.849874 auditctl[1615]: No rules Oct 2 19:53:27.851665 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:53:27.851733 kernel: audit: type=1305 audit(1696276407.847:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:53:27.850295 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:53:27.850452 systemd[1]: Stopped audit-rules.service. Oct 2 19:53:27.852415 systemd[1]: Starting audit-rules.service... Oct 2 19:53:27.847000 audit[1615]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9e8385c0 a2=420 a3=0 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:27.872756 kernel: audit: type=1300 audit(1696276407.847:165): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9e8385c0 a2=420 a3=0 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:27.877459 kernel: audit: type=1327 audit(1696276407.847:165): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:53:27.847000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:53:27.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.887754 augenrules[1632]: No rules Oct 2 19:53:27.888289 kernel: audit: type=1131 audit(1696276407.849:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.888567 systemd[1]: Finished audit-rules.service. Oct 2 19:53:27.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.889716 sudo[1611]: pam_unix(sudo:session): session closed for user root Oct 2 19:53:27.888000 audit[1611]: USER_END pid=1611 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.901697 kernel: audit: type=1130 audit(1696276407.888:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.901738 kernel: audit: type=1106 audit(1696276407.888:168): pid=1611 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.888000 audit[1611]: CRED_DISP pid=1611 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.912787 kernel: audit: type=1104 audit(1696276407.888:169): pid=1611 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.989498 sshd[1608]: pam_unix(sshd:session): session closed for user core Oct 2 19:53:27.990000 audit[1608]: USER_END pid=1608 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:27.992897 systemd[1]: sshd@5-10.200.8.17:22-10.200.12.6:56812.service: Deactivated successfully. Oct 2 19:53:27.993673 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:53:27.994901 systemd-logind[1289]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:53:27.995839 systemd-logind[1289]: Removed session 8. Oct 2 19:53:27.990000 audit[1608]: CRED_DISP pid=1608 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.017936 kernel: audit: type=1106 audit(1696276407.990:170): pid=1608 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.017995 kernel: audit: type=1104 audit(1696276407.990:171): pid=1608 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.018027 kernel: audit: type=1131 audit(1696276407.992:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.17:22-10.200.12.6:56812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:27.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.17:22-10.200.12.6:56812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.096011 systemd[1]: Started sshd@6-10.200.8.17:22-10.200.12.6:34662.service. Oct 2 19:53:28.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.17:22-10.200.12.6:34662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:28.753000 audit[1638]: USER_ACCT pid=1638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.754752 sshd[1638]: Accepted publickey for core from 10.200.12.6 port 34662 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:53:28.755000 audit[1638]: CRED_ACQ pid=1638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.755000 audit[1638]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4419be10 a2=3 a3=0 items=0 ppid=1 pid=1638 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:28.755000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:53:28.756358 sshd[1638]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:53:28.761187 systemd[1]: Started session-9.scope. Oct 2 19:53:28.761916 systemd-logind[1289]: New session 9 of user core. Oct 2 19:53:28.765000 audit[1638]: USER_START pid=1638 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:28.767000 audit[1640]: CRED_ACQ pid=1640 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:53:29.101000 audit[1641]: USER_ACCT pid=1641 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:29.102249 sudo[1641]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:53:29.101000 audit[1641]: CRED_REFR pid=1641 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:29.102607 sudo[1641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:53:29.103000 audit[1641]: USER_START pid=1641 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:53:30.057859 systemd[1]: Starting docker.service... Oct 2 19:53:30.094849 env[1656]: time="2023-10-02T19:53:30.094803936Z" level=info msg="Starting up" Oct 2 19:53:30.096311 env[1656]: time="2023-10-02T19:53:30.096276949Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:53:30.096311 env[1656]: time="2023-10-02T19:53:30.096295349Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:53:30.096311 env[1656]: time="2023-10-02T19:53:30.096314049Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:53:30.096506 env[1656]: time="2023-10-02T19:53:30.096326149Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:53:30.098466 env[1656]: time="2023-10-02T19:53:30.098438968Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:53:30.098466 env[1656]: time="2023-10-02T19:53:30.098456168Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:53:30.098613 env[1656]: time="2023-10-02T19:53:30.098472568Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:53:30.098613 env[1656]: time="2023-10-02T19:53:30.098483768Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:53:30.105379 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport4074622860-merged.mount: Deactivated successfully. Oct 2 19:53:30.225518 env[1656]: time="2023-10-02T19:53:30.225475676Z" level=info msg="Loading containers: start." Oct 2 19:53:30.260000 audit[1684]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.260000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc78a12d70 a2=0 a3=7ffc78a12d5c items=0 ppid=1656 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.260000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:53:30.261000 audit[1686]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.261000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe5236e110 a2=0 a3=7ffe5236e0fc items=0 ppid=1656 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.261000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:53:30.263000 audit[1688]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.263000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff54551d10 a2=0 a3=7fff54551cfc items=0 ppid=1656 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:53:30.265000 audit[1690]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.265000 audit[1690]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff05406c10 a2=0 a3=7fff05406bfc items=0 ppid=1656 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.265000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:53:30.267000 audit[1692]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.267000 audit[1692]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffff9c70340 a2=0 a3=7ffff9c7032c items=0 ppid=1656 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:53:30.269000 audit[1694]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.269000 audit[1694]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd0b5dad20 a2=0 a3=7ffd0b5dad0c items=0 ppid=1656 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.269000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:53:30.286000 audit[1696]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.286000 audit[1696]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe4e0a0090 a2=0 a3=7ffe4e0a007c items=0 ppid=1656 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:53:30.288000 audit[1698]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.288000 audit[1698]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffca03240a0 a2=0 a3=7ffca032408c items=0 ppid=1656 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.288000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:53:30.290000 audit[1700]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.290000 audit[1700]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdf8d09610 a2=0 a3=7ffdf8d095fc items=0 ppid=1656 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.290000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.309000 audit[1704]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.309000 audit[1704]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcbfbbbed0 a2=0 a3=7ffcbfbbbebc items=0 ppid=1656 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.309000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.310000 audit[1705]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.310000 audit[1705]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd9013c3b0 a2=0 a3=7ffd9013c39c items=0 ppid=1656 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.310000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.342647 kernel: Initializing XFRM netlink socket Oct 2 19:53:30.375042 env[1656]: time="2023-10-02T19:53:30.375007080Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:53:30.426000 audit[1713]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.426000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdf0749c20 a2=0 a3=7ffdf0749c0c items=0 ppid=1656 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.426000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:53:30.446000 audit[1716]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.446000 audit[1716]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffefb8b510 a2=0 a3=7fffefb8b4fc items=0 ppid=1656 pid=1716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.446000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:53:30.449000 audit[1719]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.449000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeb2e9df10 a2=0 a3=7ffeb2e9defc items=0 ppid=1656 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.449000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:53:30.451000 audit[1721]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.451000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffead0246f0 a2=0 a3=7ffead0246dc items=0 ppid=1656 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.451000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:53:30.453000 audit[1723]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.453000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffcb25b7cf0 a2=0 a3=7ffcb25b7cdc items=0 ppid=1656 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.453000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:53:30.455000 audit[1725]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.455000 audit[1725]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffa95535f0 a2=0 a3=7fffa95535dc items=0 ppid=1656 pid=1725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:53:30.457000 audit[1727]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.457000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdb8a2d290 a2=0 a3=7ffdb8a2d27c items=0 ppid=1656 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:53:30.459000 audit[1729]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.459000 audit[1729]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd8f033720 a2=0 a3=7ffd8f03370c items=0 ppid=1656 pid=1729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.459000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:53:30.461000 audit[1731]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.461000 audit[1731]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff514f0a30 a2=0 a3=7fff514f0a1c items=0 ppid=1656 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.461000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:53:30.463000 audit[1733]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1733 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.463000 audit[1733]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd429cbc80 a2=0 a3=7ffd429cbc6c items=0 ppid=1656 pid=1733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.463000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:53:30.465000 audit[1735]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.465000 audit[1735]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffce7394210 a2=0 a3=7ffce73941fc items=0 ppid=1656 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.465000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:53:30.466549 systemd-networkd[1448]: docker0: Link UP Oct 2 19:53:30.490000 audit[1739]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.490000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe52eecf90 a2=0 a3=7ffe52eecf7c items=0 ppid=1656 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.490000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.491000 audit[1740]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:30.491000 audit[1740]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd53540280 a2=0 a3=7ffd5354026c items=0 ppid=1656 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:30.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:53:30.492405 env[1656]: time="2023-10-02T19:53:30.492367203Z" level=info msg="Loading containers: done." Oct 2 19:53:30.503117 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2422518611-merged.mount: Deactivated successfully. Oct 2 19:53:30.548602 env[1656]: time="2023-10-02T19:53:30.548548493Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:53:30.548857 env[1656]: time="2023-10-02T19:53:30.548830995Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:53:30.548980 env[1656]: time="2023-10-02T19:53:30.548960397Z" level=info msg="Daemon has completed initialization" Oct 2 19:53:30.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:30.581089 systemd[1]: Started docker.service. Oct 2 19:53:30.592231 env[1656]: time="2023-10-02T19:53:30.592178373Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:53:30.609405 systemd[1]: Reloading. Oct 2 19:53:30.685157 /usr/lib/systemd/system-generators/torcx-generator[1786]: time="2023-10-02T19:53:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:30.690121 /usr/lib/systemd/system-generators/torcx-generator[1786]: time="2023-10-02T19:53:30Z" level=info msg="torcx already run" Oct 2 19:53:30.777186 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:30.777206 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:30.795260 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.860000 audit: BPF prog-id=32 op=LOAD Oct 2 19:53:30.860000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit: BPF prog-id=33 op=LOAD Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.862000 audit: BPF prog-id=34 op=LOAD Oct 2 19:53:30.862000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:53:30.862000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.863000 audit: BPF prog-id=35 op=LOAD Oct 2 19:53:30.863000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit: BPF prog-id=36 op=LOAD Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.864000 audit: BPF prog-id=37 op=LOAD Oct 2 19:53:30.864000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:53:30.864000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit: BPF prog-id=38 op=LOAD Oct 2 19:53:30.866000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit: BPF prog-id=39 op=LOAD Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.866000 audit: BPF prog-id=40 op=LOAD Oct 2 19:53:30.866000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:53:30.866000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit: BPF prog-id=41 op=LOAD Oct 2 19:53:30.868000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.868000 audit: BPF prog-id=42 op=LOAD Oct 2 19:53:30.868000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.870000 audit: BPF prog-id=43 op=LOAD Oct 2 19:53:30.870000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit: BPF prog-id=44 op=LOAD Oct 2 19:53:30.872000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit: BPF prog-id=45 op=LOAD Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:30.872000 audit: BPF prog-id=46 op=LOAD Oct 2 19:53:30.872000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:53:30.872000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:53:30.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:30.884538 systemd[1]: Started kubelet.service. Oct 2 19:53:30.952065 kubelet[1847]: E1002 19:53:30.952003 1847 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:53:30.953927 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:30.954085 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:30.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:34.317756 env[1306]: time="2023-10-02T19:53:34.317690094Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:53:35.182382 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3768730871.mount: Deactivated successfully. Oct 2 19:53:37.766718 env[1306]: time="2023-10-02T19:53:37.766653795Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:37.772740 env[1306]: time="2023-10-02T19:53:37.772699540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:37.776020 env[1306]: time="2023-10-02T19:53:37.775985764Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:37.779363 env[1306]: time="2023-10-02T19:53:37.779327089Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:37.780030 env[1306]: time="2023-10-02T19:53:37.779978994Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:53:37.790011 env[1306]: time="2023-10-02T19:53:37.789984968Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:53:40.631125 env[1306]: time="2023-10-02T19:53:40.631060797Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:40.638533 env[1306]: time="2023-10-02T19:53:40.638491648Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:40.642515 env[1306]: time="2023-10-02T19:53:40.642480376Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:40.647713 env[1306]: time="2023-10-02T19:53:40.647682812Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:40.648352 env[1306]: time="2023-10-02T19:53:40.648315516Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:53:40.658945 env[1306]: time="2023-10-02T19:53:40.658912889Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:53:41.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.042477 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 19:53:41.042572 kernel: audit: type=1130 audit(1696276421.035:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.035434 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:53:41.035771 systemd[1]: Stopped kubelet.service. Oct 2 19:53:41.037827 systemd[1]: Started kubelet.service. Oct 2 19:53:41.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.075190 kernel: audit: type=1131 audit(1696276421.035:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.075261 kernel: audit: type=1130 audit(1696276421.035:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:41.098318 kubelet[1875]: E1002 19:53:41.098282 1875 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:53:41.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:41.101774 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:41.101894 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:41.114657 kernel: audit: type=1131 audit(1696276421.101:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:42.468285 env[1306]: time="2023-10-02T19:53:42.468215811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:42.475395 env[1306]: time="2023-10-02T19:53:42.475345558Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:42.482180 env[1306]: time="2023-10-02T19:53:42.482139703Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:42.485965 env[1306]: time="2023-10-02T19:53:42.485934528Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:42.486566 env[1306]: time="2023-10-02T19:53:42.486535732Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:53:42.496405 env[1306]: time="2023-10-02T19:53:42.496377497Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:53:43.548205 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3062017646.mount: Deactivated successfully. Oct 2 19:53:44.203605 env[1306]: time="2023-10-02T19:53:44.203539197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.209987 env[1306]: time="2023-10-02T19:53:44.209943238Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.214985 env[1306]: time="2023-10-02T19:53:44.214953369Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.218015 env[1306]: time="2023-10-02T19:53:44.217984789Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.218338 env[1306]: time="2023-10-02T19:53:44.218306091Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:53:44.228618 env[1306]: time="2023-10-02T19:53:44.228588856Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:53:44.691666 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4172342585.mount: Deactivated successfully. Oct 2 19:53:44.714315 env[1306]: time="2023-10-02T19:53:44.714263734Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.720811 env[1306]: time="2023-10-02T19:53:44.720769576Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.724888 env[1306]: time="2023-10-02T19:53:44.724854602Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.729564 env[1306]: time="2023-10-02T19:53:44.729530731Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:44.730153 env[1306]: time="2023-10-02T19:53:44.730119735Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:53:44.739889 env[1306]: time="2023-10-02T19:53:44.739858097Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:53:45.439781 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1059097696.mount: Deactivated successfully. Oct 2 19:53:50.219276 env[1306]: time="2023-10-02T19:53:50.219203958Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:50.225907 env[1306]: time="2023-10-02T19:53:50.225785795Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:50.231326 env[1306]: time="2023-10-02T19:53:50.231291926Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:50.235224 env[1306]: time="2023-10-02T19:53:50.235129247Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:50.236371 env[1306]: time="2023-10-02T19:53:50.236331954Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:53:50.246380 env[1306]: time="2023-10-02T19:53:50.246349810Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:53:50.868866 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount308494974.mount: Deactivated successfully. Oct 2 19:53:51.285437 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:53:51.285748 systemd[1]: Stopped kubelet.service. Oct 2 19:53:51.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.301657 kernel: audit: type=1130 audit(1696276431.285:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.301824 systemd[1]: Started kubelet.service. Oct 2 19:53:51.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.331132 kernel: audit: type=1131 audit(1696276431.285:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.331227 kernel: audit: type=1130 audit(1696276431.301:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.383752 kubelet[1903]: E1002 19:53:51.383703 1903 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:53:51.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:51.385774 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:53:51.385942 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:53:51.402895 kernel: audit: type=1131 audit(1696276431.385:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:53:51.558372 env[1306]: time="2023-10-02T19:53:51.558214597Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:51.569306 env[1306]: time="2023-10-02T19:53:51.569255557Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:51.574187 env[1306]: time="2023-10-02T19:53:51.574143984Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:51.579050 env[1306]: time="2023-10-02T19:53:51.579006111Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:51.579592 env[1306]: time="2023-10-02T19:53:51.579560314Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:53:54.026931 systemd[1]: Stopped kubelet.service. Oct 2 19:53:54.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.057403 kernel: audit: type=1130 audit(1696276434.026:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.057521 kernel: audit: type=1131 audit(1696276434.026:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.048872 systemd[1]: Reloading. Oct 2 19:53:54.118175 /usr/lib/systemd/system-generators/torcx-generator[1997]: time="2023-10-02T19:53:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:54.118660 /usr/lib/systemd/system-generators/torcx-generator[1997]: time="2023-10-02T19:53:54Z" level=info msg="torcx already run" Oct 2 19:53:54.219132 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:54.219151 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:54.237154 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328388 kernel: audit: type=1400 audit(1696276434.302:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328483 kernel: audit: type=1400 audit(1696276434.302:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328506 kernel: audit: type=1400 audit(1696276434.302:393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.362090 kernel: audit: type=1400 audit(1696276434.302:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit: BPF prog-id=47 op=LOAD Oct 2 19:53:54.328000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit: BPF prog-id=48 op=LOAD Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.361000 audit: BPF prog-id=49 op=LOAD Oct 2 19:53:54.361000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:53:54.361000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit: BPF prog-id=50 op=LOAD Oct 2 19:53:54.363000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit: BPF prog-id=51 op=LOAD Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.363000 audit: BPF prog-id=52 op=LOAD Oct 2 19:53:54.363000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:53:54.363000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit: BPF prog-id=53 op=LOAD Oct 2 19:53:54.365000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit: BPF prog-id=54 op=LOAD Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.365000 audit: BPF prog-id=55 op=LOAD Oct 2 19:53:54.365000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:53:54.365000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.367000 audit: BPF prog-id=56 op=LOAD Oct 2 19:53:54.367000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.368000 audit: BPF prog-id=57 op=LOAD Oct 2 19:53:54.368000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.369000 audit: BPF prog-id=58 op=LOAD Oct 2 19:53:54.369000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit: BPF prog-id=59 op=LOAD Oct 2 19:53:54.371000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit: BPF prog-id=60 op=LOAD Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.371000 audit: BPF prog-id=61 op=LOAD Oct 2 19:53:54.371000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:53:54.371000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:53:54.389174 systemd[1]: Started kubelet.service. Oct 2 19:53:54.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.437361 kubelet[2058]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:54.437707 kubelet[2058]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:53:54.437749 kubelet[2058]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:53:54.437851 kubelet[2058]: I1002 19:53:54.437829 2058 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:53:54.658814 kubelet[2058]: I1002 19:53:54.653933 2058 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:53:54.658814 kubelet[2058]: I1002 19:53:54.653959 2058 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:53:54.658814 kubelet[2058]: I1002 19:53:54.654226 2058 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:53:54.659946 kubelet[2058]: I1002 19:53:54.659917 2058 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:53:54.661915 kubelet[2058]: E1002 19:53:54.661851 2058 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.17:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.665369 kubelet[2058]: I1002 19:53:54.665348 2058 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:53:54.665742 kubelet[2058]: I1002 19:53:54.665719 2058 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:53:54.665834 kubelet[2058]: I1002 19:53:54.665816 2058 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:53:54.665968 kubelet[2058]: I1002 19:53:54.665842 2058 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:53:54.665968 kubelet[2058]: I1002 19:53:54.665859 2058 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:53:54.665968 kubelet[2058]: I1002 19:53:54.665960 2058 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:54.668779 kubelet[2058]: I1002 19:53:54.668760 2058 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:53:54.668878 kubelet[2058]: I1002 19:53:54.668783 2058 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:53:54.668878 kubelet[2058]: I1002 19:53:54.668805 2058 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:53:54.668878 kubelet[2058]: I1002 19:53:54.668821 2058 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:53:54.669591 kubelet[2058]: W1002 19:53:54.669547 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74ed58c6f8&limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.669697 kubelet[2058]: E1002 19:53:54.669646 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74ed58c6f8&limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.669762 kubelet[2058]: W1002 19:53:54.669726 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.669809 kubelet[2058]: E1002 19:53:54.669774 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.669868 kubelet[2058]: I1002 19:53:54.669857 2058 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:53:54.670209 kubelet[2058]: W1002 19:53:54.670190 2058 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:53:54.670699 kubelet[2058]: I1002 19:53:54.670681 2058 server.go:1168] "Started kubelet" Oct 2 19:53:54.671000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.671000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:54.671000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d73e30 a1=c000db0cf0 a2=c000d73e00 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.671000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:54.671000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.671000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:54.671000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b432c0 a1=c000db0d08 a2=c000d73ec0 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.671000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:54.672950 kubelet[2058]: I1002 19:53:54.672430 2058 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:53:54.672950 kubelet[2058]: I1002 19:53:54.672484 2058 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:53:54.672950 kubelet[2058]: I1002 19:53:54.672552 2058 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:53:54.675000 audit[2068]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.675000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7fff8bf8c400 a2=0 a3=7fff8bf8c3ec items=0 ppid=2058 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:54.676000 audit[2069]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.676000 audit[2069]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=4 a1=7fffac682170 a2=0 a3=7fffac68215c items=0 ppid=2058 pid=2069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.676000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:53:54.677917 kubelet[2058]: E1002 19:53:54.677899 2058 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:53:54.678027 kubelet[2058]: E1002 19:53:54.678018 2058 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:53:54.678637 kubelet[2058]: I1002 19:53:54.678608 2058 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:53:54.679406 kubelet[2058]: I1002 19:53:54.679393 2058 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:53:54.679505 kubelet[2058]: I1002 19:53:54.679491 2058 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:53:54.680890 kubelet[2058]: I1002 19:53:54.680870 2058 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:53:54.681000 audit[2071]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.681000 audit[2071]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=4 a1=7ffe803ca5e0 a2=0 a3=7ffe803ca5cc items=0 ppid=2058 pid=2071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:54.684118 kubelet[2058]: I1002 19:53:54.684015 2058 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:53:54.684495 kubelet[2058]: E1002 19:53:54.684480 2058 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74ed58c6f8?timeout=10s\": dial tcp 10.200.8.17:6443: connect: connection refused" interval="200ms" Oct 2 19:53:54.684965 kubelet[2058]: E1002 19:53:54.684855 2058 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-74ed58c6f8.178a626e19692273", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-74ed58c6f8", UID:"ci-3510.3.0-a-74ed58c6f8", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74ed58c6f8"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 53, 54, 670658163, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 53, 54, 670658163, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.17:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.17:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:53:54.684000 audit[2073]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.684000 audit[2073]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=4 a1=7ffe27064e70 a2=0 a3=7ffe27064e5c items=0 ppid=2058 pid=2073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.684000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:53:54.695022 kubelet[2058]: W1002 19:53:54.694960 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.695126 kubelet[2058]: E1002 19:53:54.695035 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.709000 audit[2079]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.709000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=4 a1=7ffeeddad570 a2=0 a3=7ffeeddad55c items=0 ppid=2058 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.709000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:53:54.710523 kubelet[2058]: I1002 19:53:54.710506 2058 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:53:54.712000 audit[2080]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:54.712000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7ffe03318620 a2=0 a3=7ffe0331860c items=0 ppid=2058 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.712000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:53:54.713168 kubelet[2058]: I1002 19:53:54.713152 2058 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:53:54.713271 kubelet[2058]: I1002 19:53:54.713259 2058 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:53:54.713356 kubelet[2058]: I1002 19:53:54.713347 2058 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:53:54.713464 kubelet[2058]: E1002 19:53:54.713454 2058 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:53:54.714000 audit[2081]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.714000 audit[2081]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffda5ccf630 a2=0 a3=7ffda5ccf61c items=0 ppid=2058 pid=2081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.714000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:54.715000 audit[2082]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_chain pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.715000 audit[2082]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=4 a1=7ffe3071e0a0 a2=0 a3=7ffe3071e08c items=0 ppid=2058 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:54.716000 audit[2083]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:53:54.716000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffcec341790 a2=0 a3=7ffcec34177c items=0 ppid=2058 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:54.717000 audit[2084]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:54.717000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=4 a1=7ffc80a223c0 a2=0 a3=7ffc80a223ac items=0 ppid=2058 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.717000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:53:54.718000 audit[2085]: NETFILTER_CFG table=nat:40 family=10 entries=2 op=nft_register_chain pid=2085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:54.718000 audit[2085]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=4 a1=7fff4532e5e0 a2=0 a3=7fff4532e5cc items=0 ppid=2058 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.718000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:53:54.719000 audit[2086]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:53:54.719000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=4 a1=7ffc158a48f0 a2=0 a3=7ffc158a48dc items=0 ppid=2058 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:53:54.721196 kubelet[2058]: W1002 19:53:54.721156 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.721278 kubelet[2058]: E1002 19:53:54.721201 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:54.755787 kubelet[2058]: I1002 19:53:54.755766 2058 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:53:54.755916 kubelet[2058]: I1002 19:53:54.755901 2058 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:53:54.756046 kubelet[2058]: I1002 19:53:54.756019 2058 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:53:54.762855 kubelet[2058]: I1002 19:53:54.762825 2058 policy_none.go:49] "None policy: Start" Oct 2 19:53:54.763434 kubelet[2058]: I1002 19:53:54.763409 2058 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:53:54.763434 kubelet[2058]: I1002 19:53:54.763433 2058 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:53:54.771308 systemd[1]: Created slice kubepods.slice. Oct 2 19:53:54.775478 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:53:54.778382 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:53:54.783358 kubelet[2058]: I1002 19:53:54.783341 2058 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.783000 audit[2058]: AVC avc: denied { mac_admin } for pid=2058 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:54.783000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:53:54.784087 kubelet[2058]: I1002 19:53:54.783380 2058 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:53:54.783000 audit[2058]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b3ce70 a1=c000448468 a2=c000b3ce40 a3=25 items=0 ppid=1 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.783000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:53:54.784551 kubelet[2058]: I1002 19:53:54.784386 2058 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:53:54.784712 kubelet[2058]: I1002 19:53:54.784619 2058 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:53:54.786405 kubelet[2058]: E1002 19:53:54.786223 2058 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-74ed58c6f8\" not found" Oct 2 19:53:54.786896 kubelet[2058]: E1002 19:53:54.786800 2058 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.17:6443/api/v1/nodes\": dial tcp 10.200.8.17:6443: connect: connection refused" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.814329 kubelet[2058]: I1002 19:53:54.814291 2058 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:53:54.815776 kubelet[2058]: I1002 19:53:54.815753 2058 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:53:54.817410 kubelet[2058]: I1002 19:53:54.817385 2058 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:53:54.824429 systemd[1]: Created slice kubepods-burstable-pod40db5e4689956c6d42300e87a39caec7.slice. Oct 2 19:53:54.832557 systemd[1]: Created slice kubepods-burstable-podedca17da6ae6a6d349a91ba7431158ec.slice. Oct 2 19:53:54.837360 systemd[1]: Created slice kubepods-burstable-pod16f780334b8cd73108c554d562bb8640.slice. Oct 2 19:53:54.884795 kubelet[2058]: I1002 19:53:54.884752 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/16f780334b8cd73108c554d562bb8640-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74ed58c6f8\" (UID: \"16f780334b8cd73108c554d562bb8640\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.884998 kubelet[2058]: I1002 19:53:54.884822 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.884998 kubelet[2058]: I1002 19:53:54.884858 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.884998 kubelet[2058]: I1002 19:53:54.884898 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.884998 kubelet[2058]: I1002 19:53:54.884932 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.884998 kubelet[2058]: I1002 19:53:54.884964 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.885291 kubelet[2058]: I1002 19:53:54.884996 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.885291 kubelet[2058]: I1002 19:53:54.885034 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.885291 kubelet[2058]: I1002 19:53:54.885072 2058 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.885671 kubelet[2058]: E1002 19:53:54.885644 2058 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74ed58c6f8?timeout=10s\": dial tcp 10.200.8.17:6443: connect: connection refused" interval="400ms" Oct 2 19:53:54.989461 kubelet[2058]: I1002 19:53:54.989356 2058 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:54.992914 kubelet[2058]: E1002 19:53:54.992812 2058 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.17:6443/api/v1/nodes\": dial tcp 10.200.8.17:6443: connect: connection refused" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:55.132512 env[1306]: time="2023-10-02T19:53:55.132445746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74ed58c6f8,Uid:40db5e4689956c6d42300e87a39caec7,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:55.137066 env[1306]: time="2023-10-02T19:53:55.137031969Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74ed58c6f8,Uid:edca17da6ae6a6d349a91ba7431158ec,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:55.140485 env[1306]: time="2023-10-02T19:53:55.140454786Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74ed58c6f8,Uid:16f780334b8cd73108c554d562bb8640,Namespace:kube-system,Attempt:0,}" Oct 2 19:53:55.287005 kubelet[2058]: E1002 19:53:55.286973 2058 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74ed58c6f8?timeout=10s\": dial tcp 10.200.8.17:6443: connect: connection refused" interval="800ms" Oct 2 19:53:55.395750 kubelet[2058]: I1002 19:53:55.395713 2058 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:55.396072 kubelet[2058]: E1002 19:53:55.396051 2058 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.17:6443/api/v1/nodes\": dial tcp 10.200.8.17:6443: connect: connection refused" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:55.646982 kubelet[2058]: W1002 19:53:55.646762 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74ed58c6f8&limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.646982 kubelet[2058]: E1002 19:53:55.646852 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.17:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-74ed58c6f8&limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.768936 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount955017298.mount: Deactivated successfully. Oct 2 19:53:55.801279 env[1306]: time="2023-10-02T19:53:55.801220646Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.804753 env[1306]: time="2023-10-02T19:53:55.804712564Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.817773 env[1306]: time="2023-10-02T19:53:55.817725030Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.820935 kubelet[2058]: W1002 19:53:55.820864 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.821187 kubelet[2058]: E1002 19:53:55.821052 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.17:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.822851 env[1306]: time="2023-10-02T19:53:55.822781056Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.825177 kubelet[2058]: W1002 19:53:55.825129 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.825270 kubelet[2058]: E1002 19:53:55.825182 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.17:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.835929 env[1306]: time="2023-10-02T19:53:55.835889422Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.839513 env[1306]: time="2023-10-02T19:53:55.839480240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.844295 env[1306]: time="2023-10-02T19:53:55.844259965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.848200 env[1306]: time="2023-10-02T19:53:55.848167385Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.852960 env[1306]: time="2023-10-02T19:53:55.852925409Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.859332 env[1306]: time="2023-10-02T19:53:55.859297241Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.874200 env[1306]: time="2023-10-02T19:53:55.874161417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.886186 env[1306]: time="2023-10-02T19:53:55.886150978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:53:55.929908 kubelet[2058]: W1002 19:53:55.929238 2058 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.929908 kubelet[2058]: E1002 19:53:55.929304 2058 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.17:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.17:6443: connect: connection refused Oct 2 19:53:55.935706 env[1306]: time="2023-10-02T19:53:55.935644329Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:55.935841 env[1306]: time="2023-10-02T19:53:55.935682030Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:55.935940 env[1306]: time="2023-10-02T19:53:55.935830130Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:55.936176 env[1306]: time="2023-10-02T19:53:55.936124932Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db11265eae1482be75efcf0f70490076764c91df7bfa1d637af2ca1b66b5ecd7 pid=2098 runtime=io.containerd.runc.v2 Oct 2 19:53:55.963400 systemd[1]: Started cri-containerd-db11265eae1482be75efcf0f70490076764c91df7bfa1d637af2ca1b66b5ecd7.scope. Oct 2 19:53:55.977901 env[1306]: time="2023-10-02T19:53:55.976355036Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:55.977901 env[1306]: time="2023-10-02T19:53:55.976407037Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:55.977901 env[1306]: time="2023-10-02T19:53:55.976433537Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:55.977901 env[1306]: time="2023-10-02T19:53:55.976584638Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251 pid=2122 runtime=io.containerd.runc.v2 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.987000 audit: BPF prog-id=62 op=LOAD Oct 2 19:53:55.987000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.987000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2098 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:55.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462313132363565616531343832626537356566636630663730343930 Oct 2 19:53:55.987000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.987000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2098 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:55.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462313132363565616531343832626537356566636630663730343930 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit: BPF prog-id=63 op=LOAD Oct 2 19:53:55.988000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b0a90 items=0 ppid=2098 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:55.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462313132363565616531343832626537356566636630663730343930 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.988000 audit: BPF prog-id=64 op=LOAD Oct 2 19:53:55.988000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b0ad8 items=0 ppid=2098 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:55.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462313132363565616531343832626537356566636630663730343930 Oct 2 19:53:55.989000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:53:55.989000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:55.989000 audit: BPF prog-id=65 op=LOAD Oct 2 19:53:55.989000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b0ee8 items=0 ppid=2098 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:55.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462313132363565616531343832626537356566636630663730343930 Oct 2 19:53:55.999199 env[1306]: time="2023-10-02T19:53:55.999119752Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:53:55.999369 env[1306]: time="2023-10-02T19:53:55.999336153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:53:56.001649 env[1306]: time="2023-10-02T19:53:55.999461854Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:53:56.002309 env[1306]: time="2023-10-02T19:53:56.002254868Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8 pid=2146 runtime=io.containerd.runc.v2 Oct 2 19:53:56.019367 systemd[1]: Started cri-containerd-ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251.scope. Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit: BPF prog-id=66 op=LOAD Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563393539303938623932613462363761636565626134346236356237 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563393539303938623932613462363761636565626134346236356237 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit: BPF prog-id=67 op=LOAD Oct 2 19:53:56.040000 audit[2139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00039ae40 items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563393539303938623932613462363761636565626134346236356237 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.040000 audit: BPF prog-id=68 op=LOAD Oct 2 19:53:56.040000 audit[2139]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00039ae88 items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563393539303938623932613462363761636565626134346236356237 Oct 2 19:53:56.041000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:53:56.041000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { perfmon } for pid=2139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit[2139]: AVC avc: denied { bpf } for pid=2139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.041000 audit: BPF prog-id=69 op=LOAD Oct 2 19:53:56.041000 audit[2139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00039b298 items=0 ppid=2122 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563393539303938623932613462363761636565626134346236356237 Oct 2 19:53:56.050451 systemd[1]: Started cri-containerd-30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8.scope. Oct 2 19:53:56.050786 env[1306]: time="2023-10-02T19:53:56.050729010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-74ed58c6f8,Uid:40db5e4689956c6d42300e87a39caec7,Namespace:kube-system,Attempt:0,} returns sandbox id \"db11265eae1482be75efcf0f70490076764c91df7bfa1d637af2ca1b66b5ecd7\"" Oct 2 19:53:56.058260 env[1306]: time="2023-10-02T19:53:56.058222447Z" level=info msg="CreateContainer within sandbox \"db11265eae1482be75efcf0f70490076764c91df7bfa1d637af2ca1b66b5ecd7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.080000 audit: BPF prog-id=70 op=LOAD Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2146 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330613337383039303433303161663330383866613132366161663966 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2146 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330613337383039303433303161663330383866613132366161663966 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.082000 audit: BPF prog-id=71 op=LOAD Oct 2 19:53:56.082000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003506f0 items=0 ppid=2146 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330613337383039303433303161663330383866613132366161663966 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit: BPF prog-id=72 op=LOAD Oct 2 19:53:56.083000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000350738 items=0 ppid=2146 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330613337383039303433303161663330383866613132366161663966 Oct 2 19:53:56.083000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:53:56.083000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { perfmon } for pid=2165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit[2165]: AVC avc: denied { bpf } for pid=2165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.083000 audit: BPF prog-id=73 op=LOAD Oct 2 19:53:56.083000 audit[2165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000350b48 items=0 ppid=2146 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330613337383039303433303161663330383866613132366161663966 Oct 2 19:53:56.092730 kubelet[2058]: E1002 19:53:56.092688 2058 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74ed58c6f8?timeout=10s\": dial tcp 10.200.8.17:6443: connect: connection refused" interval="1.6s" Oct 2 19:53:56.094206 env[1306]: time="2023-10-02T19:53:56.094150027Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-74ed58c6f8,Uid:edca17da6ae6a6d349a91ba7431158ec,Namespace:kube-system,Attempt:0,} returns sandbox id \"ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251\"" Oct 2 19:53:56.097903 env[1306]: time="2023-10-02T19:53:56.097867045Z" level=info msg="CreateContainer within sandbox \"ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:53:56.106217 env[1306]: time="2023-10-02T19:53:56.106179687Z" level=info msg="CreateContainer within sandbox \"db11265eae1482be75efcf0f70490076764c91df7bfa1d637af2ca1b66b5ecd7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"7a0e071638eb11521285ac604a58d4a730404ca877b85f2f7257cacb84081d04\"" Oct 2 19:53:56.106862 env[1306]: time="2023-10-02T19:53:56.106835790Z" level=info msg="StartContainer for \"7a0e071638eb11521285ac604a58d4a730404ca877b85f2f7257cacb84081d04\"" Oct 2 19:53:56.123682 env[1306]: time="2023-10-02T19:53:56.123645774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-74ed58c6f8,Uid:16f780334b8cd73108c554d562bb8640,Namespace:kube-system,Attempt:0,} returns sandbox id \"30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8\"" Oct 2 19:53:56.128279 env[1306]: time="2023-10-02T19:53:56.128241197Z" level=info msg="CreateContainer within sandbox \"30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:53:56.138767 systemd[1]: Started cri-containerd-7a0e071638eb11521285ac604a58d4a730404ca877b85f2f7257cacb84081d04.scope. Oct 2 19:53:56.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.154000 audit: BPF prog-id=74 op=LOAD Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2098 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761306530373136333865623131353231323835616336303461353864 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2098 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761306530373136333865623131353231323835616336303461353864 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit: BPF prog-id=75 op=LOAD Oct 2 19:53:56.155000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3fc0 items=0 ppid=2098 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761306530373136333865623131353231323835616336303461353864 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit: BPF prog-id=76 op=LOAD Oct 2 19:53:56.155000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ca008 items=0 ppid=2098 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761306530373136333865623131353231323835616336303461353864 Oct 2 19:53:56.155000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:53:56.155000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.155000 audit: BPF prog-id=77 op=LOAD Oct 2 19:53:56.155000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ca418 items=0 ppid=2098 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761306530373136333865623131353231323835616336303461353864 Oct 2 19:53:56.193671 env[1306]: time="2023-10-02T19:53:56.185702783Z" level=info msg="CreateContainer within sandbox \"ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b\"" Oct 2 19:53:56.194380 env[1306]: time="2023-10-02T19:53:56.194347927Z" level=info msg="StartContainer for \"40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b\"" Oct 2 19:53:56.205100 kubelet[2058]: I1002 19:53:56.204564 2058 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:56.205100 kubelet[2058]: E1002 19:53:56.205075 2058 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.17:6443/api/v1/nodes\": dial tcp 10.200.8.17:6443: connect: connection refused" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:56.206561 env[1306]: time="2023-10-02T19:53:56.206509287Z" level=info msg="CreateContainer within sandbox \"30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e\"" Oct 2 19:53:56.207201 env[1306]: time="2023-10-02T19:53:56.207176191Z" level=info msg="StartContainer for \"228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e\"" Oct 2 19:53:56.207867 env[1306]: time="2023-10-02T19:53:56.207836094Z" level=info msg="StartContainer for \"7a0e071638eb11521285ac604a58d4a730404ca877b85f2f7257cacb84081d04\" returns successfully" Oct 2 19:53:56.224124 systemd[1]: Started cri-containerd-40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b.scope. Oct 2 19:53:56.251255 systemd[1]: Started cri-containerd-228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e.scope. Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.256000 audit: BPF prog-id=78 op=LOAD Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2122 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430653235653535636461336431396439643036303163636438336636 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2122 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430653235653535636461336431396439643036303163636438336636 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.258000 audit: BPF prog-id=79 op=LOAD Oct 2 19:53:56.258000 audit[2259]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000354bf0 items=0 ppid=2122 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430653235653535636461336431396439643036303163636438336636 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.259000 audit: BPF prog-id=80 op=LOAD Oct 2 19:53:56.259000 audit[2259]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000354c38 items=0 ppid=2122 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430653235653535636461336431396439643036303163636438336636 Oct 2 19:53:56.260000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:53:56.260000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { perfmon } for pid=2259 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit[2259]: AVC avc: denied { bpf } for pid=2259 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.260000 audit: BPF prog-id=81 op=LOAD Oct 2 19:53:56.260000 audit[2259]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000355048 items=0 ppid=2122 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430653235653535636461336431396439643036303163636438336636 Oct 2 19:53:56.309061 env[1306]: time="2023-10-02T19:53:56.309006499Z" level=info msg="StartContainer for \"40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b\" returns successfully" Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341603 kernel: kauditd_printk_skb: 502 callbacks suppressed Oct 2 19:53:56.341759 kernel: audit: type=1400 audit(1696276436.322:669): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.359706 kernel: audit: type=1400 audit(1696276436.322:670): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.374669 kernel: audit: type=1400 audit(1696276436.322:671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.390244 kernel: audit: type=1400 audit(1696276436.322:672): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.404210 kernel: audit: type=1400 audit(1696276436.322:673): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.431304 kernel: audit: type=1400 audit(1696276436.322:674): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.431395 kernel: audit: type=1400 audit(1696276436.322:675): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.446808 kernel: audit: type=1400 audit(1696276436.322:676): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.446996 kernel: audit: type=1400 audit(1696276436.322:677): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.323000 audit: BPF prog-id=82 op=LOAD Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2146 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383038386335653734313665353638666633363034316264653065 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2146 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383038386335653734313665353638666633363034316264653065 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.477664 kernel: audit: type=1400 audit(1696276436.323:678): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit: BPF prog-id=83 op=LOAD Oct 2 19:53:56.341000 audit[2276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000218e80 items=0 ppid=2146 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383038386335653734313665353638666633363034316264653065 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit: BPF prog-id=84 op=LOAD Oct 2 19:53:56.341000 audit[2276]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000218ec8 items=0 ppid=2146 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383038386335653734313665353638666633363034316264653065 Oct 2 19:53:56.341000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:53:56.341000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { perfmon } for pid=2276 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit[2276]: AVC avc: denied { bpf } for pid=2276 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:53:56.341000 audit: BPF prog-id=85 op=LOAD Oct 2 19:53:56.341000 audit[2276]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002192d8 items=0 ppid=2146 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:56.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232383038386335653734313665353638666633363034316264653065 Oct 2 19:53:56.538571 env[1306]: time="2023-10-02T19:53:56.538521244Z" level=info msg="StartContainer for \"228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e\" returns successfully" Oct 2 19:53:57.807842 kubelet[2058]: I1002 19:53:57.807810 2058 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:57.848000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.848000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000764090 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:53:57.848000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:57.848000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:57.848000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00040e4c0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:53:57.848000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:53:58.781000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.781000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004931650 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.781000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.781000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0065b52e0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.782000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.782000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004931770 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0038be090 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c007d348c0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:53:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0038bef90 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:53:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:53:58.944188 kubelet[2058]: E1002 19:53:58.944150 2058 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-74ed58c6f8\" not found" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:58.955174 kubelet[2058]: I1002 19:53:58.955116 2058 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:53:59.671308 kubelet[2058]: I1002 19:53:59.671249 2058 apiserver.go:52] "Watching apiserver" Oct 2 19:53:59.684909 kubelet[2058]: I1002 19:53:59.684869 2058 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:53:59.730384 kubelet[2058]: I1002 19:53:59.730334 2058 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:00.930613 kubelet[2058]: W1002 19:54:00.929480 2058 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:02.504121 systemd[1]: Reloading. Oct 2 19:54:02.543527 kubelet[2058]: W1002 19:54:02.543496 2058 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:02.586844 /usr/lib/systemd/system-generators/torcx-generator[2352]: time="2023-10-02T19:54:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:02.586881 /usr/lib/systemd/system-generators/torcx-generator[2352]: time="2023-10-02T19:54:02Z" level=info msg="torcx already run" Oct 2 19:54:02.677834 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:02.677854 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:02.696265 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:02.795989 kernel: kauditd_printk_skb: 71 callbacks suppressed Oct 2 19:54:02.796122 kernel: audit: type=1400 audit(1696276442.775:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.814862 kernel: audit: type=1400 audit(1696276442.775:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827658 kernel: audit: type=1400 audit(1696276442.775:697): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.843258 kernel: audit: type=1400 audit(1696276442.775:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.843322 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:54:02.859982 kernel: audit: type=1400 audit(1696276442.775:699): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.860051 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.877462 kernel: audit: type=1400 audit(1696276442.775:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.877530 kernel: audit: backlog limit exceeded Oct 2 19:54:02.877556 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.799000 audit: BPF prog-id=86 op=LOAD Oct 2 19:54:02.799000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit: BPF prog-id=87 op=LOAD Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.813000 audit: BPF prog-id=88 op=LOAD Oct 2 19:54:02.813000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:54:02.813000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:54:02.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit: BPF prog-id=89 op=LOAD Oct 2 19:54:02.826000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.826000 audit: BPF prog-id=90 op=LOAD Oct 2 19:54:02.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.827000 audit: BPF prog-id=91 op=LOAD Oct 2 19:54:02.827000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:54:02.827000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:54:02.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit: BPF prog-id=92 op=LOAD Oct 2 19:54:02.884000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit: BPF prog-id=93 op=LOAD Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit: BPF prog-id=94 op=LOAD Oct 2 19:54:02.885000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:54:02.885000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.885000 audit: BPF prog-id=95 op=LOAD Oct 2 19:54:02.885000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.887000 audit: BPF prog-id=96 op=LOAD Oct 2 19:54:02.887000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit: BPF prog-id=97 op=LOAD Oct 2 19:54:02.888000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit: BPF prog-id=98 op=LOAD Oct 2 19:54:02.889000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.889000 audit: BPF prog-id=99 op=LOAD Oct 2 19:54:02.890000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.890000 audit: BPF prog-id=100 op=LOAD Oct 2 19:54:02.890000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.891000 audit: BPF prog-id=101 op=LOAD Oct 2 19:54:02.891000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.892000 audit: BPF prog-id=102 op=LOAD Oct 2 19:54:02.892000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.894000 audit: BPF prog-id=103 op=LOAD Oct 2 19:54:02.894000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit: BPF prog-id=104 op=LOAD Oct 2 19:54:02.896000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit: BPF prog-id=105 op=LOAD Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:02.896000 audit: BPF prog-id=106 op=LOAD Oct 2 19:54:02.896000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:54:02.896000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:54:02.915177 kubelet[2058]: I1002 19:54:02.914757 2058 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:02.914969 systemd[1]: Stopping kubelet.service... Oct 2 19:54:02.937076 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:54:02.937354 systemd[1]: Stopped kubelet.service. Oct 2 19:54:02.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:02.940296 systemd[1]: Started kubelet.service. Oct 2 19:54:02.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:03.018147 kubelet[2414]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:03.018491 kubelet[2414]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:03.018533 kubelet[2414]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:03.018673 kubelet[2414]: I1002 19:54:03.018616 2414 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:54:03.022904 kubelet[2414]: I1002 19:54:03.022874 2414 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:54:03.022904 kubelet[2414]: I1002 19:54:03.022895 2414 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:54:03.023090 kubelet[2414]: I1002 19:54:03.023080 2414 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:54:03.024563 kubelet[2414]: I1002 19:54:03.024536 2414 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:54:03.026955 kubelet[2414]: I1002 19:54:03.026923 2414 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:03.029280 kubelet[2414]: I1002 19:54:03.029251 2414 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:54:03.029523 kubelet[2414]: I1002 19:54:03.029505 2414 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:54:03.029612 kubelet[2414]: I1002 19:54:03.029596 2414 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:54:03.029765 kubelet[2414]: I1002 19:54:03.029647 2414 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:54:03.029765 kubelet[2414]: I1002 19:54:03.029665 2414 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:54:03.029765 kubelet[2414]: I1002 19:54:03.029708 2414 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:03.042136 kubelet[2414]: I1002 19:54:03.042116 2414 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:54:03.042271 kubelet[2414]: I1002 19:54:03.042260 2414 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:54:03.042374 kubelet[2414]: I1002 19:54:03.042364 2414 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:54:03.042453 kubelet[2414]: I1002 19:54:03.042446 2414 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:54:03.058788 kubelet[2414]: I1002 19:54:03.058697 2414 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:54:03.059565 kubelet[2414]: I1002 19:54:03.059550 2414 server.go:1168] "Started kubelet" Oct 2 19:54:03.061000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:03.061000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:03.061000 audit[2414]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008b23f0 a1=c000749ad0 a2=c0008b23c0 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:03.061000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:03.062550 kubelet[2414]: I1002 19:54:03.062534 2414 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:54:03.062000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:03.062000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:03.062000 audit[2414]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007dada0 a1=c000749ae8 a2=c0008b2480 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:03.062000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:03.062981 kubelet[2414]: I1002 19:54:03.062965 2414 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:54:03.063081 kubelet[2414]: I1002 19:54:03.063071 2414 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:54:03.069339 kubelet[2414]: I1002 19:54:03.069316 2414 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:54:03.070228 kubelet[2414]: I1002 19:54:03.070207 2414 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:54:03.071140 kubelet[2414]: I1002 19:54:03.071093 2414 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:54:03.072086 kubelet[2414]: I1002 19:54:03.072070 2414 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:54:03.073896 kubelet[2414]: I1002 19:54:03.073879 2414 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:54:03.075873 kubelet[2414]: I1002 19:54:03.075857 2414 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:54:03.077164 kubelet[2414]: I1002 19:54:03.077148 2414 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:54:03.077267 kubelet[2414]: I1002 19:54:03.077258 2414 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:54:03.077337 kubelet[2414]: I1002 19:54:03.077330 2414 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:54:03.077447 kubelet[2414]: E1002 19:54:03.077439 2414 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:54:03.084998 kubelet[2414]: E1002 19:54:03.084979 2414 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:54:03.085141 kubelet[2414]: E1002 19:54:03.085129 2414 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:54:03.147559 kubelet[2414]: I1002 19:54:03.147500 2414 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:54:03.147559 kubelet[2414]: I1002 19:54:03.147565 2414 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:54:03.147786 kubelet[2414]: I1002 19:54:03.147584 2414 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:03.147786 kubelet[2414]: I1002 19:54:03.147785 2414 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:54:03.147889 kubelet[2414]: I1002 19:54:03.147802 2414 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:54:03.147889 kubelet[2414]: I1002 19:54:03.147810 2414 policy_none.go:49] "None policy: Start" Oct 2 19:54:03.148607 kubelet[2414]: I1002 19:54:03.148585 2414 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:54:03.148748 kubelet[2414]: I1002 19:54:03.148624 2414 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:54:03.148885 kubelet[2414]: I1002 19:54:03.148866 2414 state_mem.go:75] "Updated machine memory state" Oct 2 19:54:03.152343 kubelet[2414]: I1002 19:54:03.152320 2414 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:54:03.151000 audit[2414]: AVC avc: denied { mac_admin } for pid=2414 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:03.151000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:03.151000 audit[2414]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000eda960 a1=c000e83bf0 a2=c000eda930 a3=25 items=0 ppid=1 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:03.151000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:03.152751 kubelet[2414]: I1002 19:54:03.152409 2414 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:54:03.152751 kubelet[2414]: I1002 19:54:03.152645 2414 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:54:03.174970 kubelet[2414]: I1002 19:54:03.174943 2414 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.180659 kubelet[2414]: I1002 19:54:03.178560 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:03.180659 kubelet[2414]: I1002 19:54:03.178671 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:03.180659 kubelet[2414]: I1002 19:54:03.178727 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:03.185739 kubelet[2414]: W1002 19:54:03.185711 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:03.193524 kubelet[2414]: I1002 19:54:03.193322 2414 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.193787 kubelet[2414]: I1002 19:54:03.193767 2414 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.195672 kubelet[2414]: W1002 19:54:03.195655 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:03.195773 kubelet[2414]: W1002 19:54:03.195655 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:03.195915 kubelet[2414]: E1002 19:54:03.195900 2414 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-74ed58c6f8\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.196034 kubelet[2414]: E1002 19:54:03.196017 2414 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.274774 kubelet[2414]: I1002 19:54:03.274718 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.274774 kubelet[2414]: I1002 19:54:03.274781 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275058 kubelet[2414]: I1002 19:54:03.274816 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275058 kubelet[2414]: I1002 19:54:03.274846 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275058 kubelet[2414]: I1002 19:54:03.274884 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/16f780334b8cd73108c554d562bb8640-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-74ed58c6f8\" (UID: \"16f780334b8cd73108c554d562bb8640\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275058 kubelet[2414]: I1002 19:54:03.274918 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/40db5e4689956c6d42300e87a39caec7-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" (UID: \"40db5e4689956c6d42300e87a39caec7\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275058 kubelet[2414]: I1002 19:54:03.274948 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275319 kubelet[2414]: I1002 19:54:03.274990 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:03.275510 kubelet[2414]: I1002 19:54:03.275483 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/edca17da6ae6a6d349a91ba7431158ec-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-74ed58c6f8\" (UID: \"edca17da6ae6a6d349a91ba7431158ec\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:04.049676 kubelet[2414]: I1002 19:54:04.049562 2414 apiserver.go:52] "Watching apiserver" Oct 2 19:54:04.075094 kubelet[2414]: I1002 19:54:04.075054 2414 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:54:04.081364 kubelet[2414]: I1002 19:54:04.081332 2414 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:04.125196 kubelet[2414]: W1002 19:54:04.125169 2414 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 19:54:04.125435 kubelet[2414]: E1002 19:54:04.125410 2414 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-74ed58c6f8\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" Oct 2 19:54:04.138582 kubelet[2414]: I1002 19:54:04.138554 2414 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-74ed58c6f8" podStartSLOduration=1.138508893 podCreationTimestamp="2023-10-02 19:54:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:04.132923969 +0000 UTC m=+1.186182628" watchObservedRunningTime="2023-10-02 19:54:04.138508893 +0000 UTC m=+1.191767552" Oct 2 19:54:04.138918 kubelet[2414]: I1002 19:54:04.138892 2414 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-74ed58c6f8" podStartSLOduration=4.138862695 podCreationTimestamp="2023-10-02 19:54:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:04.138226992 +0000 UTC m=+1.191485651" watchObservedRunningTime="2023-10-02 19:54:04.138862695 +0000 UTC m=+1.192121354" Oct 2 19:54:04.158788 kubelet[2414]: I1002 19:54:04.158760 2414 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" podStartSLOduration=2.158726381 podCreationTimestamp="2023-10-02 19:54:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:04.147243131 +0000 UTC m=+1.200501790" watchObservedRunningTime="2023-10-02 19:54:04.158726381 +0000 UTC m=+1.211985040" Oct 2 19:54:04.199000 audit[2443]: USER_ACCT pid=2443 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:04.199897 sudo[2443]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:54:04.200175 sudo[2443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:54:04.199000 audit[2443]: CRED_REFR pid=2443 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:04.201000 audit[2443]: USER_START pid=2443 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:04.725755 sudo[2443]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:04.725000 audit[2443]: USER_END pid=2443 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:04.725000 audit[2443]: CRED_DISP pid=2443 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.713452 sudo[1641]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:05.712000 audit[1641]: USER_END pid=1641 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.713000 audit[1641]: CRED_DISP pid=1641 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.814240 sshd[1638]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:05.815000 audit[1638]: USER_END pid=1638 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:54:05.815000 audit[1638]: CRED_DISP pid=1638 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:54:05.817771 systemd[1]: sshd@6-10.200.8.17:22-10.200.12.6:34662.service: Deactivated successfully. Oct 2 19:54:05.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.17:22-10.200.12.6:34662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.818726 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:54:05.818926 systemd[1]: session-9.scope: Consumed 3.593s CPU time. Oct 2 19:54:05.819426 systemd-logind[1289]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:54:05.820372 systemd-logind[1289]: Removed session 9. Oct 2 19:54:11.894672 kernel: kauditd_printk_skb: 262 callbacks suppressed Oct 2 19:54:11.894852 kernel: audit: type=1400 audit(1696276451.887:952): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.887000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.889000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.925135 kernel: audit: type=1400 audit(1696276451.889:953): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.925248 kernel: audit: type=1300 audit(1696276451.889:953): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e404a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:11.889000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e404a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:11.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:11.963683 kernel: audit: type=1327 audit(1696276451.889:953): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:11.889000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.979246 kernel: audit: type=1400 audit(1696276451.889:954): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.979326 kernel: audit: type=1300 audit(1696276451.889:954): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e40520 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:11.889000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e40520 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:11.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:12.016039 kernel: audit: type=1327 audit(1696276451.889:954): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:12.016131 kernel: audit: type=1400 audit(1696276451.889:955): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.889000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:11.889000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e405a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:12.053315 kernel: audit: type=1300 audit(1696276451.889:955): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e405a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:12.053443 kernel: audit: type=1327 audit(1696276451.889:955): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:11.889000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:11.887000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d347e0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:11.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:13.243000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6919 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:54:13.243000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00138a400 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:13.243000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:14.237084 kubelet[2414]: I1002 19:54:14.237039 2414 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:54:14.237963 env[1306]: time="2023-10-02T19:54:14.237913145Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:54:14.238401 kubelet[2414]: I1002 19:54:14.238204 2414 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:54:14.915262 kubelet[2414]: I1002 19:54:14.915220 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:14.922469 systemd[1]: Created slice kubepods-besteffort-podce2bb73c_a358_4e71_a8f1_5e488e8883a8.slice. Oct 2 19:54:14.933928 kubelet[2414]: I1002 19:54:14.933894 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:14.939368 systemd[1]: Created slice kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice. Oct 2 19:54:14.949022 kubelet[2414]: I1002 19:54:14.948991 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zjwq4\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-kube-api-access-zjwq4\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949151 kubelet[2414]: I1002 19:54:14.949056 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-etc-cni-netd\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949151 kubelet[2414]: I1002 19:54:14.949089 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-net\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949151 kubelet[2414]: I1002 19:54:14.949121 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ce2bb73c-a358-4e71-a8f1-5e488e8883a8-kube-proxy\") pod \"kube-proxy-2ndcb\" (UID: \"ce2bb73c-a358-4e71-a8f1-5e488e8883a8\") " pod="kube-system/kube-proxy-2ndcb" Oct 2 19:54:14.949151 kubelet[2414]: I1002 19:54:14.949147 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-96jgj\" (UniqueName: \"kubernetes.io/projected/ce2bb73c-a358-4e71-a8f1-5e488e8883a8-kube-api-access-96jgj\") pod \"kube-proxy-2ndcb\" (UID: \"ce2bb73c-a358-4e71-a8f1-5e488e8883a8\") " pod="kube-system/kube-proxy-2ndcb" Oct 2 19:54:14.949326 kubelet[2414]: I1002 19:54:14.949185 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-bpf-maps\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949326 kubelet[2414]: I1002 19:54:14.949215 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/38ba86de-3df6-4fbd-b795-de92b0472aca-clustermesh-secrets\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949326 kubelet[2414]: I1002 19:54:14.949244 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-config-path\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949326 kubelet[2414]: I1002 19:54:14.949274 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ce2bb73c-a358-4e71-a8f1-5e488e8883a8-xtables-lock\") pod \"kube-proxy-2ndcb\" (UID: \"ce2bb73c-a358-4e71-a8f1-5e488e8883a8\") " pod="kube-system/kube-proxy-2ndcb" Oct 2 19:54:14.949326 kubelet[2414]: I1002 19:54:14.949310 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ce2bb73c-a358-4e71-a8f1-5e488e8883a8-lib-modules\") pod \"kube-proxy-2ndcb\" (UID: \"ce2bb73c-a358-4e71-a8f1-5e488e8883a8\") " pod="kube-system/kube-proxy-2ndcb" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949339 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-run\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949368 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-hubble-tls\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949397 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cni-path\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949424 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-lib-modules\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949453 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-hostproc\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949528 kubelet[2414]: I1002 19:54:14.949482 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-cgroup\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949781 kubelet[2414]: I1002 19:54:14.949512 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-xtables-lock\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:14.949781 kubelet[2414]: I1002 19:54:14.949553 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-kernel\") pod \"cilium-jwbrj\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " pod="kube-system/cilium-jwbrj" Oct 2 19:54:15.003747 kubelet[2414]: I1002 19:54:15.003710 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:15.009410 systemd[1]: Created slice kubepods-besteffort-podacc9dbb0_b9fc_4bda_bec7_9922179367d7.slice. Oct 2 19:54:15.050052 kubelet[2414]: I1002 19:54:15.050010 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/acc9dbb0-b9fc-4bda-bec7-9922179367d7-cilium-config-path\") pod \"cilium-operator-574c4bb98d-xzzwv\" (UID: \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\") " pod="kube-system/cilium-operator-574c4bb98d-xzzwv" Oct 2 19:54:15.050330 kubelet[2414]: I1002 19:54:15.050304 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sj4mj\" (UniqueName: \"kubernetes.io/projected/acc9dbb0-b9fc-4bda-bec7-9922179367d7-kube-api-access-sj4mj\") pod \"cilium-operator-574c4bb98d-xzzwv\" (UID: \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\") " pod="kube-system/cilium-operator-574c4bb98d-xzzwv" Oct 2 19:54:15.234696 env[1306]: time="2023-10-02T19:54:15.233807443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2ndcb,Uid:ce2bb73c-a358-4e71-a8f1-5e488e8883a8,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:15.242645 env[1306]: time="2023-10-02T19:54:15.242595075Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jwbrj,Uid:38ba86de-3df6-4fbd-b795-de92b0472aca,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:15.279337 env[1306]: time="2023-10-02T19:54:15.275586496Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:15.279337 env[1306]: time="2023-10-02T19:54:15.275616196Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:15.279337 env[1306]: time="2023-10-02T19:54:15.275635596Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:15.279337 env[1306]: time="2023-10-02T19:54:15.275782297Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/83b085936eab1039d8ad4862e25e1e636307077efdad2968d21eaaea4fb906f2 pid=2491 runtime=io.containerd.runc.v2 Oct 2 19:54:15.288959 env[1306]: time="2023-10-02T19:54:15.288878945Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:15.289140 env[1306]: time="2023-10-02T19:54:15.288925445Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:15.289140 env[1306]: time="2023-10-02T19:54:15.288952645Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:15.289267 env[1306]: time="2023-10-02T19:54:15.289118646Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98 pid=2507 runtime=io.containerd.runc.v2 Oct 2 19:54:15.300441 systemd[1]: Started cri-containerd-83b085936eab1039d8ad4862e25e1e636307077efdad2968d21eaaea4fb906f2.scope. Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.313000 audit: BPF prog-id=107 op=LOAD Oct 2 19:54:15.314000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315822 env[1306]: time="2023-10-02T19:54:15.315769844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-xzzwv,Uid:acc9dbb0-b9fc-4bda-bec7-9922179367d7,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:15.314000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2491 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833623038353933366561623130333964386164343836326532356531 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2491 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833623038353933366561623130333964386164343836326532356531 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit: BPF prog-id=108 op=LOAD Oct 2 19:54:15.315000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308340 items=0 ppid=2491 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833623038353933366561623130333964386164343836326532356531 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.315000 audit: BPF prog-id=109 op=LOAD Oct 2 19:54:15.315000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308388 items=0 ppid=2491 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.315000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833623038353933366561623130333964386164343836326532356531 Oct 2 19:54:15.316000 audit: BPF prog-id=109 op=UNLOAD Oct 2 19:54:15.316000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { perfmon } for pid=2508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit[2508]: AVC avc: denied { bpf } for pid=2508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.316000 audit: BPF prog-id=110 op=LOAD Oct 2 19:54:15.316000 audit[2508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308798 items=0 ppid=2491 pid=2508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833623038353933366561623130333964386164343836326532356531 Oct 2 19:54:15.324889 systemd[1]: Started cri-containerd-810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98.scope. Oct 2 19:54:15.343539 env[1306]: time="2023-10-02T19:54:15.343484146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2ndcb,Uid:ce2bb73c-a358-4e71-a8f1-5e488e8883a8,Namespace:kube-system,Attempt:0,} returns sandbox id \"83b085936eab1039d8ad4862e25e1e636307077efdad2968d21eaaea4fb906f2\"" Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.346000 audit: BPF prog-id=111 op=LOAD Oct 2 19:54:15.347000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.347000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2507 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831306363383265376462353338626666343537656439616239633164 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2507 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831306363383265376462353338626666343537656439616239633164 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit: BPF prog-id=112 op=LOAD Oct 2 19:54:15.348000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000198550 items=0 ppid=2507 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831306363383265376462353338626666343537656439616239633164 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit: BPF prog-id=113 op=LOAD Oct 2 19:54:15.348000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000198598 items=0 ppid=2507 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831306363383265376462353338626666343537656439616239633164 Oct 2 19:54:15.348000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:54:15.348000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { perfmon } for pid=2524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit[2524]: AVC avc: denied { bpf } for pid=2524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.348000 audit: BPF prog-id=114 op=LOAD Oct 2 19:54:15.348000 audit[2524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001989a8 items=0 ppid=2507 pid=2524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831306363383265376462353338626666343537656439616239633164 Oct 2 19:54:15.351304 env[1306]: time="2023-10-02T19:54:15.351265874Z" level=info msg="CreateContainer within sandbox \"83b085936eab1039d8ad4862e25e1e636307077efdad2968d21eaaea4fb906f2\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:54:15.369948 env[1306]: time="2023-10-02T19:54:15.368203837Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:15.369948 env[1306]: time="2023-10-02T19:54:15.368326037Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:15.369948 env[1306]: time="2023-10-02T19:54:15.368358137Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:15.369948 env[1306]: time="2023-10-02T19:54:15.368525938Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884 pid=2572 runtime=io.containerd.runc.v2 Oct 2 19:54:15.371820 env[1306]: time="2023-10-02T19:54:15.371783050Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jwbrj,Uid:38ba86de-3df6-4fbd-b795-de92b0472aca,Namespace:kube-system,Attempt:0,} returns sandbox id \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\"" Oct 2 19:54:15.377342 env[1306]: time="2023-10-02T19:54:15.377297470Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:54:15.395168 systemd[1]: Started cri-containerd-144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884.scope. Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit: BPF prog-id=115 op=LOAD Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2572 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134346462393338383838626363386564366561653861326639326161 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2572 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134346462393338383838626363386564366561653861326639326161 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit: BPF prog-id=116 op=LOAD Oct 2 19:54:15.407000 audit[2582]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003085e0 items=0 ppid=2572 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134346462393338383838626363386564366561653861326639326161 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.407000 audit: BPF prog-id=117 op=LOAD Oct 2 19:54:15.407000 audit[2582]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308628 items=0 ppid=2572 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134346462393338383838626363386564366561653861326639326161 Oct 2 19:54:15.407000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:54:15.407000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.408000 audit: BPF prog-id=118 op=LOAD Oct 2 19:54:15.408000 audit[2582]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308a38 items=0 ppid=2572 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134346462393338383838626363386564366561653861326639326161 Oct 2 19:54:15.426269 env[1306]: time="2023-10-02T19:54:15.426234850Z" level=info msg="CreateContainer within sandbox \"83b085936eab1039d8ad4862e25e1e636307077efdad2968d21eaaea4fb906f2\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e2e3a011c3b47e25bac70891ae28b59fb38d69b428edd787697057d6e1ad56d9\"" Oct 2 19:54:15.427413 env[1306]: time="2023-10-02T19:54:15.427378654Z" level=info msg="StartContainer for \"e2e3a011c3b47e25bac70891ae28b59fb38d69b428edd787697057d6e1ad56d9\"" Oct 2 19:54:15.445825 env[1306]: time="2023-10-02T19:54:15.445777622Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-xzzwv,Uid:acc9dbb0-b9fc-4bda-bec7-9922179367d7,Namespace:kube-system,Attempt:0,} returns sandbox id \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\"" Oct 2 19:54:15.451006 systemd[1]: Started cri-containerd-e2e3a011c3b47e25bac70891ae28b59fb38d69b428edd787697057d6e1ad56d9.scope. Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2491 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532653361303131633362343765323562616337303839316165323862 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit: BPF prog-id=119 op=LOAD Oct 2 19:54:15.471000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000247e0 items=0 ppid=2491 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532653361303131633362343765323562616337303839316165323862 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.471000 audit: BPF prog-id=120 op=LOAD Oct 2 19:54:15.471000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024828 items=0 ppid=2491 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.471000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532653361303131633362343765323562616337303839316165323862 Oct 2 19:54:15.471000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:54:15.472000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:15.472000 audit: BPF prog-id=121 op=LOAD Oct 2 19:54:15.472000 audit[2611]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000248b8 items=0 ppid=2491 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532653361303131633362343765323562616337303839316165323862 Oct 2 19:54:15.499527 env[1306]: time="2023-10-02T19:54:15.491519590Z" level=info msg="StartContainer for \"e2e3a011c3b47e25bac70891ae28b59fb38d69b428edd787697057d6e1ad56d9\" returns successfully" Oct 2 19:54:15.549000 audit[2666]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2666 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.549000 audit[2666]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcce122860 a2=0 a3=7ffcce12284c items=0 ppid=2622 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:54:15.551000 audit[2667]: NETFILTER_CFG table=mangle:43 family=10 entries=1 op=nft_register_chain pid=2667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.551000 audit[2667]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee89f0a80 a2=0 a3=7ffee89f0a6c items=0 ppid=2622 pid=2667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:54:15.553000 audit[2668]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2668 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.553000 audit[2668]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe6111f6f0 a2=0 a3=7ffe6111f6dc items=0 ppid=2622 pid=2668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:54:15.554000 audit[2669]: NETFILTER_CFG table=nat:45 family=10 entries=1 op=nft_register_chain pid=2669 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.554000 audit[2669]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1b8ecac0 a2=0 a3=7ffe1b8ecaac items=0 ppid=2622 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:54:15.556000 audit[2670]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_chain pid=2670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.556000 audit[2670]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe255ce8a0 a2=0 a3=7ffe255ce88c items=0 ppid=2622 pid=2670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.556000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:54:15.557000 audit[2671]: NETFILTER_CFG table=filter:47 family=10 entries=1 op=nft_register_chain pid=2671 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.557000 audit[2671]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff6d0f8ee0 a2=0 a3=7fff6d0f8ecc items=0 ppid=2622 pid=2671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:54:15.647000 audit[2672]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2672 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.647000 audit[2672]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc82f02170 a2=0 a3=7ffc82f0215c items=0 ppid=2622 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.647000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:54:15.650000 audit[2674]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.650000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcc8383cf0 a2=0 a3=7ffcc8383cdc items=0 ppid=2622 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:54:15.654000 audit[2677]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2677 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.654000 audit[2677]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffda669040 a2=0 a3=7fffda66902c items=0 ppid=2622 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:54:15.655000 audit[2678]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2678 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.655000 audit[2678]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc8f05f40 a2=0 a3=7ffcc8f05f2c items=0 ppid=2622 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:54:15.657000 audit[2680]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.657000 audit[2680]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdde408b60 a2=0 a3=7ffdde408b4c items=0 ppid=2622 pid=2680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:54:15.658000 audit[2681]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.658000 audit[2681]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc12491be0 a2=0 a3=7ffc12491bcc items=0 ppid=2622 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:54:15.661000 audit[2683]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2683 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.661000 audit[2683]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc7af3b180 a2=0 a3=7ffc7af3b16c items=0 ppid=2622 pid=2683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.661000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:54:15.665000 audit[2686]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2686 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.665000 audit[2686]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffebd2f6300 a2=0 a3=7ffebd2f62ec items=0 ppid=2622 pid=2686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.665000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:54:15.666000 audit[2687]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.666000 audit[2687]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd83190240 a2=0 a3=7ffd8319022c items=0 ppid=2622 pid=2687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.666000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:54:15.668000 audit[2689]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.668000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc11163900 a2=0 a3=7ffc111638ec items=0 ppid=2622 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:54:15.669000 audit[2690]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.669000 audit[2690]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde6a42fa0 a2=0 a3=7ffde6a42f8c items=0 ppid=2622 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.669000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:54:15.672000 audit[2692]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.672000 audit[2692]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdafaec410 a2=0 a3=7ffdafaec3fc items=0 ppid=2622 pid=2692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:15.676000 audit[2695]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.676000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdf6d7ff40 a2=0 a3=7ffdf6d7ff2c items=0 ppid=2622 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.676000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:15.680000 audit[2698]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.680000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc746832a0 a2=0 a3=7ffc7468328c items=0 ppid=2622 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.680000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:54:15.681000 audit[2699]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2699 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.681000 audit[2699]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff9d0062b0 a2=0 a3=7fff9d00629c items=0 ppid=2622 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:54:15.683000 audit[2701]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.683000 audit[2701]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffcf5229e30 a2=0 a3=7ffcf5229e1c items=0 ppid=2622 pid=2701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:15.687000 audit[2704]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.687000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffca510c10 a2=0 a3=7fffca510bfc items=0 ppid=2622 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.687000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:15.693000 audit[2709]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.693000 audit[2709]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd5a21480 a2=0 a3=7fffd5a2146c items=0 ppid=2622 pid=2709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:15.697000 audit[2711]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:15.697000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe5e41eb60 a2=0 a3=7ffe5e41eb4c items=0 ppid=2622 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.697000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:15.751000 audit[2713]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:54:15.751000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffdd0528b40 a2=0 a3=7ffdd0528b2c items=0 ppid=2622 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.751000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:15.772000 audit[2713]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:54:15.772000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffdd0528b40 a2=0 a3=7ffdd0528b2c items=0 ppid=2622 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.772000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:15.773000 audit[2718]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2718 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.773000 audit[2718]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffc351b490 a2=0 a3=7fffc351b47c items=0 ppid=2622 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:54:15.776000 audit[2720]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.776000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff8c9725d0 a2=0 a3=7fff8c9725bc items=0 ppid=2622 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.776000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:54:15.780000 audit[2723]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.780000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd6a62b300 a2=0 a3=7ffd6a62b2ec items=0 ppid=2622 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.780000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:54:15.781000 audit[2724]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.781000 audit[2724]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb4bbfae0 a2=0 a3=7fffb4bbfacc items=0 ppid=2622 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:54:15.784000 audit[2726]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.784000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc464a8ff0 a2=0 a3=7ffc464a8fdc items=0 ppid=2622 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.784000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:54:15.785000 audit[2727]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2727 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.785000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb06b4820 a2=0 a3=7ffdb06b480c items=0 ppid=2622 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.785000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:54:15.788000 audit[2729]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2729 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.788000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe71833350 a2=0 a3=7ffe7183333c items=0 ppid=2622 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.788000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:54:15.794000 audit[2732]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.794000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffc9b191b40 a2=0 a3=7ffc9b191b2c items=0 ppid=2622 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:54:15.795000 audit[2733]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.795000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffdf6d7f20 a2=0 a3=7fffdf6d7f0c items=0 ppid=2622 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.795000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:54:15.799000 audit[2735]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.799000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc4477e3e0 a2=0 a3=7ffc4477e3cc items=0 ppid=2622 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.799000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:54:15.800000 audit[2736]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2736 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.800000 audit[2736]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcca6f6c00 a2=0 a3=7ffcca6f6bec items=0 ppid=2622 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:54:15.803000 audit[2738]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2738 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.803000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4f80c460 a2=0 a3=7fff4f80c44c items=0 ppid=2622 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.803000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:54:15.807000 audit[2741]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2741 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.807000 audit[2741]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce23c2520 a2=0 a3=7ffce23c250c items=0 ppid=2622 pid=2741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:54:15.811000 audit[2744]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2744 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.811000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc1099310 a2=0 a3=7ffdc10992fc items=0 ppid=2622 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:54:15.812000 audit[2745]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2745 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.812000 audit[2745]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe195ae670 a2=0 a3=7ffe195ae65c items=0 ppid=2622 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:54:15.814000 audit[2747]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2747 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.814000 audit[2747]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe6983f0c0 a2=0 a3=7ffe6983f0ac items=0 ppid=2622 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:15.818000 audit[2750]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2750 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.818000 audit[2750]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffebfe2a8f0 a2=0 a3=7ffebfe2a8dc items=0 ppid=2622 pid=2750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.818000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:54:15.819000 audit[2751]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=2751 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.819000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd51c22c20 a2=0 a3=7ffd51c22c0c items=0 ppid=2622 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.819000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:54:15.821000 audit[2753]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.821000 audit[2753]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffde6773630 a2=0 a3=7ffde677361c items=0 ppid=2622 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:15.825000 audit[2756]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=2756 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.825000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd115569b0 a2=0 a3=7ffd1155699c items=0 ppid=2622 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.825000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:15.826000 audit[2757]: NETFILTER_CFG table=nat:89 family=10 entries=1 op=nft_register_chain pid=2757 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.826000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3853d6c0 a2=0 a3=7ffd3853d6ac items=0 ppid=2622 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:15.828000 audit[2759]: NETFILTER_CFG table=nat:90 family=10 entries=2 op=nft_register_chain pid=2759 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:15.828000 audit[2759]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc783231e0 a2=0 a3=7ffc783231cc items=0 ppid=2622 pid=2759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:15.831000 audit[2761]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:54:15.831000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc03f3b260 a2=0 a3=7ffc03f3b24c items=0 ppid=2622 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.831000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:15.831000 audit[2761]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2761 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:54:15.831000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc03f3b260 a2=0 a3=7ffc03f3b24c items=0 ppid=2622 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:15.831000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:54:21.532442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2898900663.mount: Deactivated successfully. Oct 2 19:54:24.234399 env[1306]: time="2023-10-02T19:54:24.234333252Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:24.241519 env[1306]: time="2023-10-02T19:54:24.241477475Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:24.248249 env[1306]: time="2023-10-02T19:54:24.248152597Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:24.249188 env[1306]: time="2023-10-02T19:54:24.249153501Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:54:24.252229 env[1306]: time="2023-10-02T19:54:24.252047710Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:54:24.252677 env[1306]: time="2023-10-02T19:54:24.252648612Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:54:24.284160 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2995032792.mount: Deactivated successfully. Oct 2 19:54:24.303022 env[1306]: time="2023-10-02T19:54:24.302975677Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" Oct 2 19:54:24.303475 env[1306]: time="2023-10-02T19:54:24.303421779Z" level=info msg="StartContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" Oct 2 19:54:24.327034 systemd[1]: Started cri-containerd-661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb.scope. Oct 2 19:54:24.337921 systemd[1]: cri-containerd-661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb.scope: Deactivated successfully. Oct 2 19:54:24.338283 systemd[1]: Stopped cri-containerd-661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb.scope. Oct 2 19:54:25.281664 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb-rootfs.mount: Deactivated successfully. Oct 2 19:54:26.332807 env[1306]: time="2023-10-02T19:54:26.332673070Z" level=error msg="get state for 661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" error="context deadline exceeded: unknown" Oct 2 19:54:26.332807 env[1306]: time="2023-10-02T19:54:26.332794470Z" level=warning msg="unknown status" status=0 Oct 2 19:54:28.032995 env[1306]: time="2023-10-02T19:54:28.032905482Z" level=info msg="shim disconnected" id=661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb Oct 2 19:54:28.032995 env[1306]: time="2023-10-02T19:54:28.032992582Z" level=warning msg="cleaning up after shim disconnected" id=661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb namespace=k8s.io Oct 2 19:54:28.033614 env[1306]: time="2023-10-02T19:54:28.033007282Z" level=info msg="cleaning up dead shim" Oct 2 19:54:28.043107 env[1306]: time="2023-10-02T19:54:28.043056214Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2787 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:28.043468 env[1306]: time="2023-10-02T19:54:28.043338615Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:54:28.043705 env[1306]: time="2023-10-02T19:54:28.043641716Z" level=error msg="Failed to pipe stderr of container \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" error="reading from a closed fifo" Oct 2 19:54:28.043896 env[1306]: time="2023-10-02T19:54:28.043862717Z" level=error msg="Failed to pipe stdout of container \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" error="reading from a closed fifo" Oct 2 19:54:28.049283 env[1306]: time="2023-10-02T19:54:28.049239533Z" level=error msg="StartContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:28.049644 kubelet[2414]: E1002 19:54:28.049596 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" Oct 2 19:54:28.050014 kubelet[2414]: E1002 19:54:28.049780 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:28.050014 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:28.050014 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:54:28.050123 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:28.050123 kubelet[2414]: E1002 19:54:28.049836 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:28.165068 env[1306]: time="2023-10-02T19:54:28.164779996Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:54:28.180141 kubelet[2414]: I1002 19:54:28.180105 2414 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-2ndcb" podStartSLOduration=14.180049644 podCreationTimestamp="2023-10-02 19:54:14 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:16.14417778 +0000 UTC m=+13.197436439" watchObservedRunningTime="2023-10-02 19:54:28.180049644 +0000 UTC m=+25.233308203" Oct 2 19:54:28.238508 env[1306]: time="2023-10-02T19:54:28.238456627Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" Oct 2 19:54:28.240846 env[1306]: time="2023-10-02T19:54:28.239458130Z" level=info msg="StartContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" Oct 2 19:54:28.261906 systemd[1]: Started cri-containerd-ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12.scope. Oct 2 19:54:28.277248 systemd[1]: cri-containerd-ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12.scope: Deactivated successfully. Oct 2 19:54:28.282569 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12-rootfs.mount: Deactivated successfully. Oct 2 19:54:28.298187 env[1306]: time="2023-10-02T19:54:28.298135414Z" level=info msg="shim disconnected" id=ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12 Oct 2 19:54:28.298410 env[1306]: time="2023-10-02T19:54:28.298187514Z" level=warning msg="cleaning up after shim disconnected" id=ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12 namespace=k8s.io Oct 2 19:54:28.298410 env[1306]: time="2023-10-02T19:54:28.298200914Z" level=info msg="cleaning up dead shim" Oct 2 19:54:28.305595 env[1306]: time="2023-10-02T19:54:28.305558737Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2825 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:28.305902 env[1306]: time="2023-10-02T19:54:28.305848838Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:54:28.306100 env[1306]: time="2023-10-02T19:54:28.306050339Z" level=error msg="Failed to pipe stdout of container \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" error="reading from a closed fifo" Oct 2 19:54:28.306461 env[1306]: time="2023-10-02T19:54:28.306200939Z" level=error msg="Failed to pipe stderr of container \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" error="reading from a closed fifo" Oct 2 19:54:28.311107 env[1306]: time="2023-10-02T19:54:28.311065554Z" level=error msg="StartContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:28.311271 kubelet[2414]: E1002 19:54:28.311250 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12" Oct 2 19:54:28.311381 kubelet[2414]: E1002 19:54:28.311371 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:28.311381 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:28.311381 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:54:28.311381 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:28.311615 kubelet[2414]: E1002 19:54:28.311418 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:29.166915 kubelet[2414]: I1002 19:54:29.164898 2414 scope.go:115] "RemoveContainer" containerID="661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" Oct 2 19:54:29.166915 kubelet[2414]: I1002 19:54:29.166825 2414 scope.go:115] "RemoveContainer" containerID="661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" Oct 2 19:54:29.182152 env[1306]: time="2023-10-02T19:54:29.182112380Z" level=info msg="RemoveContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" Oct 2 19:54:29.194617 env[1306]: time="2023-10-02T19:54:29.194567519Z" level=info msg="RemoveContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\"" Oct 2 19:54:29.194785 env[1306]: time="2023-10-02T19:54:29.194716119Z" level=error msg="RemoveContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\" failed" error="failed to set removing state for container \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\": container is already in removing state" Oct 2 19:54:29.196004 kubelet[2414]: E1002 19:54:29.195102 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\": container is already in removing state" containerID="661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" Oct 2 19:54:29.196004 kubelet[2414]: E1002 19:54:29.195181 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb": container is already in removing state; Skipping pod "cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)" Oct 2 19:54:29.196004 kubelet[2414]: E1002 19:54:29.195701 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:29.202542 env[1306]: time="2023-10-02T19:54:29.202504643Z" level=info msg="RemoveContainer for \"661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb\" returns successfully" Oct 2 19:54:29.679733 env[1306]: time="2023-10-02T19:54:29.679680924Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:29.690988 env[1306]: time="2023-10-02T19:54:29.690951759Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:29.699147 env[1306]: time="2023-10-02T19:54:29.699115584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:29.699581 env[1306]: time="2023-10-02T19:54:29.699550086Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:54:29.704241 env[1306]: time="2023-10-02T19:54:29.704211400Z" level=info msg="CreateContainer within sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:54:29.725291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1315467691.mount: Deactivated successfully. Oct 2 19:54:29.754583 env[1306]: time="2023-10-02T19:54:29.754532856Z" level=info msg="CreateContainer within sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\"" Oct 2 19:54:29.756416 env[1306]: time="2023-10-02T19:54:29.756370862Z" level=info msg="StartContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\"" Oct 2 19:54:29.777001 systemd[1]: Started cri-containerd-843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb.scope. Oct 2 19:54:29.810333 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 19:54:29.810474 kernel: audit: type=1400 audit(1696276469.791:1068): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823755 kernel: audit: type=1400 audit(1696276469.791:1069): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836696 kernel: audit: type=1400 audit(1696276469.791:1070): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.851409 kernel: audit: type=1400 audit(1696276469.791:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.865758 kernel: audit: type=1400 audit(1696276469.791:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.894245 kernel: audit: type=1400 audit(1696276469.791:1073): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.894352 kernel: audit: type=1400 audit(1696276469.791:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.908707 kernel: audit: type=1400 audit(1696276469.791:1075): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.922728 kernel: audit: type=1400 audit(1696276469.791:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.928699 kernel: audit: type=1400 audit(1696276469.822:1077): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.928987 env[1306]: time="2023-10-02T19:54:29.928945198Z" level=info msg="StartContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" returns successfully" Oct 2 19:54:29.822000 audit: BPF prog-id=122 op=LOAD Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2572 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:29.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834336333666637356464343638313263643134303837343838313732 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2572 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:29.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834336333666637356464343638313263643134303837343838313732 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.823000 audit: BPF prog-id=123 op=LOAD Oct 2 19:54:29.823000 audit[2846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0003c4120 items=0 ppid=2572 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:29.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834336333666637356464343638313263643134303837343838313732 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit: BPF prog-id=124 op=LOAD Oct 2 19:54:29.836000 audit[2846]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0003c4168 items=0 ppid=2572 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:29.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834336333666637356464343638313263643134303837343838313732 Oct 2 19:54:29.836000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:54:29.836000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { perfmon } for pid=2846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit[2846]: AVC avc: denied { bpf } for pid=2846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:29.836000 audit: BPF prog-id=125 op=LOAD Oct 2 19:54:29.836000 audit[2846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0003c4578 items=0 ppid=2572 pid=2846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:29.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834336333666637356464343638313263643134303837343838313732 Oct 2 19:54:29.916000 audit[2856]: AVC avc: denied { map_create } for pid=2856 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c142,c278 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c142,c278 tclass=bpf permissive=0 Oct 2 19:54:29.916000 audit[2856]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0004e77d0 a2=48 a3=0 items=0 ppid=2572 pid=2856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c142,c278 key=(null) Oct 2 19:54:29.916000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:54:30.180911 kubelet[2414]: E1002 19:54:30.180007 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:30.197222 kubelet[2414]: I1002 19:54:30.197112 2414 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-xzzwv" podStartSLOduration=1.944658364 podCreationTimestamp="2023-10-02 19:54:14 +0000 UTC" firstStartedPulling="2023-10-02 19:54:15.447389327 +0000 UTC m=+12.500647986" lastFinishedPulling="2023-10-02 19:54:29.699784686 +0000 UTC m=+26.753043245" observedRunningTime="2023-10-02 19:54:30.196603322 +0000 UTC m=+27.249861881" watchObservedRunningTime="2023-10-02 19:54:30.197053623 +0000 UTC m=+27.250312182" Oct 2 19:54:31.035605 kubelet[2414]: W1002 19:54:31.035543 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb.scope WatchSource:0}: container "661d3854b486d609830cb81bfde7e7f080774e3b1d333a8e25becf0ecb3b08eb" in namespace "k8s.io": not found Oct 2 19:54:34.143868 kubelet[2414]: W1002 19:54:34.143822 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12.scope WatchSource:0}: task ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12 not found: not found Oct 2 19:54:41.081906 env[1306]: time="2023-10-02T19:54:41.081844782Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:54:41.109705 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2549869044.mount: Deactivated successfully. Oct 2 19:54:41.130875 env[1306]: time="2023-10-02T19:54:41.130831118Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" Oct 2 19:54:41.131672 env[1306]: time="2023-10-02T19:54:41.131621620Z" level=info msg="StartContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" Oct 2 19:54:41.159329 systemd[1]: Started cri-containerd-675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f.scope. Oct 2 19:54:41.170950 systemd[1]: cri-containerd-675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f.scope: Deactivated successfully. Oct 2 19:54:41.684529 env[1306]: time="2023-10-02T19:54:41.684455757Z" level=info msg="shim disconnected" id=675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f Oct 2 19:54:41.684529 env[1306]: time="2023-10-02T19:54:41.684528257Z" level=warning msg="cleaning up after shim disconnected" id=675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f namespace=k8s.io Oct 2 19:54:41.684529 env[1306]: time="2023-10-02T19:54:41.684542457Z" level=info msg="cleaning up dead shim" Oct 2 19:54:41.693782 env[1306]: time="2023-10-02T19:54:41.693734683Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:54:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2897 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:54:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:54:41.694082 env[1306]: time="2023-10-02T19:54:41.694019984Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 19:54:41.695729 env[1306]: time="2023-10-02T19:54:41.695684888Z" level=error msg="Failed to pipe stdout of container \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" error="reading from a closed fifo" Oct 2 19:54:41.697718 env[1306]: time="2023-10-02T19:54:41.697676394Z" level=error msg="Failed to pipe stderr of container \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" error="reading from a closed fifo" Oct 2 19:54:41.702076 env[1306]: time="2023-10-02T19:54:41.701974006Z" level=error msg="StartContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:54:41.702239 kubelet[2414]: E1002 19:54:41.702213 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f" Oct 2 19:54:41.702688 kubelet[2414]: E1002 19:54:41.702352 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:54:41.702688 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:54:41.702688 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:54:41.702688 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:54:41.702688 kubelet[2414]: E1002 19:54:41.702407 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:42.105983 systemd[1]: run-containerd-runc-k8s.io-675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f-runc.QOGFYi.mount: Deactivated successfully. Oct 2 19:54:42.106176 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f-rootfs.mount: Deactivated successfully. Oct 2 19:54:42.202134 kubelet[2414]: I1002 19:54:42.202101 2414 scope.go:115] "RemoveContainer" containerID="ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12" Oct 2 19:54:42.202772 kubelet[2414]: I1002 19:54:42.202748 2414 scope.go:115] "RemoveContainer" containerID="ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12" Oct 2 19:54:42.204406 env[1306]: time="2023-10-02T19:54:42.204361098Z" level=info msg="RemoveContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" Oct 2 19:54:42.205284 env[1306]: time="2023-10-02T19:54:42.205249000Z" level=info msg="RemoveContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\"" Oct 2 19:54:42.205450 env[1306]: time="2023-10-02T19:54:42.205411201Z" level=error msg="RemoveContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\" failed" error="failed to set removing state for container \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\": container is already in removing state" Oct 2 19:54:42.205716 kubelet[2414]: E1002 19:54:42.205690 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\": container is already in removing state" containerID="ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12" Oct 2 19:54:42.205813 kubelet[2414]: E1002 19:54:42.205726 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12": container is already in removing state; Skipping pod "cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)" Oct 2 19:54:42.206045 kubelet[2414]: E1002 19:54:42.206013 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:42.218820 env[1306]: time="2023-10-02T19:54:42.218787038Z" level=info msg="RemoveContainer for \"ed1f07f9d7c696ac0b33dea333bec639228596816b5c39a513f4f7363a238b12\" returns successfully" Oct 2 19:54:44.790347 kubelet[2414]: W1002 19:54:44.790297 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f.scope WatchSource:0}: task 675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f not found: not found Oct 2 19:54:57.079008 kubelet[2414]: E1002 19:54:57.078901 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:54:57.849000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.854348 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:54:57.854463 kernel: audit: type=1400 audit(1696276497.849:1087): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.849000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.885648 kernel: audit: type=1400 audit(1696276497.849:1088): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:57.885753 kernel: audit: type=1300 audit(1696276497.849:1087): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012b8580 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:57.849000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012b8580 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:57.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.926598 kernel: audit: type=1327 audit(1696276497.849:1087): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.926717 kernel: audit: type=1300 audit(1696276497.849:1088): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00130c8a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:57.849000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00130c8a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:54:57.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.966713 kernel: audit: type=1327 audit(1696276497.849:1088): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.782000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.782000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.815525 kernel: audit: type=1400 audit(1696276498.782:1089): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.815608 kernel: audit: type=1400 audit(1696276498.782:1090): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.815643 kernel: audit: type=1400 audit(1696276498.783:1091): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.783000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.783000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008342600 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.853477 kernel: audit: type=1300 audit(1696276498.783:1091): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008342600 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.783000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:58.782000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c008975980 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:58.782000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0083425a0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.782000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008342780 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0083428a0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:54:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008e30c40 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:54:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:09.082145 env[1306]: time="2023-10-02T19:55:09.082094262Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:55:09.106197 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount693239654.mount: Deactivated successfully. Oct 2 19:55:09.122063 env[1306]: time="2023-10-02T19:55:09.122016159Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" Oct 2 19:55:09.122610 env[1306]: time="2023-10-02T19:55:09.122577369Z" level=info msg="StartContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" Oct 2 19:55:09.146248 systemd[1]: Started cri-containerd-c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8.scope. Oct 2 19:55:09.157722 systemd[1]: cri-containerd-c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8.scope: Deactivated successfully. Oct 2 19:55:09.177829 env[1306]: time="2023-10-02T19:55:09.177773634Z" level=info msg="shim disconnected" id=c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8 Oct 2 19:55:09.178118 env[1306]: time="2023-10-02T19:55:09.177828635Z" level=warning msg="cleaning up after shim disconnected" id=c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8 namespace=k8s.io Oct 2 19:55:09.178118 env[1306]: time="2023-10-02T19:55:09.177843235Z" level=info msg="cleaning up dead shim" Oct 2 19:55:09.185603 env[1306]: time="2023-10-02T19:55:09.185559970Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2937 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:09.185904 env[1306]: time="2023-10-02T19:55:09.185843675Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:55:09.187987 env[1306]: time="2023-10-02T19:55:09.187943011Z" level=error msg="Failed to pipe stdout of container \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" error="reading from a closed fifo" Oct 2 19:55:09.188787 env[1306]: time="2023-10-02T19:55:09.188740125Z" level=error msg="Failed to pipe stderr of container \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" error="reading from a closed fifo" Oct 2 19:55:09.193045 env[1306]: time="2023-10-02T19:55:09.193001800Z" level=error msg="StartContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:09.193236 kubelet[2414]: E1002 19:55:09.193214 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8" Oct 2 19:55:09.193601 kubelet[2414]: E1002 19:55:09.193349 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:09.193601 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:09.193601 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:55:09.193601 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:09.193601 kubelet[2414]: E1002 19:55:09.193404 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:55:09.252755 kubelet[2414]: I1002 19:55:09.252715 2414 scope.go:115] "RemoveContainer" containerID="675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f" Oct 2 19:55:09.253203 kubelet[2414]: I1002 19:55:09.253169 2414 scope.go:115] "RemoveContainer" containerID="675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f" Oct 2 19:55:09.256815 env[1306]: time="2023-10-02T19:55:09.256770114Z" level=info msg="RemoveContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" Oct 2 19:55:09.262657 env[1306]: time="2023-10-02T19:55:09.259067254Z" level=info msg="RemoveContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\"" Oct 2 19:55:09.262657 env[1306]: time="2023-10-02T19:55:09.259181556Z" level=error msg="RemoveContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\" failed" error="failed to set removing state for container \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\": container is already in removing state" Oct 2 19:55:09.262843 kubelet[2414]: E1002 19:55:09.259395 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\": container is already in removing state" containerID="675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f" Oct 2 19:55:09.262843 kubelet[2414]: I1002 19:55:09.259444 2414 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f} err="rpc error: code = Unknown desc = failed to set removing state for container \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\": container is already in removing state" Oct 2 19:55:09.268590 env[1306]: time="2023-10-02T19:55:09.268559620Z" level=info msg="RemoveContainer for \"675b8d1f8281048bbd7118a046b70b39dd7d619c3511d1aafae2e545b76cba3f\" returns successfully" Oct 2 19:55:09.272215 kubelet[2414]: E1002 19:55:09.269686 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:55:10.103132 systemd[1]: run-containerd-runc-k8s.io-c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8-runc.emtdeQ.mount: Deactivated successfully. Oct 2 19:55:10.103258 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8-rootfs.mount: Deactivated successfully. Oct 2 19:55:11.890000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.896056 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:55:11.896178 kernel: audit: type=1400 audit(1696276511.890:1096): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.890000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.926942 kernel: audit: type=1400 audit(1696276511.890:1095): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.927038 kernel: audit: type=1300 audit(1696276511.890:1096): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001349be0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001349be0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:11.890000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.981378 kernel: audit: type=1327 audit(1696276511.890:1096): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:11.981471 kernel: audit: type=1400 audit(1696276511.890:1097): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.981738 kernel: audit: type=1300 audit(1696276511.890:1097): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001349d00 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001349d00 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:12.017763 kernel: audit: type=1327 audit(1696276511.890:1097): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:12.017890 kernel: audit: type=1300 audit(1696276511.890:1095): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012b9900 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012b9900 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.890000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:12.054405 kernel: audit: type=1327 audit(1696276511.890:1095): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:12.054523 kernel: audit: type=1400 audit(1696276511.894:1098): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.894000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:11.894000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0012b9980 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:11.894000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:12.283302 kubelet[2414]: W1002 19:55:12.283165 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8.scope WatchSource:0}: task c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8 not found: not found Oct 2 19:55:24.079373 kubelet[2414]: E1002 19:55:24.079317 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:55:38.078370 kubelet[2414]: E1002 19:55:38.078325 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:55:49.079531 kubelet[2414]: E1002 19:55:49.079474 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:55:57.850000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.855065 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:55:57.855174 kernel: audit: type=1400 audit(1696276557.850:1100): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.850000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.887023 kernel: audit: type=1400 audit(1696276557.850:1099): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:57.887114 kernel: audit: type=1300 audit(1696276557.850:1099): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00241dac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:57.850000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00241dac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:57.909170 kernel: audit: type=1327 audit(1696276557.850:1099): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.850000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.850000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ef4d80 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:57.946001 kernel: audit: type=1300 audit(1696276557.850:1100): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ef4d80 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:55:57.946119 kernel: audit: type=1327 audit(1696276557.850:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:57.850000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:58.784000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.785000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.816556 kernel: audit: type=1400 audit(1696276558.784:1101): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.816704 kernel: audit: type=1400 audit(1696276558.785:1102): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.816733 kernel: audit: type=1300 audit(1696276558.785:1102): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007d35fc0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.785000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007d35fc0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.852560 kernel: audit: type=1327 audit(1696276558.785:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.785000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.785000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c003c034d0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.784000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004223d40 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c009da88a0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004223da0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:55:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004223e00 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:55:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:03.160039 kubelet[2414]: E1002 19:56:03.159984 2414 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:56:03.184522 kubelet[2414]: E1002 19:56:03.184476 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:04.082192 env[1306]: time="2023-10-02T19:56:04.082135037Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:56:04.104624 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount65869703.mount: Deactivated successfully. Oct 2 19:56:04.121305 env[1306]: time="2023-10-02T19:56:04.121240011Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" Oct 2 19:56:04.122035 env[1306]: time="2023-10-02T19:56:04.122001618Z" level=info msg="StartContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" Oct 2 19:56:04.148890 systemd[1]: Started cri-containerd-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8.scope. Oct 2 19:56:04.158709 systemd[1]: cri-containerd-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8.scope: Deactivated successfully. Oct 2 19:56:04.159030 systemd[1]: Stopped cri-containerd-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8.scope. Oct 2 19:56:04.182170 env[1306]: time="2023-10-02T19:56:04.182112792Z" level=info msg="shim disconnected" id=3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8 Oct 2 19:56:04.182170 env[1306]: time="2023-10-02T19:56:04.182172392Z" level=warning msg="cleaning up after shim disconnected" id=3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8 namespace=k8s.io Oct 2 19:56:04.182461 env[1306]: time="2023-10-02T19:56:04.182184093Z" level=info msg="cleaning up dead shim" Oct 2 19:56:04.190842 env[1306]: time="2023-10-02T19:56:04.190771074Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2984 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:04.191122 env[1306]: time="2023-10-02T19:56:04.191054377Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:56:04.191371 env[1306]: time="2023-10-02T19:56:04.191336580Z" level=error msg="Failed to pipe stderr of container \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" error="reading from a closed fifo" Oct 2 19:56:04.192774 env[1306]: time="2023-10-02T19:56:04.192729493Z" level=error msg="Failed to pipe stdout of container \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" error="reading from a closed fifo" Oct 2 19:56:04.197384 env[1306]: time="2023-10-02T19:56:04.197339537Z" level=error msg="StartContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:04.197663 kubelet[2414]: E1002 19:56:04.197619 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8" Oct 2 19:56:04.198029 kubelet[2414]: E1002 19:56:04.197788 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:04.198029 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:04.198029 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:56:04.198029 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:04.198029 kubelet[2414]: E1002 19:56:04.197836 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:04.359988 kubelet[2414]: I1002 19:56:04.358925 2414 scope.go:115] "RemoveContainer" containerID="c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8" Oct 2 19:56:04.359988 kubelet[2414]: I1002 19:56:04.359368 2414 scope.go:115] "RemoveContainer" containerID="c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8" Oct 2 19:56:04.362782 env[1306]: time="2023-10-02T19:56:04.362741716Z" level=info msg="RemoveContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" Oct 2 19:56:04.363874 env[1306]: time="2023-10-02T19:56:04.363838227Z" level=info msg="RemoveContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\"" Oct 2 19:56:04.364000 env[1306]: time="2023-10-02T19:56:04.363940828Z" level=error msg="RemoveContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\" failed" error="failed to set removing state for container \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\": container is already in removing state" Oct 2 19:56:04.364240 kubelet[2414]: E1002 19:56:04.364157 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\": container is already in removing state" containerID="c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8" Oct 2 19:56:04.364240 kubelet[2414]: E1002 19:56:04.364210 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8": container is already in removing state; Skipping pod "cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)" Oct 2 19:56:04.364696 kubelet[2414]: E1002 19:56:04.364675 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:04.373510 env[1306]: time="2023-10-02T19:56:04.373467519Z" level=info msg="RemoveContainer for \"c868f67f8f15558a2e84a871ec0135b1692a4f0eefe7ec0336ccbec978b91cb8\" returns successfully" Oct 2 19:56:05.102045 systemd[1]: run-containerd-runc-k8s.io-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8-runc.babY5r.mount: Deactivated successfully. Oct 2 19:56:05.102191 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8-rootfs.mount: Deactivated successfully. Oct 2 19:56:07.288332 kubelet[2414]: W1002 19:56:07.288282 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8.scope WatchSource:0}: task 3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8 not found: not found Oct 2 19:56:08.185651 kubelet[2414]: E1002 19:56:08.185609 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:11.891000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.896474 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:56:11.896585 kernel: audit: type=1400 audit(1696276571.891:1108): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.891000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.928675 kernel: audit: type=1400 audit(1696276571.891:1107): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.928797 kernel: audit: type=1300 audit(1696276571.891:1108): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00269aac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.891000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00269aac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:11.965769 kernel: audit: type=1327 audit(1696276571.891:1108): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:11.965879 kernel: audit: type=1400 audit(1696276571.893:1109): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.893000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.893000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00269ace0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:12.016845 kernel: audit: type=1300 audit(1696276571.893:1109): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00269ace0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:12.016958 kernel: audit: type=1327 audit(1696276571.893:1109): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:12.016986 kernel: audit: type=1300 audit(1696276571.891:1107): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002646600 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.891000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002646600 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:12.057100 kernel: audit: type=1327 audit(1696276571.891:1107): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:12.057793 kernel: audit: type=1400 audit(1696276571.896:1110): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.896000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:11.896000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002646620 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:11.896000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:13.187422 kubelet[2414]: E1002 19:56:13.187381 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:17.078545 kubelet[2414]: E1002 19:56:17.078490 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:18.188780 kubelet[2414]: E1002 19:56:18.188729 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:23.190357 kubelet[2414]: E1002 19:56:23.190249 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:28.078811 kubelet[2414]: E1002 19:56:28.078763 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:28.192106 kubelet[2414]: E1002 19:56:28.192061 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:31.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.17:22-10.200.12.6:43252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:31.529831 systemd[1]: Started sshd@7-10.200.8.17:22-10.200.12.6:43252.service. Oct 2 19:56:31.535075 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:56:31.535159 kernel: audit: type=1130 audit(1696276591.529:1111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.17:22-10.200.12.6:43252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:32.175000 audit[2999]: USER_ACCT pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.176074 sshd[2999]: Accepted publickey for core from 10.200.12.6 port 43252 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:32.194655 kernel: audit: type=1101 audit(1696276592.175:1112): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.194000 audit[2999]: CRED_ACQ pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.195404 sshd[2999]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:32.201199 systemd-logind[1289]: New session 10 of user core. Oct 2 19:56:32.201910 systemd[1]: Started session-10.scope. Oct 2 19:56:32.220902 kernel: audit: type=1103 audit(1696276592.194:1113): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.221007 kernel: audit: type=1006 audit(1696276592.194:1114): pid=2999 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:32.221039 kernel: audit: type=1300 audit(1696276592.194:1114): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcffd05c20 a2=3 a3=0 items=0 ppid=1 pid=2999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:32.194000 audit[2999]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcffd05c20 a2=3 a3=0 items=0 ppid=1 pid=2999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:32.246254 kernel: audit: type=1327 audit(1696276592.194:1114): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:32.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:32.206000 audit[2999]: USER_START pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.208000 audit[3001]: CRED_ACQ pid=3001 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.284192 kernel: audit: type=1105 audit(1696276592.206:1115): pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.284261 kernel: audit: type=1103 audit(1696276592.208:1116): pid=3001 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.705813 sshd[2999]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:32.706000 audit[2999]: USER_END pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.709366 systemd[1]: sshd@7-10.200.8.17:22-10.200.12.6:43252.service: Deactivated successfully. Oct 2 19:56:32.710158 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:32.707000 audit[2999]: CRED_DISP pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.711510 systemd-logind[1289]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:32.712349 systemd-logind[1289]: Removed session 10. Oct 2 19:56:32.740384 kernel: audit: type=1106 audit(1696276592.706:1117): pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.740567 kernel: audit: type=1104 audit(1696276592.707:1118): pid=2999 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:32.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.17:22-10.200.12.6:43252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:33.193196 kubelet[2414]: E1002 19:56:33.193159 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:38.194536 kubelet[2414]: E1002 19:56:38.194493 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:42.079042 kubelet[2414]: E1002 19:56:42.078986 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:42.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.17:22-10.200.12.6:48086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:42.813301 systemd[1]: Started sshd@8-10.200.8.17:22-10.200.12.6:48086.service. Oct 2 19:56:42.819143 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:42.819237 kernel: audit: type=1130 audit(1696276602.811:1120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.17:22-10.200.12.6:48086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:43.196478 kubelet[2414]: E1002 19:56:43.196333 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:43.438000 audit[3014]: USER_ACCT pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.458792 kernel: audit: type=1101 audit(1696276603.438:1121): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.458919 sshd[3014]: Accepted publickey for core from 10.200.12.6 port 48086 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:43.457000 audit[3014]: CRED_ACQ pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.459725 sshd[3014]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:43.474452 systemd-logind[1289]: New session 11 of user core. Oct 2 19:56:43.475313 systemd[1]: Started session-11.scope. Oct 2 19:56:43.486442 kernel: audit: type=1103 audit(1696276603.457:1122): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.486543 kernel: audit: type=1006 audit(1696276603.457:1123): pid=3014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:43.486568 kernel: audit: type=1300 audit(1696276603.457:1123): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe959ae4a0 a2=3 a3=0 items=0 ppid=1 pid=3014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:43.457000 audit[3014]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe959ae4a0 a2=3 a3=0 items=0 ppid=1 pid=3014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:43.457000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:43.509206 kernel: audit: type=1327 audit(1696276603.457:1123): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:43.515798 kernel: audit: type=1105 audit(1696276603.476:1124): pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.476000 audit[3014]: USER_START pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.481000 audit[3016]: CRED_ACQ pid=3016 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.543226 kernel: audit: type=1103 audit(1696276603.481:1125): pid=3016 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.937086 sshd[3014]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:43.937000 audit[3014]: USER_END pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.940888 systemd[1]: sshd@8-10.200.8.17:22-10.200.12.6:48086.service: Deactivated successfully. Oct 2 19:56:43.941759 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:43.943253 systemd-logind[1289]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:43.944242 systemd-logind[1289]: Removed session 11. Oct 2 19:56:43.937000 audit[3014]: CRED_DISP pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.971899 kernel: audit: type=1106 audit(1696276603.937:1126): pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.972020 kernel: audit: type=1104 audit(1696276603.937:1127): pid=3014 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:43.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.17:22-10.200.12.6:48086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:48.198018 kubelet[2414]: E1002 19:56:48.197970 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:53.199766 kubelet[2414]: E1002 19:56:53.199714 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:54.044811 systemd[1]: Started sshd@9-10.200.8.17:22-10.200.12.6:59212.service. Oct 2 19:56:54.067457 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:54.067584 kernel: audit: type=1130 audit(1696276614.044:1129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.17:22-10.200.12.6:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:54.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.17:22-10.200.12.6:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:54.671000 audit[3030]: USER_ACCT pid=3030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.675245 sshd[3030]: Accepted publickey for core from 10.200.12.6 port 59212 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:56:54.690000 audit[3030]: CRED_ACQ pid=3030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.692385 sshd[3030]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:54.704052 systemd[1]: Started session-12.scope. Oct 2 19:56:54.705651 systemd-logind[1289]: New session 12 of user core. Oct 2 19:56:54.708675 kernel: audit: type=1101 audit(1696276614.671:1130): pid=3030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.708751 kernel: audit: type=1103 audit(1696276614.690:1131): pid=3030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.720074 kernel: audit: type=1006 audit(1696276614.690:1132): pid=3030 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:56:54.690000 audit[3030]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b036780 a2=3 a3=0 items=0 ppid=1 pid=3030 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:54.720649 kernel: audit: type=1300 audit(1696276614.690:1132): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b036780 a2=3 a3=0 items=0 ppid=1 pid=3030 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:54.690000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:54.742366 kernel: audit: type=1327 audit(1696276614.690:1132): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:54.742431 kernel: audit: type=1105 audit(1696276614.710:1133): pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.710000 audit[3030]: USER_START pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.717000 audit[3034]: CRED_ACQ pid=3034 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:54.760698 kernel: audit: type=1103 audit(1696276614.717:1134): pid=3034 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:55.175281 sshd[3030]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:55.175000 audit[3030]: USER_END pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:55.178903 systemd[1]: sshd@9-10.200.8.17:22-10.200.12.6:59212.service: Deactivated successfully. Oct 2 19:56:55.179858 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:55.182004 systemd-logind[1289]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:55.183160 systemd-logind[1289]: Removed session 12. Oct 2 19:56:55.175000 audit[3030]: CRED_DISP pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:55.196694 kernel: audit: type=1106 audit(1696276615.175:1135): pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:55.196734 kernel: audit: type=1104 audit(1696276615.175:1136): pid=3030 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:56:55.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.17:22-10.200.12.6:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:56.079042 kubelet[2414]: E1002 19:56:56.078993 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:56:57.850000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.850000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:57.850000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001430720 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:57.850000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:57.850000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e40b00 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:56:57.850000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.201520 kubelet[2414]: E1002 19:56:58.201391 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:58.785000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.785000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00e1f0240 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:58.785000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.785000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00ba45650 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:58.785000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.785000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00bd44e10 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.785000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00ba456e0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00ba45710 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:56:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00e087aa0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:56:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:03.203213 kubelet[2414]: E1002 19:57:03.203171 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:05.285653 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:57:05.285809 kernel: audit: type=1130 audit(1696276625.278:1146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.17:22-10.200.12.6:42358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:05.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.17:22-10.200.12.6:42358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:05.279981 systemd[1]: Started sshd@10-10.200.8.17:22-10.200.12.6:42358.service. Oct 2 19:57:06.226000 audit[3048]: USER_ACCT pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.227962 sshd[3048]: Accepted publickey for core from 10.200.12.6 port 42358 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:06.244000 audit[3048]: CRED_ACQ pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.247047 sshd[3048]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:06.252774 systemd[1]: Started session-13.scope. Oct 2 19:57:06.254340 systemd-logind[1289]: New session 13 of user core. Oct 2 19:57:06.263004 kernel: audit: type=1101 audit(1696276626.226:1147): pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.263101 kernel: audit: type=1103 audit(1696276626.244:1148): pid=3048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.263139 kernel: audit: type=1006 audit(1696276626.245:1149): pid=3048 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:57:06.245000 audit[3048]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc79981a90 a2=3 a3=0 items=0 ppid=1 pid=3048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:06.272727 kernel: audit: type=1300 audit(1696276626.245:1149): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc79981a90 a2=3 a3=0 items=0 ppid=1 pid=3048 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:06.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:06.294613 kernel: audit: type=1327 audit(1696276626.245:1149): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:06.294706 kernel: audit: type=1105 audit(1696276626.257:1150): pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.257000 audit[3048]: USER_START pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.260000 audit[3050]: CRED_ACQ pid=3050 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.327574 kernel: audit: type=1103 audit(1696276626.260:1151): pid=3050 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.723379 sshd[3048]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:06.723000 audit[3048]: USER_END pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.727108 systemd[1]: sshd@10-10.200.8.17:22-10.200.12.6:42358.service: Deactivated successfully. Oct 2 19:57:06.727928 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:57:06.729298 systemd-logind[1289]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:57:06.730231 systemd-logind[1289]: Removed session 13. Oct 2 19:57:06.723000 audit[3048]: CRED_DISP pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.760776 kernel: audit: type=1106 audit(1696276626.723:1152): pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.760886 kernel: audit: type=1104 audit(1696276626.723:1153): pid=3048 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:06.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.17:22-10.200.12.6:42358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:08.204958 kubelet[2414]: E1002 19:57:08.204915 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:09.079013 kubelet[2414]: E1002 19:57:09.078970 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:57:11.892000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.897828 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:11.897938 kernel: audit: type=1400 audit(1696276631.892:1155): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.892000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d35060 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.934198 kernel: audit: type=1300 audit(1696276631.892:1155): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d35060 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.934294 kernel: audit: type=1327 audit(1696276631.892:1155): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:11.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:11.893000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.893000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81460 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.969651 kernel: audit: type=1400 audit(1696276631.893:1156): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.969696 kernel: audit: type=1300 audit(1696276631.893:1156): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81460 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.989848 kernel: audit: type=1327 audit(1696276631.893:1156): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:11.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:11.893000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:12.021784 kernel: audit: type=1400 audit(1696276631.893:1157): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:12.021916 kernel: audit: type=1300 audit(1696276631.893:1157): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d354a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.893000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d354a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:12.057885 kernel: audit: type=1327 audit(1696276631.893:1157): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:12.057987 kernel: audit: type=1400 audit(1696276631.896:1158): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.896000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:11.896000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e814a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:11.896000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:13.206773 kubelet[2414]: E1002 19:57:13.206725 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:16.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.17:22-10.200.12.6:55142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:16.831421 systemd[1]: Started sshd@11-10.200.8.17:22-10.200.12.6:55142.service. Oct 2 19:57:17.466743 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 19:57:17.466865 kernel: audit: type=1101 audit(1696276637.459:1160): pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.459000 audit[3063]: USER_ACCT pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.466328 sshd[3063]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:17.467234 sshd[3063]: Accepted publickey for core from 10.200.12.6 port 55142 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:17.472199 systemd[1]: Started session-14.scope. Oct 2 19:57:17.473606 systemd-logind[1289]: New session 14 of user core. Oct 2 19:57:17.464000 audit[3063]: CRED_ACQ pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.498088 kernel: audit: type=1103 audit(1696276637.464:1161): pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.498161 kernel: audit: type=1006 audit(1696276637.464:1162): pid=3063 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:57:17.464000 audit[3063]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4fa1fba0 a2=3 a3=0 items=0 ppid=1 pid=3063 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:17.523819 kernel: audit: type=1300 audit(1696276637.464:1162): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4fa1fba0 a2=3 a3=0 items=0 ppid=1 pid=3063 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:17.464000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:17.524656 kernel: audit: type=1327 audit(1696276637.464:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:17.477000 audit[3063]: USER_START pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.554265 kernel: audit: type=1105 audit(1696276637.477:1163): pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.479000 audit[3065]: CRED_ACQ pid=3065 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:17.568523 kernel: audit: type=1103 audit(1696276637.479:1164): pid=3065 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:18.134820 sshd[3063]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:18.135000 audit[3063]: USER_END pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:18.138870 systemd[1]: sshd@11-10.200.8.17:22-10.200.12.6:55142.service: Deactivated successfully. Oct 2 19:57:18.139713 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:57:18.141044 systemd-logind[1289]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:57:18.141984 systemd-logind[1289]: Removed session 14. Oct 2 19:57:18.135000 audit[3063]: CRED_DISP pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:18.177401 kernel: audit: type=1106 audit(1696276638.135:1165): pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:18.177489 kernel: audit: type=1104 audit(1696276638.135:1166): pid=3063 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:18.177516 kernel: audit: type=1131 audit(1696276638.137:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.17:22-10.200.12.6:55142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:18.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.17:22-10.200.12.6:55142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:18.207681 kubelet[2414]: E1002 19:57:18.207652 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:23.080123 kubelet[2414]: E1002 19:57:23.080075 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:57:23.208822 kubelet[2414]: E1002 19:57:23.208779 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:28.210188 kubelet[2414]: E1002 19:57:28.210133 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:28.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.17:22-10.200.12.6:35192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:28.242445 systemd[1]: Started sshd@12-10.200.8.17:22-10.200.12.6:35192.service. Oct 2 19:57:28.259676 kernel: audit: type=1130 audit(1696276648.241:1168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.17:22-10.200.12.6:35192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:28.898027 kernel: audit: type=1101 audit(1696276648.876:1169): pid=3077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.876000 audit[3077]: USER_ACCT pid=3077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.898294 sshd[3077]: Accepted publickey for core from 10.200.12.6 port 35192 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:28.898187 sshd[3077]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:28.896000 audit[3077]: CRED_ACQ pid=3077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.903403 systemd[1]: Started session-15.scope. Oct 2 19:57:28.904728 systemd-logind[1289]: New session 15 of user core. Oct 2 19:57:28.915702 kernel: audit: type=1103 audit(1696276648.896:1170): pid=3077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.915773 kernel: audit: type=1006 audit(1696276648.896:1171): pid=3077 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:57:28.925048 kernel: audit: type=1300 audit(1696276648.896:1171): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8ff87140 a2=3 a3=0 items=0 ppid=1 pid=3077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:28.896000 audit[3077]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8ff87140 a2=3 a3=0 items=0 ppid=1 pid=3077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:28.896000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:28.941706 kernel: audit: type=1327 audit(1696276648.896:1171): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:28.908000 audit[3077]: USER_START pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.965054 kernel: audit: type=1105 audit(1696276648.908:1172): pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.981006 kernel: audit: type=1103 audit(1696276648.910:1173): pid=3079 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:28.910000 audit[3079]: CRED_ACQ pid=3079 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:29.380280 sshd[3077]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:29.380000 audit[3077]: USER_END pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:29.383860 systemd[1]: sshd@12-10.200.8.17:22-10.200.12.6:35192.service: Deactivated successfully. Oct 2 19:57:29.384820 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:29.386793 systemd-logind[1289]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:29.387932 systemd-logind[1289]: Removed session 15. Oct 2 19:57:29.400649 kernel: audit: type=1106 audit(1696276649.380:1174): pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:29.380000 audit[3077]: CRED_DISP pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:29.415649 kernel: audit: type=1104 audit(1696276649.380:1175): pid=3077 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:29.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.17:22-10.200.12.6:35192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.212377 kubelet[2414]: E1002 19:57:33.212329 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:37.081758 env[1306]: time="2023-10-02T19:57:37.081704835Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:57:37.115454 env[1306]: time="2023-10-02T19:57:37.115405207Z" level=info msg="CreateContainer within sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\"" Oct 2 19:57:37.116029 env[1306]: time="2023-10-02T19:57:37.115997710Z" level=info msg="StartContainer for \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\"" Oct 2 19:57:37.142585 systemd[1]: Started cri-containerd-0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0.scope. Oct 2 19:57:37.151795 systemd[1]: cri-containerd-0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0.scope: Deactivated successfully. Oct 2 19:57:37.152062 systemd[1]: Stopped cri-containerd-0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0.scope. Oct 2 19:57:37.155561 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0-rootfs.mount: Deactivated successfully. Oct 2 19:57:37.177058 env[1306]: time="2023-10-02T19:57:37.177004423Z" level=info msg="shim disconnected" id=0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0 Oct 2 19:57:37.177058 env[1306]: time="2023-10-02T19:57:37.177059623Z" level=warning msg="cleaning up after shim disconnected" id=0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0 namespace=k8s.io Oct 2 19:57:37.177360 env[1306]: time="2023-10-02T19:57:37.177072123Z" level=info msg="cleaning up dead shim" Oct 2 19:57:37.184943 env[1306]: time="2023-10-02T19:57:37.184899663Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:57:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3113 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:57:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:57:37.185229 env[1306]: time="2023-10-02T19:57:37.185166465Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:57:37.185450 env[1306]: time="2023-10-02T19:57:37.185403866Z" level=error msg="Failed to pipe stdout of container \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\"" error="reading from a closed fifo" Oct 2 19:57:37.185623 env[1306]: time="2023-10-02T19:57:37.185583967Z" level=error msg="Failed to pipe stderr of container \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\"" error="reading from a closed fifo" Oct 2 19:57:37.191484 env[1306]: time="2023-10-02T19:57:37.191438397Z" level=error msg="StartContainer for \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:57:37.191803 kubelet[2414]: E1002 19:57:37.191722 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0" Oct 2 19:57:37.192201 kubelet[2414]: E1002 19:57:37.191913 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:57:37.192201 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:57:37.192201 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 19:57:37.192201 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-zjwq4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:57:37.192201 kubelet[2414]: E1002 19:57:37.191986 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:57:37.544690 kubelet[2414]: I1002 19:57:37.544665 2414 scope.go:115] "RemoveContainer" containerID="3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8" Oct 2 19:57:37.545052 kubelet[2414]: I1002 19:57:37.545030 2414 scope.go:115] "RemoveContainer" containerID="3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8" Oct 2 19:57:37.546869 env[1306]: time="2023-10-02T19:57:37.546826918Z" level=info msg="RemoveContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" Oct 2 19:57:37.548178 env[1306]: time="2023-10-02T19:57:37.548146024Z" level=info msg="RemoveContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\"" Oct 2 19:57:37.548444 env[1306]: time="2023-10-02T19:57:37.548401926Z" level=error msg="RemoveContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\" failed" error="failed to set removing state for container \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\": container is already in removing state" Oct 2 19:57:37.549116 kubelet[2414]: E1002 19:57:37.548671 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\": container is already in removing state" containerID="3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8" Oct 2 19:57:37.549116 kubelet[2414]: E1002 19:57:37.548730 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8": container is already in removing state; Skipping pod "cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)" Oct 2 19:57:37.549446 kubelet[2414]: E1002 19:57:37.549081 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:57:37.562864 env[1306]: time="2023-10-02T19:57:37.562823600Z" level=info msg="RemoveContainer for \"3446082731f16da669e454af8d0564a4ce71e0629c9c8af20e749ef615fa02a8\" returns successfully" Oct 2 19:57:38.213624 kubelet[2414]: E1002 19:57:38.213583 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:39.493220 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:39.493363 kernel: audit: type=1130 audit(1696276659.485:1177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.17:22-10.200.12.6:57906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:39.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.17:22-10.200.12.6:57906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:39.486842 systemd[1]: Started sshd@13-10.200.8.17:22-10.200.12.6:57906.service. Oct 2 19:57:40.137000 audit[3126]: USER_ACCT pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.139038 sshd[3126]: Accepted publickey for core from 10.200.12.6 port 57906 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:40.156658 kernel: audit: type=1101 audit(1696276660.137:1178): pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.155000 audit[3126]: CRED_ACQ pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.157235 sshd[3126]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:40.162713 systemd[1]: Started session-16.scope. Oct 2 19:57:40.164106 systemd-logind[1289]: New session 16 of user core. Oct 2 19:57:40.183259 kernel: audit: type=1103 audit(1696276660.155:1179): pid=3126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.183368 kernel: audit: type=1006 audit(1696276660.155:1180): pid=3126 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:40.183395 kernel: audit: type=1300 audit(1696276660.155:1180): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde04b9040 a2=3 a3=0 items=0 ppid=1 pid=3126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:40.155000 audit[3126]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde04b9040 a2=3 a3=0 items=0 ppid=1 pid=3126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:40.199492 kernel: audit: type=1327 audit(1696276660.155:1180): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:40.155000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:40.165000 audit[3126]: USER_START pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.224247 kernel: audit: type=1105 audit(1696276660.165:1181): pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.224338 kernel: audit: type=1103 audit(1696276660.165:1182): pid=3128 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.165000 audit[3128]: CRED_ACQ pid=3128 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.283716 kubelet[2414]: W1002 19:57:40.283656 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice/cri-containerd-0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0.scope WatchSource:0}: task 0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0 not found: not found Oct 2 19:57:40.632256 sshd[3126]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:40.632000 audit[3126]: USER_END pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.636363 systemd[1]: sshd@13-10.200.8.17:22-10.200.12.6:57906.service: Deactivated successfully. Oct 2 19:57:40.637320 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:40.639179 systemd-logind[1289]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:40.640345 systemd-logind[1289]: Removed session 16. Oct 2 19:57:40.632000 audit[3126]: CRED_DISP pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.667581 kernel: audit: type=1106 audit(1696276660.632:1183): pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.667817 kernel: audit: type=1104 audit(1696276660.632:1184): pid=3126 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:40.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.17:22-10.200.12.6:57906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:43.215155 kubelet[2414]: E1002 19:57:43.215112 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:48.216899 kubelet[2414]: E1002 19:57:48.216858 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:49.079081 kubelet[2414]: E1002 19:57:49.079037 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:57:50.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.17:22-10.200.12.6:59308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:50.737723 systemd[1]: Started sshd@14-10.200.8.17:22-10.200.12.6:59308.service. Oct 2 19:57:50.742495 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:50.742570 kernel: audit: type=1130 audit(1696276670.737:1186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.17:22-10.200.12.6:59308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:51.367000 audit[3146]: USER_ACCT pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.368223 sshd[3146]: Accepted publickey for core from 10.200.12.6 port 59308 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:57:51.386926 kernel: audit: type=1101 audit(1696276671.367:1187): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.387031 kernel: audit: type=1103 audit(1696276671.385:1188): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.385000 audit[3146]: CRED_ACQ pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.386658 sshd[3146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:51.392543 systemd[1]: Started session-17.scope. Oct 2 19:57:51.393358 systemd-logind[1289]: New session 17 of user core. Oct 2 19:57:51.413035 kernel: audit: type=1006 audit(1696276671.385:1189): pid=3146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:51.413121 kernel: audit: type=1300 audit(1696276671.385:1189): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8e3e940 a2=3 a3=0 items=0 ppid=1 pid=3146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:51.385000 audit[3146]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8e3e940 a2=3 a3=0 items=0 ppid=1 pid=3146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:51.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:51.436120 kernel: audit: type=1327 audit(1696276671.385:1189): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:51.436238 kernel: audit: type=1105 audit(1696276671.395:1190): pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.395000 audit[3146]: USER_START pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.400000 audit[3148]: CRED_ACQ pid=3148 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.467710 kernel: audit: type=1103 audit(1696276671.400:1191): pid=3148 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.872994 sshd[3146]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:51.874000 audit[3146]: USER_END pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.877223 systemd[1]: sshd@14-10.200.8.17:22-10.200.12.6:59308.service: Deactivated successfully. Oct 2 19:57:51.878095 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:51.879868 systemd-logind[1289]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:51.880835 systemd-logind[1289]: Removed session 17. Oct 2 19:57:51.874000 audit[3146]: CRED_DISP pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.908649 kernel: audit: type=1106 audit(1696276671.874:1192): pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.908728 kernel: audit: type=1104 audit(1696276671.874:1193): pid=3146 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:57:51.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.17:22-10.200.12.6:59308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.219157 kubelet[2414]: E1002 19:57:53.219114 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:57.852000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.856717 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:57.856804 kernel: audit: type=1400 audit(1696276677.852:1195): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.852000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f646c0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:57.894211 kernel: audit: type=1300 audit(1696276677.852:1195): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f646c0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:57.894309 kernel: audit: type=1327 audit(1696276677.852:1195): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.852000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.852000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c5ac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:57.927648 kernel: audit: type=1400 audit(1696276677.852:1196): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:57.927695 kernel: audit: type=1300 audit(1696276677.852:1196): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c5ac0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:57:57.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:57.947657 kernel: audit: type=1327 audit(1696276677.852:1196): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:58.221208 kubelet[2414]: E1002 19:57:58.221081 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.819882 kernel: audit: type=1400 audit(1696276678.786:1197): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.819996 kernel: audit: type=1400 audit(1696276678.786:1198): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.820018 kernel: audit: type=1400 audit(1696276678.786:1199): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0034a0930 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.854662 kernel: audit: type=1300 audit(1696276678.786:1199): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0034a0930 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00ab22c30 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:58.789000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.789000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c0034a1050 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.789000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:58.789000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.789000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c0034a1140 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.789000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:58.790000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.790000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c008594b20 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.790000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:57:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c008594940 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:57:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:01.977845 systemd[1]: Started sshd@15-10.200.8.17:22-10.200.12.6:54490.service. Oct 2 19:58:01.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.17:22-10.200.12.6:54490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:02.601000 audit[3160]: USER_ACCT pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:02.602166 sshd[3160]: Accepted publickey for core from 10.200.12.6 port 54490 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:02.602000 audit[3160]: CRED_ACQ pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:02.602000 audit[3160]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff523c440 a2=3 a3=0 items=0 ppid=1 pid=3160 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:02.602000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:02.603960 sshd[3160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:02.609363 systemd[1]: Started session-18.scope. Oct 2 19:58:02.609841 systemd-logind[1289]: New session 18 of user core. Oct 2 19:58:02.613000 audit[3160]: USER_START pid=3160 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:02.615000 audit[3162]: CRED_ACQ pid=3162 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:03.094844 sshd[3160]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:03.096000 audit[3160]: USER_END pid=3160 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:03.099494 systemd[1]: sshd@15-10.200.8.17:22-10.200.12.6:54490.service: Deactivated successfully. Oct 2 19:58:03.100607 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:58:03.104452 systemd-logind[1289]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:58:03.105408 systemd-logind[1289]: Removed session 18. Oct 2 19:58:03.107197 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 19:58:03.107263 kernel: audit: type=1106 audit(1696276683.096:1209): pid=3160 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:03.096000 audit[3160]: CRED_DISP pid=3160 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:03.139601 kernel: audit: type=1104 audit(1696276683.096:1210): pid=3160 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:03.139732 kernel: audit: type=1131 audit(1696276683.098:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.17:22-10.200.12.6:54490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:03.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.17:22-10.200.12.6:54490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:03.222863 kubelet[2414]: E1002 19:58:03.222809 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:04.079030 kubelet[2414]: E1002 19:58:04.078988 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:58:08.224442 kubelet[2414]: E1002 19:58:08.224388 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:11.893000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.893000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269aba0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:11.931537 kernel: audit: type=1400 audit(1696276691.893:1212): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.931695 kernel: audit: type=1300 audit(1696276691.893:1212): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269aba0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:11.931733 kernel: audit: type=1327 audit(1696276691.893:1212): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:11.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:11.895000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.963407 kernel: audit: type=1400 audit(1696276691.895:1213): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.895000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c5fa0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:11.895000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:12.001139 kernel: audit: type=1300 audit(1696276691.895:1213): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c5fa0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:12.001248 kernel: audit: type=1327 audit(1696276691.895:1213): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:12.001279 kernel: audit: type=1400 audit(1696276691.895:1214): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.895000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.895000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269acc0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:12.017983 kernel: audit: type=1300 audit(1696276691.895:1214): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269acc0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:11.895000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:12.065162 kernel: audit: type=1327 audit(1696276691.895:1214): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:12.065306 kernel: audit: type=1400 audit(1696276691.898:1215): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.898000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:11.898000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023c5fc0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:11.898000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:13.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.17:22-10.200.12.6:45700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:13.200765 systemd[1]: Started sshd@16-10.200.8.17:22-10.200.12.6:45700.service. Oct 2 19:58:13.225613 kubelet[2414]: E1002 19:58:13.225582 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:13.836000 audit[3176]: USER_ACCT pid=3176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:13.837672 sshd[3176]: Accepted publickey for core from 10.200.12.6 port 45700 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:13.838000 audit[3176]: CRED_ACQ pid=3176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:13.838000 audit[3176]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd34e12f60 a2=3 a3=0 items=0 ppid=1 pid=3176 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:13.838000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:13.839347 sshd[3176]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:13.844501 systemd-logind[1289]: New session 19 of user core. Oct 2 19:58:13.845460 systemd[1]: Started session-19.scope. Oct 2 19:58:13.850000 audit[3176]: USER_START pid=3176 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:13.852000 audit[3178]: CRED_ACQ pid=3178 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:14.332851 sshd[3176]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:14.333000 audit[3176]: USER_END pid=3176 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:14.334000 audit[3176]: CRED_DISP pid=3176 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:14.336558 systemd[1]: sshd@16-10.200.8.17:22-10.200.12.6:45700.service: Deactivated successfully. Oct 2 19:58:14.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.17:22-10.200.12.6:45700 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:14.337840 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:58:14.338547 systemd-logind[1289]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:58:14.339405 systemd-logind[1289]: Removed session 19. Oct 2 19:58:14.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.17:22-10.200.12.6:45706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:14.438688 systemd[1]: Started sshd@17-10.200.8.17:22-10.200.12.6:45706.service. Oct 2 19:58:15.067000 audit[3191]: USER_ACCT pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:15.068168 sshd[3191]: Accepted publickey for core from 10.200.12.6 port 45706 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:15.068000 audit[3191]: CRED_ACQ pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:15.068000 audit[3191]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2da96020 a2=3 a3=0 items=0 ppid=1 pid=3191 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:15.068000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:15.069894 sshd[3191]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:15.075335 systemd[1]: Started session-20.scope. Oct 2 19:58:15.075810 systemd-logind[1289]: New session 20 of user core. Oct 2 19:58:15.081000 audit[3191]: USER_START pid=3191 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:15.083231 kubelet[2414]: E1002 19:58:15.082400 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:58:15.083000 audit[3193]: CRED_ACQ pid=3193 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.214864 sshd[3191]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:16.216000 audit[3191]: USER_END pid=3191 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.216000 audit[3191]: CRED_DISP pid=3191 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.218774 systemd[1]: sshd@17-10.200.8.17:22-10.200.12.6:45706.service: Deactivated successfully. Oct 2 19:58:16.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.17:22-10.200.12.6:45706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:16.219870 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:58:16.220874 systemd-logind[1289]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:58:16.221950 systemd-logind[1289]: Removed session 20. Oct 2 19:58:16.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.17:22-10.200.12.6:45716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:16.321936 systemd[1]: Started sshd@18-10.200.8.17:22-10.200.12.6:45716.service. Oct 2 19:58:16.953270 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:58:16.953529 kernel: audit: type=1101 audit(1696276696.945:1235): pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.945000 audit[3203]: USER_ACCT pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.947693 sshd[3203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:16.953893 sshd[3203]: Accepted publickey for core from 10.200.12.6 port 45716 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:16.957855 systemd-logind[1289]: New session 21 of user core. Oct 2 19:58:16.958494 systemd[1]: Started session-21.scope. Oct 2 19:58:16.946000 audit[3203]: CRED_ACQ pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.984026 kernel: audit: type=1103 audit(1696276696.946:1236): pid=3203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.984113 kernel: audit: type=1006 audit(1696276696.946:1237): pid=3203 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:58:16.946000 audit[3203]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf09209d0 a2=3 a3=0 items=0 ppid=1 pid=3203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:17.010232 kernel: audit: type=1300 audit(1696276696.946:1237): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf09209d0 a2=3 a3=0 items=0 ppid=1 pid=3203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:17.010294 kernel: audit: type=1327 audit(1696276696.946:1237): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:16.946000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:16.963000 audit[3203]: USER_START pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.035902 kernel: audit: type=1105 audit(1696276696.963:1238): pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.036001 kernel: audit: type=1103 audit(1696276696.965:1239): pid=3205 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:16.965000 audit[3205]: CRED_ACQ pid=3205 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.450420 sshd[3203]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:17.451000 audit[3203]: USER_END pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.454332 systemd-logind[1289]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:58:17.455934 systemd[1]: sshd@18-10.200.8.17:22-10.200.12.6:45716.service: Deactivated successfully. Oct 2 19:58:17.456725 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:58:17.458210 systemd-logind[1289]: Removed session 21. Oct 2 19:58:17.451000 audit[3203]: CRED_DISP pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.485613 kernel: audit: type=1106 audit(1696276697.451:1240): pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.486045 kernel: audit: type=1104 audit(1696276697.451:1241): pid=3203 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:17.486076 kernel: audit: type=1131 audit(1696276697.455:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.17:22-10.200.12.6:45716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:17.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.17:22-10.200.12.6:45716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:18.227311 kubelet[2414]: E1002 19:58:18.227277 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:23.229129 kubelet[2414]: E1002 19:58:23.229075 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:27.640445 systemd[1]: Started sshd@19-10.200.8.17:22-10.200.12.6:45614.service. Oct 2 19:58:27.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.17:22-10.200.12.6:45614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:27.658720 kernel: audit: type=1130 audit(1696276707.640:1243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.17:22-10.200.12.6:45614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:28.230299 kubelet[2414]: E1002 19:58:28.230258 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:28.370000 audit[3215]: USER_ACCT pid=3215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.389657 kernel: audit: type=1101 audit(1696276708.370:1244): pid=3215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.389723 sshd[3215]: Accepted publickey for core from 10.200.12.6 port 45614 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:28.390075 sshd[3215]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:28.388000 audit[3215]: CRED_ACQ pid=3215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.396181 systemd[1]: Started session-22.scope. Oct 2 19:58:28.397292 systemd-logind[1289]: New session 22 of user core. Oct 2 19:58:28.416434 kernel: audit: type=1103 audit(1696276708.388:1245): pid=3215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.416514 kernel: audit: type=1006 audit(1696276708.388:1246): pid=3215 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:58:28.416537 kernel: audit: type=1300 audit(1696276708.388:1246): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbcafc9f0 a2=3 a3=0 items=0 ppid=1 pid=3215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:28.388000 audit[3215]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbcafc9f0 a2=3 a3=0 items=0 ppid=1 pid=3215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:28.388000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:28.438450 kernel: audit: type=1327 audit(1696276708.388:1246): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:28.438519 kernel: audit: type=1105 audit(1696276708.401:1247): pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.401000 audit[3215]: USER_START pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.460152 kernel: audit: type=1103 audit(1696276708.404:1248): pid=3217 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.404000 audit[3217]: CRED_ACQ pid=3217 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.888184 sshd[3215]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:28.889000 audit[3215]: USER_END pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.892148 systemd[1]: sshd@19-10.200.8.17:22-10.200.12.6:45614.service: Deactivated successfully. Oct 2 19:58:28.892947 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:28.894532 systemd-logind[1289]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:28.895585 systemd-logind[1289]: Removed session 22. Oct 2 19:58:28.889000 audit[3215]: CRED_DISP pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.922976 kernel: audit: type=1106 audit(1696276708.889:1249): pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.923067 kernel: audit: type=1104 audit(1696276708.889:1250): pid=3215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:28.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.17:22-10.200.12.6:45614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:30.078909 kubelet[2414]: E1002 19:58:30.078855 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:58:33.232040 kubelet[2414]: E1002 19:58:33.231993 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:38.232957 kubelet[2414]: E1002 19:58:38.232910 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:38.996085 systemd[1]: Started sshd@20-10.200.8.17:22-10.200.12.6:51054.service. Oct 2 19:58:38.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.17:22-10.200.12.6:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:39.003797 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:39.003877 kernel: audit: type=1130 audit(1696276718.995:1252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.17:22-10.200.12.6:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:39.632000 audit[3227]: USER_ACCT pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.633155 sshd[3227]: Accepted publickey for core from 10.200.12.6 port 51054 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:39.650000 audit[3227]: CRED_ACQ pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.652105 sshd[3227]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:39.657579 systemd[1]: Started session-23.scope. Oct 2 19:58:39.658672 systemd-logind[1289]: New session 23 of user core. Oct 2 19:58:39.667761 kernel: audit: type=1101 audit(1696276719.632:1253): pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.667853 kernel: audit: type=1103 audit(1696276719.650:1254): pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.677596 kernel: audit: type=1006 audit(1696276719.651:1255): pid=3227 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:58:39.677771 kernel: audit: type=1300 audit(1696276719.651:1255): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56d7c140 a2=3 a3=0 items=0 ppid=1 pid=3227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:39.651000 audit[3227]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56d7c140 a2=3 a3=0 items=0 ppid=1 pid=3227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:39.693215 kernel: audit: type=1327 audit(1696276719.651:1255): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:39.651000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:39.664000 audit[3227]: USER_START pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.699723 kernel: audit: type=1105 audit(1696276719.664:1256): pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.716743 kernel: audit: type=1103 audit(1696276719.666:1257): pid=3229 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:39.666000 audit[3229]: CRED_ACQ pid=3229 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:40.135407 sshd[3227]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:40.136000 audit[3227]: USER_END pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:40.138692 systemd-logind[1289]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:40.140022 systemd[1]: sshd@20-10.200.8.17:22-10.200.12.6:51054.service: Deactivated successfully. Oct 2 19:58:40.140735 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:40.142481 systemd-logind[1289]: Removed session 23. Oct 2 19:58:40.136000 audit[3227]: CRED_DISP pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:40.173042 kernel: audit: type=1106 audit(1696276720.136:1258): pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:40.173119 kernel: audit: type=1104 audit(1696276720.136:1259): pid=3227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:40.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.17:22-10.200.12.6:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:42.078927 kubelet[2414]: E1002 19:58:42.078872 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:58:43.234610 kubelet[2414]: E1002 19:58:43.234571 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:48.236771 kubelet[2414]: E1002 19:58:48.236729 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:50.266801 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:50.266948 kernel: audit: type=1130 audit(1696276730.246:1261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.17:22-10.200.12.6:34112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:50.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.17:22-10.200.12.6:34112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:50.246391 systemd[1]: Started sshd@21-10.200.8.17:22-10.200.12.6:34112.service. Oct 2 19:58:50.876000 audit[3243]: USER_ACCT pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.877185 sshd[3243]: Accepted publickey for core from 10.200.12.6 port 34112 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:58:50.881333 sshd[3243]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:50.895668 kernel: audit: type=1101 audit(1696276730.876:1262): pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.895778 kernel: audit: type=1103 audit(1696276730.880:1263): pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.880000 audit[3243]: CRED_ACQ pid=3243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.900316 systemd[1]: Started session-24.scope. Oct 2 19:58:50.901708 systemd-logind[1289]: New session 24 of user core. Oct 2 19:58:50.920053 kernel: audit: type=1006 audit(1696276730.880:1264): pid=3243 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:50.880000 audit[3243]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfda35620 a2=3 a3=0 items=0 ppid=1 pid=3243 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:50.938026 kernel: audit: type=1300 audit(1696276730.880:1264): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfda35620 a2=3 a3=0 items=0 ppid=1 pid=3243 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:50.880000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:50.938711 kernel: audit: type=1327 audit(1696276730.880:1264): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:50.903000 audit[3243]: USER_START pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.944647 kernel: audit: type=1105 audit(1696276730.903:1265): pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.908000 audit[3245]: CRED_ACQ pid=3245 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:50.976515 kernel: audit: type=1103 audit(1696276730.908:1266): pid=3245 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:51.378495 sshd[3243]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:51.379000 audit[3243]: USER_END pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:51.382274 systemd-logind[1289]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:51.383810 systemd[1]: sshd@21-10.200.8.17:22-10.200.12.6:34112.service: Deactivated successfully. Oct 2 19:58:51.384611 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:51.386308 systemd-logind[1289]: Removed session 24. Oct 2 19:58:51.379000 audit[3243]: CRED_DISP pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:51.413025 kernel: audit: type=1106 audit(1696276731.379:1267): pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:51.413114 kernel: audit: type=1104 audit(1696276731.379:1268): pid=3243 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:58:51.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.17:22-10.200.12.6:34112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:53.238147 kubelet[2414]: E1002 19:58:53.238104 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:57.079302 kubelet[2414]: E1002 19:58:57.079256 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:58:57.852000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.857040 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:57.857143 kernel: audit: type=1400 audit(1696276737.852:1270): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.852000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ddf5c0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:57.892866 kernel: audit: type=1300 audit(1696276737.852:1270): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ddf5c0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:57.892954 kernel: audit: type=1327 audit(1696276737.852:1270): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.909939 kernel: audit: type=1400 audit(1696276737.853:1271): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.853000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:57.853000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d92840 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:57.945602 kernel: audit: type=1300 audit(1696276737.853:1271): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d92840 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:58:57.945700 kernel: audit: type=1327 audit(1696276737.853:1271): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:57.853000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:58.240036 kubelet[2414]: E1002 19:58:58.239909 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:58.786000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.820089 kernel: audit: type=1400 audit(1696276738.786:1272): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.820223 kernel: audit: type=1400 audit(1696276738.787:1273): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.820249 kernel: audit: type=1300 audit(1696276738.787:1273): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0109c05d0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0109c05d0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.855491 kernel: audit: type=1327 audit(1696276738.787:1273): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.786000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0108897d0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.786000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0109c0720 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0109c0750 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010a3ca40 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:58:58.787000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.787000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010a3ca80 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:58:58.787000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:01.486844 systemd[1]: Started sshd@22-10.200.8.17:22-10.200.12.6:40772.service. Oct 2 19:59:01.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.17:22-10.200.12.6:40772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:02.121000 audit[3255]: USER_ACCT pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.122295 sshd[3255]: Accepted publickey for core from 10.200.12.6 port 40772 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:02.122000 audit[3255]: CRED_ACQ pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.122000 audit[3255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9a479a30 a2=3 a3=0 items=0 ppid=1 pid=3255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:02.122000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:02.123693 sshd[3255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:02.128891 systemd[1]: Started session-25.scope. Oct 2 19:59:02.129327 systemd-logind[1289]: New session 25 of user core. Oct 2 19:59:02.133000 audit[3255]: USER_START pid=3255 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.134000 audit[3257]: CRED_ACQ pid=3257 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.622302 sshd[3255]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:02.623000 audit[3255]: USER_END pid=3255 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.623000 audit[3255]: CRED_DISP pid=3255 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:02.625978 systemd[1]: sshd@22-10.200.8.17:22-10.200.12.6:40772.service: Deactivated successfully. Oct 2 19:59:02.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.17:22-10.200.12.6:40772 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:02.627142 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:59:02.628116 systemd-logind[1289]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:59:02.629227 systemd-logind[1289]: Removed session 25. Oct 2 19:59:03.241146 kubelet[2414]: E1002 19:59:03.241087 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:08.079294 kubelet[2414]: E1002 19:59:08.079238 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:59:08.242487 kubelet[2414]: E1002 19:59:08.242425 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:11.894000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.900102 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:59:11.900221 kernel: audit: type=1400 audit(1696276751.894:1287): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.894000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e803e0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:11.918661 kernel: audit: type=1300 audit(1696276751.894:1287): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e803e0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:11.894000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:11.955455 kernel: audit: type=1327 audit(1696276751.894:1287): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:11.955545 kernel: audit: type=1400 audit(1696276751.896:1288): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.896000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.896000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e80400 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:11.990688 kernel: audit: type=1300 audit(1696276751.896:1288): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e80400 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:11.990763 kernel: audit: type=1327 audit(1696276751.896:1288): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:11.896000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:12.007815 kernel: audit: type=1400 audit(1696276751.897:1289): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.897000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.897000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e80420 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:12.044213 kernel: audit: type=1300 audit(1696276751.897:1289): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e80420 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:12.044300 kernel: audit: type=1327 audit(1696276751.897:1289): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:11.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:11.899000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:12.075465 kernel: audit: type=1400 audit(1696276751.899:1290): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:11.899000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d93d40 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:11.899000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:12.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.17:22-10.200.12.6:53816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:12.731102 systemd[1]: Started sshd@23-10.200.8.17:22-10.200.12.6:53816.service. Oct 2 19:59:13.243647 kubelet[2414]: E1002 19:59:13.243581 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:13.363000 audit[3269]: USER_ACCT pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.364780 sshd[3269]: Accepted publickey for core from 10.200.12.6 port 53816 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:13.365000 audit[3269]: CRED_ACQ pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.365000 audit[3269]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcedb2def0 a2=3 a3=0 items=0 ppid=1 pid=3269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:13.365000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:13.366682 sshd[3269]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:13.372070 systemd[1]: Started session-26.scope. Oct 2 19:59:13.372514 systemd-logind[1289]: New session 26 of user core. Oct 2 19:59:13.376000 audit[3269]: USER_START pid=3269 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.378000 audit[3271]: CRED_ACQ pid=3271 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.861102 sshd[3269]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:13.861000 audit[3269]: USER_END pid=3269 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.861000 audit[3269]: CRED_DISP pid=3269 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:13.864011 systemd[1]: sshd@23-10.200.8.17:22-10.200.12.6:53816.service: Deactivated successfully. Oct 2 19:59:13.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.17:22-10.200.12.6:53816 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:13.865301 systemd-logind[1289]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:59:13.865383 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:59:13.866694 systemd-logind[1289]: Removed session 26. Oct 2 19:59:18.244448 kubelet[2414]: E1002 19:59:18.244408 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:20.078654 kubelet[2414]: E1002 19:59:20.078597 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:59:23.245850 kubelet[2414]: E1002 19:59:23.245744 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:23.969481 systemd[1]: Started sshd@24-10.200.8.17:22-10.200.12.6:38034.service. Oct 2 19:59:23.991446 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:59:23.991541 kernel: audit: type=1130 audit(1696276763.969:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.17:22-10.200.12.6:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:23.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.17:22-10.200.12.6:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:24.602000 audit[3284]: USER_ACCT pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.621116 sshd[3284]: Accepted publickey for core from 10.200.12.6 port 38034 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:24.621654 kernel: audit: type=1101 audit(1696276764.602:1301): pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.621715 sshd[3284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:24.620000 audit[3284]: CRED_ACQ pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.626349 systemd-logind[1289]: New session 27 of user core. Oct 2 19:59:24.629224 systemd[1]: Started session-27.scope. Oct 2 19:59:24.638656 kernel: audit: type=1103 audit(1696276764.620:1302): pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.638723 kernel: audit: type=1006 audit(1696276764.620:1303): pid=3284 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:59:24.620000 audit[3284]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1a61e290 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:24.648649 kernel: audit: type=1300 audit(1696276764.620:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1a61e290 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:24.620000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:24.665229 kernel: audit: type=1327 audit(1696276764.620:1303): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:24.632000 audit[3284]: USER_START pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.670644 kernel: audit: type=1105 audit(1696276764.632:1304): pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.632000 audit[3286]: CRED_ACQ pid=3286 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:24.709578 kernel: audit: type=1103 audit(1696276764.632:1305): pid=3286 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:25.132284 sshd[3284]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:25.133000 audit[3284]: USER_END pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:25.136501 systemd[1]: sshd@24-10.200.8.17:22-10.200.12.6:38034.service: Deactivated successfully. Oct 2 19:59:25.137494 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:59:25.139329 systemd-logind[1289]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:59:25.140665 systemd-logind[1289]: Removed session 27. Oct 2 19:59:25.133000 audit[3284]: CRED_DISP pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:25.166936 kernel: audit: type=1106 audit(1696276765.133:1306): pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:25.167022 kernel: audit: type=1104 audit(1696276765.133:1307): pid=3284 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:25.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.17:22-10.200.12.6:38034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:28.246668 kubelet[2414]: E1002 19:59:28.246610 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:32.079110 kubelet[2414]: E1002 19:59:32.079058 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:59:33.247472 kubelet[2414]: E1002 19:59:33.247407 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:34.832807 update_engine[1291]: I1002 19:59:34.832742 1291 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:59:34.832807 update_engine[1291]: I1002 19:59:34.832794 1291 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:59:34.833423 update_engine[1291]: I1002 19:59:34.832963 1291 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:59:34.833831 update_engine[1291]: I1002 19:59:34.833545 1291 omaha_request_params.cc:62] Current group set to lts Oct 2 19:59:34.833831 update_engine[1291]: I1002 19:59:34.833774 1291 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:59:34.833831 update_engine[1291]: I1002 19:59:34.833786 1291 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:59:34.833831 update_engine[1291]: I1002 19:59:34.833809 1291 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:59:34.834092 update_engine[1291]: I1002 19:59:34.833854 1291 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:59:34.834092 update_engine[1291]: I1002 19:59:34.833941 1291 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:59:34.834092 update_engine[1291]: I1002 19:59:34.833949 1291 omaha_request_action.cc:269] Request: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: Oct 2 19:59:34.834092 update_engine[1291]: I1002 19:59:34.833956 1291 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:59:34.835684 locksmithd[1377]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:59:34.835990 update_engine[1291]: I1002 19:59:34.835734 1291 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:59:34.836058 update_engine[1291]: I1002 19:59:34.835999 1291 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:59:35.261836 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:35.261986 kernel: audit: type=1130 audit(1696276775.238:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.17:22-10.200.12.6:40298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:35.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.17:22-10.200.12.6:40298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:35.239133 systemd[1]: Started sshd@25-10.200.8.17:22-10.200.12.6:40298.service. Oct 2 19:59:35.894186 update_engine[1291]: I1002 19:59:35.894136 1291 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:59:35.894654 update_engine[1291]: I1002 19:59:35.894393 1291 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:59:35.894654 update_engine[1291]: I1002 19:59:35.894541 1291 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:59:35.975483 update_engine[1291]: I1002 19:59:35.975427 1291 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:59:35.977013 update_engine[1291]: I1002 19:59:35.976975 1291 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:59:35.977013 update_engine[1291]: I1002 19:59:35.976999 1291 omaha_request_action.cc:619] Omaha request response: Oct 2 19:59:35.977013 update_engine[1291]: Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108552 1291 omaha_request_action.cc:409] No update. Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108613 1291 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108623 1291 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108644 1291 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108649 1291 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:59:36.108622 update_engine[1291]: I1002 19:59:36.108654 1291 update_attempter.cc:302] Processing Done. Oct 2 19:59:36.109062 update_engine[1291]: I1002 19:59:36.108680 1291 update_attempter.cc:338] No update. Oct 2 19:59:36.109062 update_engine[1291]: I1002 19:59:36.108695 1291 update_check_scheduler.cc:74] Next update check in 44m4s Oct 2 19:59:36.109179 locksmithd[1377]: LastCheckedTime=1696276776 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:59:36.130000 audit[3296]: USER_ACCT pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.151335 sshd[3296]: Accepted publickey for core from 10.200.12.6 port 40298 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:36.151746 kernel: audit: type=1101 audit(1696276776.130:1310): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.151610 sshd[3296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:36.150000 audit[3296]: CRED_ACQ pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.157270 systemd[1]: Started session-28.scope. Oct 2 19:59:36.158922 systemd-logind[1289]: New session 28 of user core. Oct 2 19:59:36.178669 kernel: audit: type=1103 audit(1696276776.150:1311): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.178751 kernel: audit: type=1006 audit(1696276776.150:1312): pid=3296 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:36.150000 audit[3296]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1a007fc0 a2=3 a3=0 items=0 ppid=1 pid=3296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:36.179644 kernel: audit: type=1300 audit(1696276776.150:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1a007fc0 a2=3 a3=0 items=0 ppid=1 pid=3296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:36.150000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:36.200471 kernel: audit: type=1327 audit(1696276776.150:1312): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:36.200548 kernel: audit: type=1105 audit(1696276776.162:1313): pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.162000 audit[3296]: USER_START pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.162000 audit[3298]: CRED_ACQ pid=3298 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.232655 kernel: audit: type=1103 audit(1696276776.162:1314): pid=3298 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.643936 sshd[3296]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:36.643000 audit[3296]: USER_END pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.647562 systemd[1]: sshd@25-10.200.8.17:22-10.200.12.6:40298.service: Deactivated successfully. Oct 2 19:59:36.648512 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:36.650607 systemd-logind[1289]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:36.651894 systemd-logind[1289]: Removed session 28. Oct 2 19:59:36.644000 audit[3296]: CRED_DISP pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.678913 kernel: audit: type=1106 audit(1696276776.643:1315): pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.678993 kernel: audit: type=1104 audit(1696276776.644:1316): pid=3296 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:36.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.17:22-10.200.12.6:40298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:38.248819 kubelet[2414]: E1002 19:59:38.248774 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:43.249710 kubelet[2414]: E1002 19:59:43.249667 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:46.772345 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:46.772513 kernel: audit: type=1130 audit(1696276786.749:1318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.17:22-10.200.12.6:46998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:46.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.17:22-10.200.12.6:46998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:46.750806 systemd[1]: Started sshd@26-10.200.8.17:22-10.200.12.6:46998.service. Oct 2 19:59:47.079346 kubelet[2414]: E1002 19:59:47.079312 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 19:59:47.393000 audit[3310]: USER_ACCT pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.412727 kernel: audit: type=1101 audit(1696276787.393:1319): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.412843 sshd[3310]: Accepted publickey for core from 10.200.12.6 port 46998 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:47.413171 sshd[3310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:47.411000 audit[3310]: CRED_ACQ pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.419046 systemd[1]: Started session-29.scope. Oct 2 19:59:47.420307 systemd-logind[1289]: New session 29 of user core. Oct 2 19:59:47.431665 kernel: audit: type=1103 audit(1696276787.411:1320): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.431748 kernel: audit: type=1006 audit(1696276787.411:1321): pid=3310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:59:47.411000 audit[3310]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8ba03a30 a2=3 a3=0 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.461599 kernel: audit: type=1300 audit(1696276787.411:1321): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8ba03a30 a2=3 a3=0 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:47.411000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:47.423000 audit[3310]: USER_START pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.484041 kernel: audit: type=1327 audit(1696276787.411:1321): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:47.484116 kernel: audit: type=1105 audit(1696276787.423:1322): pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.484143 kernel: audit: type=1103 audit(1696276787.425:1323): pid=3312 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:47.425000 audit[3312]: CRED_ACQ pid=3312 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:48.070317 sshd[3310]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:48.070000 audit[3310]: USER_END pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:48.073953 systemd[1]: sshd@26-10.200.8.17:22-10.200.12.6:46998.service: Deactivated successfully. Oct 2 19:59:48.074919 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:48.076970 systemd-logind[1289]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:48.078177 systemd-logind[1289]: Removed session 29. Oct 2 19:59:48.070000 audit[3310]: CRED_DISP pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:48.105003 kernel: audit: type=1106 audit(1696276788.070:1324): pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:48.105155 kernel: audit: type=1104 audit(1696276788.070:1325): pid=3310 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:48.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.17:22-10.200.12.6:46998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:48.251380 kubelet[2414]: E1002 19:59:48.251343 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:53.253145 kubelet[2414]: E1002 19:59:53.253073 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:57.852000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.857702 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:57.857786 kernel: audit: type=1400 audit(1696276797.852:1327): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.852000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dff290 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:57.894020 kernel: audit: type=1300 audit(1696276797.852:1327): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dff290 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:57.894104 kernel: audit: type=1327 audit(1696276797.852:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.854000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.926564 kernel: audit: type=1400 audit(1696276797.854:1328): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:57.926646 kernel: audit: type=1300 audit(1696276797.854:1328): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013c7f00 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:57.854000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013c7f00 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 19:59:57.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:57.963065 kernel: audit: type=1327 audit(1696276797.854:1328): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:58.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.17:22-10.200.12.6:52222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.198793 kernel: audit: type=1130 audit(1696276798.179:1329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.17:22-10.200.12.6:52222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:58.179673 systemd[1]: Started sshd@27-10.200.8.17:22-10.200.12.6:52222.service. Oct 2 19:59:58.255053 kubelet[2414]: E1002 19:59:58.254997 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c004aec000 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.805623 sshd[3322]: Accepted publickey for core from 10.200.12.6 port 52222 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 19:59:58.825094 kernel: audit: type=1400 audit(1696276798.788:1330): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.825206 kernel: audit: type=1300 audit(1696276798.788:1330): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c004aec000 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.825935 sshd[3322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:58.831509 systemd[1]: Started session-30.scope. Oct 2 19:59:58.833267 systemd-logind[1289]: New session 30 of user core. Oct 2 19:59:58.844687 kernel: audit: type=1327 audit(1696276798.788:1330): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0030a42a0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00514b860 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00514b8f0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00be29b00 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00be29b20 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 19:59:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 19:59:58.804000 audit[3322]: USER_ACCT pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.824000 audit[3322]: CRED_ACQ pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.824000 audit[3322]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6e1cb280 a2=3 a3=0 items=0 ppid=1 pid=3322 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:58.824000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:58.838000 audit[3322]: USER_START pid=3322 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:58.842000 audit[3324]: CRED_ACQ pid=3324 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:59.300072 sshd[3322]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:59.301000 audit[3322]: USER_END pid=3322 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:59.301000 audit[3322]: CRED_DISP pid=3322 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 19:59:59.303741 systemd[1]: sshd@27-10.200.8.17:22-10.200.12.6:52222.service: Deactivated successfully. Oct 2 19:59:59.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.17:22-10.200.12.6:52222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:59.304943 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:59:59.305848 systemd-logind[1289]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:59:59.306962 systemd-logind[1289]: Removed session 30. Oct 2 19:59:59.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.17:22-10.200.12.6:52234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:59.407784 systemd[1]: Started sshd@28-10.200.8.17:22-10.200.12.6:52234.service. Oct 2 20:00:00.035000 audit[3335]: USER_ACCT pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:00.035970 sshd[3335]: Accepted publickey for core from 10.200.12.6 port 52234 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 20:00:00.036000 audit[3335]: CRED_ACQ pid=3335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:00.036000 audit[3335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc55e950d0 a2=3 a3=0 items=0 ppid=1 pid=3335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:00.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:00:00.037615 sshd[3335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:00:00.042517 systemd-logind[1289]: New session 31 of user core. Oct 2 20:00:00.043529 systemd[1]: Started session-31.scope. Oct 2 20:00:00.047000 audit[3335]: USER_START pid=3335 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:00.049000 audit[3337]: CRED_ACQ pid=3337 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:01.078693 kubelet[2414]: E1002 20:00:01.078650 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jwbrj_kube-system(38ba86de-3df6-4fbd-b795-de92b0472aca)\"" pod="kube-system/cilium-jwbrj" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca Oct 2 20:00:01.658705 env[1306]: time="2023-10-02T20:00:01.658607984Z" level=info msg="StopContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" with timeout 30 (s)" Oct 2 20:00:01.660144 env[1306]: time="2023-10-02T20:00:01.659998707Z" level=info msg="Stop container \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" with signal terminated" Oct 2 20:00:01.688165 systemd[1]: cri-containerd-843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb.scope: Deactivated successfully. Oct 2 20:00:01.687000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:00:01.691000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:00:01.706926 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb-rootfs.mount: Deactivated successfully. Oct 2 20:00:01.847906 env[1306]: time="2023-10-02T20:00:01.847848001Z" level=info msg="StopPodSandbox for \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\"" Oct 2 20:00:01.848491 env[1306]: time="2023-10-02T20:00:01.848450411Z" level=info msg="Container to stop \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:01.850972 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98-shm.mount: Deactivated successfully. Oct 2 20:00:01.860658 systemd[1]: cri-containerd-810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98.scope: Deactivated successfully. Oct 2 20:00:01.860000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:00:01.866000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:00:01.885614 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98-rootfs.mount: Deactivated successfully. Oct 2 20:00:02.456655 env[1306]: time="2023-10-02T20:00:02.456572868Z" level=info msg="shim disconnected" id=843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb Oct 2 20:00:02.457116 env[1306]: time="2023-10-02T20:00:02.457087876Z" level=warning msg="cleaning up after shim disconnected" id=843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb namespace=k8s.io Oct 2 20:00:02.457258 env[1306]: time="2023-10-02T20:00:02.457239679Z" level=info msg="cleaning up dead shim" Oct 2 20:00:02.457590 env[1306]: time="2023-10-02T20:00:02.457003975Z" level=info msg="shim disconnected" id=810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98 Oct 2 20:00:02.457741 env[1306]: time="2023-10-02T20:00:02.457720486Z" level=warning msg="cleaning up after shim disconnected" id=810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98 namespace=k8s.io Oct 2 20:00:02.457837 env[1306]: time="2023-10-02T20:00:02.457822288Z" level=info msg="cleaning up dead shim" Oct 2 20:00:02.469253 env[1306]: time="2023-10-02T20:00:02.469180768Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3383 runtime=io.containerd.runc.v2\n" Oct 2 20:00:02.469601 env[1306]: time="2023-10-02T20:00:02.469565374Z" level=info msg="TearDown network for sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" successfully" Oct 2 20:00:02.469706 env[1306]: time="2023-10-02T20:00:02.469602475Z" level=info msg="StopPodSandbox for \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" returns successfully" Oct 2 20:00:02.471598 env[1306]: time="2023-10-02T20:00:02.471569706Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3382 runtime=io.containerd.runc.v2\n" Oct 2 20:00:02.476848 env[1306]: time="2023-10-02T20:00:02.476819289Z" level=info msg="StopContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" returns successfully" Oct 2 20:00:02.477351 env[1306]: time="2023-10-02T20:00:02.477323797Z" level=info msg="StopPodSandbox for \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\"" Oct 2 20:00:02.477439 env[1306]: time="2023-10-02T20:00:02.477383698Z" level=info msg="Container to stop \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:02.479398 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884-shm.mount: Deactivated successfully. Oct 2 20:00:02.488000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:00:02.488792 systemd[1]: cri-containerd-144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884.scope: Deactivated successfully. Oct 2 20:00:02.493000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:00:02.509533 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884-rootfs.mount: Deactivated successfully. Oct 2 20:00:02.522040 env[1306]: time="2023-10-02T20:00:02.521963305Z" level=info msg="shim disconnected" id=144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884 Oct 2 20:00:02.522040 env[1306]: time="2023-10-02T20:00:02.522025506Z" level=warning msg="cleaning up after shim disconnected" id=144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884 namespace=k8s.io Oct 2 20:00:02.522040 env[1306]: time="2023-10-02T20:00:02.522040706Z" level=info msg="cleaning up dead shim" Oct 2 20:00:02.530205 env[1306]: time="2023-10-02T20:00:02.530162835Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3427 runtime=io.containerd.runc.v2\n" Oct 2 20:00:02.530506 env[1306]: time="2023-10-02T20:00:02.530471540Z" level=info msg="TearDown network for sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" successfully" Oct 2 20:00:02.530592 env[1306]: time="2023-10-02T20:00:02.530502541Z" level=info msg="StopPodSandbox for \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" returns successfully" Oct 2 20:00:02.647860 kubelet[2414]: I1002 20:00:02.647799 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-config-path\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.647860 kubelet[2414]: I1002 20:00:02.647864 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-cgroup\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.647903 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sj4mj\" (UniqueName: \"kubernetes.io/projected/acc9dbb0-b9fc-4bda-bec7-9922179367d7-kube-api-access-sj4mj\") pod \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\" (UID: \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.647935 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-zjwq4\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-kube-api-access-zjwq4\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.647962 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-etc-cni-netd\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.647993 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-bpf-maps\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648026 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-hubble-tls\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648069 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/acc9dbb0-b9fc-4bda-bec7-9922179367d7-cilium-config-path\") pod \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\" (UID: \"acc9dbb0-b9fc-4bda-bec7-9922179367d7\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648098 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-net\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648133 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/38ba86de-3df6-4fbd-b795-de92b0472aca-clustermesh-secrets\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648164 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-run\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648200 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-lib-modules\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648230 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-xtables-lock\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648260 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cni-path\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648290 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-hostproc\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648320 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-kernel\") pod \"38ba86de-3df6-4fbd-b795-de92b0472aca\" (UID: \"38ba86de-3df6-4fbd-b795-de92b0472aca\") " Oct 2 20:00:02.648526 kubelet[2414]: I1002 20:00:02.648406 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.649405 kubelet[2414]: W1002 20:00:02.648719 2414 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/38ba86de-3df6-4fbd-b795-de92b0472aca/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:02.652321 kubelet[2414]: W1002 20:00:02.649736 2414 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/acc9dbb0-b9fc-4bda-bec7-9922179367d7/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:02.652321 kubelet[2414]: I1002 20:00:02.651956 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:02.652321 kubelet[2414]: I1002 20:00:02.652026 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.653478 kubelet[2414]: I1002 20:00:02.653451 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.653923 kubelet[2414]: I1002 20:00:02.653393 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654095 kubelet[2414]: I1002 20:00:02.654075 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654238 kubelet[2414]: I1002 20:00:02.654221 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654354 kubelet[2414]: I1002 20:00:02.654341 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cni-path" (OuterVolumeSpecName: "cni-path") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654458 kubelet[2414]: I1002 20:00:02.654443 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-hostproc" (OuterVolumeSpecName: "hostproc") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654557 kubelet[2414]: I1002 20:00:02.654545 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.654966 kubelet[2414]: I1002 20:00:02.654946 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:02.655875 kubelet[2414]: I1002 20:00:02.655853 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/acc9dbb0-b9fc-4bda-bec7-9922179367d7-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "acc9dbb0-b9fc-4bda-bec7-9922179367d7" (UID: "acc9dbb0-b9fc-4bda-bec7-9922179367d7"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:02.656491 kubelet[2414]: I1002 20:00:02.656461 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/38ba86de-3df6-4fbd-b795-de92b0472aca-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:02.659458 kubelet[2414]: I1002 20:00:02.659433 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/acc9dbb0-b9fc-4bda-bec7-9922179367d7-kube-api-access-sj4mj" (OuterVolumeSpecName: "kube-api-access-sj4mj") pod "acc9dbb0-b9fc-4bda-bec7-9922179367d7" (UID: "acc9dbb0-b9fc-4bda-bec7-9922179367d7"). InnerVolumeSpecName "kube-api-access-sj4mj". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:02.659690 kubelet[2414]: I1002 20:00:02.659667 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-kube-api-access-zjwq4" (OuterVolumeSpecName: "kube-api-access-zjwq4") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "kube-api-access-zjwq4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:02.661441 kubelet[2414]: I1002 20:00:02.661414 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "38ba86de-3df6-4fbd-b795-de92b0472aca" (UID: "38ba86de-3df6-4fbd-b795-de92b0472aca"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:02.707394 systemd[1]: var-lib-kubelet-pods-acc9dbb0\x2db9fc\x2d4bda\x2dbec7\x2d9922179367d7-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsj4mj.mount: Deactivated successfully. Oct 2 20:00:02.707589 systemd[1]: var-lib-kubelet-pods-38ba86de\x2d3df6\x2d4fbd\x2db795\x2dde92b0472aca-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dzjwq4.mount: Deactivated successfully. Oct 2 20:00:02.707727 systemd[1]: var-lib-kubelet-pods-38ba86de\x2d3df6\x2d4fbd\x2db795\x2dde92b0472aca-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:02.707829 systemd[1]: var-lib-kubelet-pods-38ba86de\x2d3df6\x2d4fbd\x2db795\x2dde92b0472aca-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:00:02.748815 kubelet[2414]: I1002 20:00:02.748756 2414 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.748815 kubelet[2414]: I1002 20:00:02.748807 2414 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-hostproc\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748829 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-config-path\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748847 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-cgroup\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748867 2414 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-sj4mj\" (UniqueName: \"kubernetes.io/projected/acc9dbb0-b9fc-4bda-bec7-9922179367d7-kube-api-access-sj4mj\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748886 2414 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-zjwq4\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-kube-api-access-zjwq4\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748909 2414 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-etc-cni-netd\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748925 2414 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-bpf-maps\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748942 2414 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/38ba86de-3df6-4fbd-b795-de92b0472aca-hubble-tls\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748960 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/acc9dbb0-b9fc-4bda-bec7-9922179367d7-cilium-config-path\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748977 2414 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-host-proc-sys-net\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.748994 2414 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/38ba86de-3df6-4fbd-b795-de92b0472aca-clustermesh-secrets\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.749014 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cilium-run\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.749033 2414 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-lib-modules\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.749051 2414 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-xtables-lock\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.749068 kubelet[2414]: I1002 20:00:02.749069 2414 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/38ba86de-3df6-4fbd-b795-de92b0472aca-cni-path\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:00:02.851479 kubelet[2414]: I1002 20:00:02.851443 2414 scope.go:115] "RemoveContainer" containerID="0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0" Oct 2 20:00:02.855801 env[1306]: time="2023-10-02T20:00:02.855735699Z" level=info msg="RemoveContainer for \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\"" Oct 2 20:00:02.861779 systemd[1]: Removed slice kubepods-besteffort-podacc9dbb0_b9fc_4bda_bec7_9922179367d7.slice. Oct 2 20:00:02.865210 systemd[1]: Removed slice kubepods-burstable-pod38ba86de_3df6_4fbd_b795_de92b0472aca.slice. Oct 2 20:00:02.867552 env[1306]: time="2023-10-02T20:00:02.867399484Z" level=info msg="RemoveContainer for \"0ace6903be1461281324ca1d14f24e59df14fa417863ace1f84db628d052cfa0\" returns successfully" Oct 2 20:00:02.868091 kubelet[2414]: I1002 20:00:02.868069 2414 scope.go:115] "RemoveContainer" containerID="843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb" Oct 2 20:00:02.869556 env[1306]: time="2023-10-02T20:00:02.869509217Z" level=info msg="RemoveContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\"" Oct 2 20:00:02.882672 env[1306]: time="2023-10-02T20:00:02.880172786Z" level=info msg="RemoveContainer for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" returns successfully" Oct 2 20:00:02.882672 env[1306]: time="2023-10-02T20:00:02.880835597Z" level=error msg="ContainerStatus for \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\": not found" Oct 2 20:00:02.882861 kubelet[2414]: I1002 20:00:02.880418 2414 scope.go:115] "RemoveContainer" containerID="843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb" Oct 2 20:00:02.882861 kubelet[2414]: E1002 20:00:02.881058 2414 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\": not found" containerID="843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb" Oct 2 20:00:02.882861 kubelet[2414]: I1002 20:00:02.881093 2414 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb} err="failed to get container status \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\": rpc error: code = NotFound desc = an error occurred when try to find container \"843c3ff75dd46812cd14087488172d166e305b491928082ee7f9cbbd7025fecb\": not found" Oct 2 20:00:03.080531 kubelet[2414]: I1002 20:00:03.080489 2414 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=38ba86de-3df6-4fbd-b795-de92b0472aca path="/var/lib/kubelet/pods/38ba86de-3df6-4fbd-b795-de92b0472aca/volumes" Oct 2 20:00:03.081025 kubelet[2414]: I1002 20:00:03.080999 2414 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=acc9dbb0-b9fc-4bda-bec7-9922179367d7 path="/var/lib/kubelet/pods/acc9dbb0-b9fc-4bda-bec7-9922179367d7/volumes" Oct 2 20:00:03.102754 env[1306]: time="2023-10-02T20:00:03.102706107Z" level=info msg="StopPodSandbox for \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\"" Oct 2 20:00:03.102960 env[1306]: time="2023-10-02T20:00:03.102814709Z" level=info msg="TearDown network for sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" successfully" Oct 2 20:00:03.102960 env[1306]: time="2023-10-02T20:00:03.102859910Z" level=info msg="StopPodSandbox for \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" returns successfully" Oct 2 20:00:03.103372 env[1306]: time="2023-10-02T20:00:03.103336417Z" level=info msg="RemovePodSandbox for \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\"" Oct 2 20:00:03.103487 env[1306]: time="2023-10-02T20:00:03.103369018Z" level=info msg="Forcibly stopping sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\"" Oct 2 20:00:03.103487 env[1306]: time="2023-10-02T20:00:03.103452619Z" level=info msg="TearDown network for sandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" successfully" Oct 2 20:00:03.117027 env[1306]: time="2023-10-02T20:00:03.116978533Z" level=info msg="RemovePodSandbox \"810cc82e7db538bff457ed9ab9c1d9ce668fec929c7674cb3aff8d9bcbeeaf98\" returns successfully" Oct 2 20:00:03.117584 env[1306]: time="2023-10-02T20:00:03.117547742Z" level=info msg="StopPodSandbox for \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\"" Oct 2 20:00:03.117708 env[1306]: time="2023-10-02T20:00:03.117646543Z" level=info msg="TearDown network for sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" successfully" Oct 2 20:00:03.117708 env[1306]: time="2023-10-02T20:00:03.117689644Z" level=info msg="StopPodSandbox for \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" returns successfully" Oct 2 20:00:03.118075 env[1306]: time="2023-10-02T20:00:03.118044249Z" level=info msg="RemovePodSandbox for \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\"" Oct 2 20:00:03.118161 env[1306]: time="2023-10-02T20:00:03.118079650Z" level=info msg="Forcibly stopping sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\"" Oct 2 20:00:03.118203 env[1306]: time="2023-10-02T20:00:03.118160651Z" level=info msg="TearDown network for sandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" successfully" Oct 2 20:00:03.125528 env[1306]: time="2023-10-02T20:00:03.125488667Z" level=info msg="RemovePodSandbox \"144db938888bcc8ed6eae8a2f92aa5cfffe9b581f7c4ec3466a96dc5090d8884\" returns successfully" Oct 2 20:00:03.256334 kubelet[2414]: E1002 20:00:03.256284 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:03.720228 sshd[3335]: pam_unix(sshd:session): session closed for user core Oct 2 20:00:03.721000 audit[3335]: USER_END pid=3335 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:03.723644 systemd[1]: sshd@28-10.200.8.17:22-10.200.12.6:52234.service: Deactivated successfully. Oct 2 20:00:03.724431 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:00:03.726915 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 20:00:03.727008 kernel: audit: type=1106 audit(1696276803.721:1356): pid=3335 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:03.726526 systemd-logind[1289]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:00:03.727745 systemd-logind[1289]: Removed session 31. Oct 2 20:00:03.721000 audit[3335]: CRED_DISP pid=3335 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:03.758722 kernel: audit: type=1104 audit(1696276803.721:1357): pid=3335 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:03.758809 kernel: audit: type=1131 audit(1696276803.721:1358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.17:22-10.200.12.6:52234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:03.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.17:22-10.200.12.6:52234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:03.824204 systemd[1]: Started sshd@29-10.200.8.17:22-10.200.12.6:52240.service. Oct 2 20:00:03.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.17:22-10.200.12.6:52240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:03.845668 kernel: audit: type=1130 audit(1696276803.823:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.17:22-10.200.12.6:52240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:04.455000 audit[3449]: USER_ACCT pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.475271 sshd[3449]: Accepted publickey for core from 10.200.12.6 port 52240 ssh2: RSA SHA256:cL8ODMZgKrzn60NSELkVQm/2+yvjqGgc1prcSOxmfAg Oct 2 20:00:04.475653 kernel: audit: type=1101 audit(1696276804.455:1360): pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.475785 sshd[3449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:00:04.474000 audit[3449]: CRED_ACQ pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.484973 systemd[1]: Started session-32.scope. Oct 2 20:00:04.486154 systemd-logind[1289]: New session 32 of user core. Oct 2 20:00:04.506189 kernel: audit: type=1103 audit(1696276804.474:1361): pid=3449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.506292 kernel: audit: type=1006 audit(1696276804.474:1362): pid=3449 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:00:04.506316 kernel: audit: type=1300 audit(1696276804.474:1362): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff063a75c0 a2=3 a3=0 items=0 ppid=1 pid=3449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:04.474000 audit[3449]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff063a75c0 a2=3 a3=0 items=0 ppid=1 pid=3449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:04.474000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:00:04.528319 kernel: audit: type=1327 audit(1696276804.474:1362): proctitle=737368643A20636F7265205B707269765D Oct 2 20:00:04.492000 audit[3449]: USER_START pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.545736 kernel: audit: type=1105 audit(1696276804.492:1363): pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:04.494000 audit[3451]: CRED_ACQ pid=3451 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:00:05.496813 kubelet[2414]: I1002 20:00:05.496763 2414 topology_manager.go:212] "Topology Admit Handler" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.496852 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.496866 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="acc9dbb0-b9fc-4bda-bec7-9922179367d7" containerName="cilium-operator" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.496886 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.496894 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.496903 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.496932 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.496943 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.496964 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="acc9dbb0-b9fc-4bda-bec7-9922179367d7" containerName="cilium-operator" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.496975 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.496985 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.497011 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: E1002 20:00:05.497020 2414 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.497054 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.497299 kubelet[2414]: I1002 20:00:05.497066 2414 memory_manager.go:346] "RemoveStaleState removing state" podUID="38ba86de-3df6-4fbd-b795-de92b0472aca" containerName="mount-cgroup" Oct 2 20:00:05.504282 systemd[1]: Created slice kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice. Oct 2 20:00:05.682125 kubelet[2414]: I1002 20:00:05.682066 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-bpf-maps\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682125 kubelet[2414]: I1002 20:00:05.682129 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qd8bl\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-kube-api-access-qd8bl\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682164 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-cgroup\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682193 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-ipsec-secrets\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682225 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-net\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682253 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-lib-modules\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682287 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hostproc\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682322 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-xtables-lock\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682352 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-config-path\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682385 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cni-path\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682434 kubelet[2414]: I1002 20:00:05.682424 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-kernel\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682966 kubelet[2414]: I1002 20:00:05.682458 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-run\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682966 kubelet[2414]: I1002 20:00:05.682494 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-etc-cni-netd\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682966 kubelet[2414]: I1002 20:00:05.682531 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-clustermesh-secrets\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:05.682966 kubelet[2414]: I1002 20:00:05.682567 2414 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hubble-tls\") pod \"cilium-w7xgh\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " pod="kube-system/cilium-w7xgh" Oct 2 20:00:06.112163 env[1306]: time="2023-10-02T20:00:06.112098826Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-w7xgh,Uid:fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb,Namespace:kube-system,Attempt:0,}" Oct 2 20:00:06.167619 env[1306]: time="2023-10-02T20:00:06.167549888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:00:06.167828 env[1306]: time="2023-10-02T20:00:06.167590088Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:00:06.167828 env[1306]: time="2023-10-02T20:00:06.167603989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:00:06.167965 env[1306]: time="2023-10-02T20:00:06.167842692Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42 pid=3471 runtime=io.containerd.runc.v2 Oct 2 20:00:06.181145 systemd[1]: Started cri-containerd-5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42.scope. Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.200000 audit: BPF prog-id=126 op=LOAD Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3471 pid=3481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643862393335323834373332666233333862306530636465313630 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3471 pid=3481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643862393335323834373332666233333862306530636465313630 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit: BPF prog-id=127 op=LOAD Oct 2 20:00:06.201000 audit[3481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a0a80 items=0 ppid=3471 pid=3481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643862393335323834373332666233333862306530636465313630 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit: BPF prog-id=128 op=LOAD Oct 2 20:00:06.201000 audit[3481]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a0ac8 items=0 ppid=3471 pid=3481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643862393335323834373332666233333862306530636465313630 Oct 2 20:00:06.201000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:00:06.201000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { perfmon } for pid=3481 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit[3481]: AVC avc: denied { bpf } for pid=3481 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:06.201000 audit: BPF prog-id=129 op=LOAD Oct 2 20:00:06.201000 audit[3481]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a0ed8 items=0 ppid=3471 pid=3481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563643862393335323834373332666233333862306530636465313630 Oct 2 20:00:06.226326 env[1306]: time="2023-10-02T20:00:06.226278500Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-w7xgh,Uid:fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb,Namespace:kube-system,Attempt:0,} returns sandbox id \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\"" Oct 2 20:00:06.229722 env[1306]: time="2023-10-02T20:00:06.229690153Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:00:06.257826 env[1306]: time="2023-10-02T20:00:06.257778890Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" Oct 2 20:00:06.258743 env[1306]: time="2023-10-02T20:00:06.258711304Z" level=info msg="StartContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" Oct 2 20:00:06.276756 systemd[1]: Started cri-containerd-d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f.scope. Oct 2 20:00:06.293162 systemd[1]: cri-containerd-d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f.scope: Deactivated successfully. Oct 2 20:00:06.339513 env[1306]: time="2023-10-02T20:00:06.339456759Z" level=info msg="shim disconnected" id=d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f Oct 2 20:00:06.339513 env[1306]: time="2023-10-02T20:00:06.339513460Z" level=warning msg="cleaning up after shim disconnected" id=d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f namespace=k8s.io Oct 2 20:00:06.339886 env[1306]: time="2023-10-02T20:00:06.339525460Z" level=info msg="cleaning up dead shim" Oct 2 20:00:06.348332 env[1306]: time="2023-10-02T20:00:06.348282996Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3530 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:06Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:06.348647 env[1306]: time="2023-10-02T20:00:06.348571001Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:06.348971 env[1306]: time="2023-10-02T20:00:06.348906506Z" level=error msg="Failed to pipe stdout of container \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" error="reading from a closed fifo" Oct 2 20:00:06.349046 env[1306]: time="2023-10-02T20:00:06.348906706Z" level=error msg="Failed to pipe stderr of container \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" error="reading from a closed fifo" Oct 2 20:00:06.353201 env[1306]: time="2023-10-02T20:00:06.353156572Z" level=error msg="StartContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:06.353453 kubelet[2414]: E1002 20:00:06.353429 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f" Oct 2 20:00:06.353585 kubelet[2414]: E1002 20:00:06.353573 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:06.353585 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:06.353585 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 20:00:06.353585 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qd8bl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:06.354051 kubelet[2414]: E1002 20:00:06.353664 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:06.869678 env[1306]: time="2023-10-02T20:00:06.869610198Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:00:06.908073 env[1306]: time="2023-10-02T20:00:06.908018395Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" Oct 2 20:00:06.908625 env[1306]: time="2023-10-02T20:00:06.908590204Z" level=info msg="StartContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" Oct 2 20:00:06.932764 systemd[1]: Started cri-containerd-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5.scope. Oct 2 20:00:06.942126 systemd[1]: cri-containerd-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5.scope: Deactivated successfully. Oct 2 20:00:06.942431 systemd[1]: Stopped cri-containerd-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5.scope. Oct 2 20:00:06.957567 env[1306]: time="2023-10-02T20:00:06.957515164Z" level=info msg="shim disconnected" id=58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5 Oct 2 20:00:06.957779 env[1306]: time="2023-10-02T20:00:06.957567665Z" level=warning msg="cleaning up after shim disconnected" id=58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5 namespace=k8s.io Oct 2 20:00:06.957779 env[1306]: time="2023-10-02T20:00:06.957579065Z" level=info msg="cleaning up dead shim" Oct 2 20:00:06.965073 env[1306]: time="2023-10-02T20:00:06.965033781Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3568 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:06Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:06.965352 env[1306]: time="2023-10-02T20:00:06.965284085Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:06.966725 env[1306]: time="2023-10-02T20:00:06.966681406Z" level=error msg="Failed to pipe stderr of container \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" error="reading from a closed fifo" Oct 2 20:00:06.966811 env[1306]: time="2023-10-02T20:00:06.966743507Z" level=error msg="Failed to pipe stdout of container \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" error="reading from a closed fifo" Oct 2 20:00:06.972577 env[1306]: time="2023-10-02T20:00:06.972531797Z" level=error msg="StartContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:06.972867 kubelet[2414]: E1002 20:00:06.972836 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5" Oct 2 20:00:06.973321 kubelet[2414]: E1002 20:00:06.972976 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:06.973321 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:06.973321 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 20:00:06.973321 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qd8bl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:06.973321 kubelet[2414]: E1002 20:00:06.973027 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:07.792140 systemd[1]: run-containerd-runc-k8s.io-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5-runc.wHvd2K.mount: Deactivated successfully. Oct 2 20:00:07.792542 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5-rootfs.mount: Deactivated successfully. Oct 2 20:00:07.871473 kubelet[2414]: I1002 20:00:07.871430 2414 scope.go:115] "RemoveContainer" containerID="d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f" Oct 2 20:00:07.872341 kubelet[2414]: I1002 20:00:07.872307 2414 scope.go:115] "RemoveContainer" containerID="d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f" Oct 2 20:00:07.873162 env[1306]: time="2023-10-02T20:00:07.873107824Z" level=info msg="RemoveContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" Oct 2 20:00:07.874404 env[1306]: time="2023-10-02T20:00:07.874364043Z" level=info msg="RemoveContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\"" Oct 2 20:00:07.874675 env[1306]: time="2023-10-02T20:00:07.874612247Z" level=error msg="RemoveContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\" failed" error="failed to set removing state for container \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\": container is already in removing state" Oct 2 20:00:07.874927 kubelet[2414]: E1002 20:00:07.874911 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\": container is already in removing state" containerID="d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f" Oct 2 20:00:07.875067 kubelet[2414]: E1002 20:00:07.875056 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f": container is already in removing state; Skipping pod "cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)" Oct 2 20:00:07.875593 kubelet[2414]: E1002 20:00:07.875569 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:07.884385 env[1306]: time="2023-10-02T20:00:07.884353998Z" level=info msg="RemoveContainer for \"d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f\" returns successfully" Oct 2 20:00:08.257509 kubelet[2414]: E1002 20:00:08.257361 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:09.445956 kubelet[2414]: W1002 20:00:09.445900 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice/cri-containerd-d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f.scope WatchSource:0}: container "d0ce6cae029ee5df552f5258b70786c6f4b331a96d46abf80adeeee24991ef2f" in namespace "k8s.io": not found Oct 2 20:00:11.895000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.900437 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:00:11.900554 kernel: audit: type=1400 audit(1696276811.895:1383): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.895000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d34360 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:11.916705 kernel: audit: type=1300 audit(1696276811.895:1383): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d34360 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:11.895000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:11.954481 kernel: audit: type=1327 audit(1696276811.895:1383): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:11.954561 kernel: audit: type=1400 audit(1696276811.897:1384): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.897000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.897000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81320 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:11.969694 kernel: audit: type=1300 audit(1696276811.897:1384): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81320 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:11.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:12.005545 kernel: audit: type=1327 audit(1696276811.897:1384): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:12.005649 kernel: audit: type=1400 audit(1696276811.897:1385): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.897000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.897000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81360 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:12.039824 kernel: audit: type=1300 audit(1696276811.897:1385): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e81360 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:12.039914 kernel: audit: type=1327 audit(1696276811.897:1385): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:11.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:12.057788 kernel: audit: type=1400 audit(1696276811.901:1386): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.901000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:11.901000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d343a0 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:11.901000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:12.554677 kubelet[2414]: W1002 20:00:12.554600 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice/cri-containerd-58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5.scope WatchSource:0}: task 58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5 not found: not found Oct 2 20:00:13.259073 kubelet[2414]: E1002 20:00:13.259023 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:18.261067 kubelet[2414]: E1002 20:00:18.261024 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:22.082149 env[1306]: time="2023-10-02T20:00:22.082048337Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:00:22.108706 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2270338344.mount: Deactivated successfully. Oct 2 20:00:22.118145 env[1306]: time="2023-10-02T20:00:22.118097055Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" Oct 2 20:00:22.118700 env[1306]: time="2023-10-02T20:00:22.118660763Z" level=info msg="StartContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" Oct 2 20:00:22.145556 systemd[1]: Started cri-containerd-520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60.scope. Oct 2 20:00:22.155962 systemd[1]: cri-containerd-520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60.scope: Deactivated successfully. Oct 2 20:00:22.159701 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60-rootfs.mount: Deactivated successfully. Oct 2 20:00:22.199120 env[1306]: time="2023-10-02T20:00:22.199055317Z" level=info msg="shim disconnected" id=520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60 Oct 2 20:00:22.199120 env[1306]: time="2023-10-02T20:00:22.199121218Z" level=warning msg="cleaning up after shim disconnected" id=520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60 namespace=k8s.io Oct 2 20:00:22.199120 env[1306]: time="2023-10-02T20:00:22.199132618Z" level=info msg="cleaning up dead shim" Oct 2 20:00:22.208123 env[1306]: time="2023-10-02T20:00:22.208064946Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3606 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:22.208422 env[1306]: time="2023-10-02T20:00:22.208353450Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:22.208767 env[1306]: time="2023-10-02T20:00:22.208720456Z" level=error msg="Failed to pipe stdout of container \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" error="reading from a closed fifo" Oct 2 20:00:22.208932 env[1306]: time="2023-10-02T20:00:22.208884558Z" level=error msg="Failed to pipe stderr of container \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" error="reading from a closed fifo" Oct 2 20:00:22.212843 env[1306]: time="2023-10-02T20:00:22.212795314Z" level=error msg="StartContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:22.213093 kubelet[2414]: E1002 20:00:22.213067 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60" Oct 2 20:00:22.214668 kubelet[2414]: E1002 20:00:22.213687 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:22.214668 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:22.214668 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 20:00:22.214668 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qd8bl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:22.214668 kubelet[2414]: E1002 20:00:22.213752 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:22.905694 kubelet[2414]: I1002 20:00:22.905661 2414 scope.go:115] "RemoveContainer" containerID="58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5" Oct 2 20:00:22.906064 kubelet[2414]: I1002 20:00:22.906042 2414 scope.go:115] "RemoveContainer" containerID="58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5" Oct 2 20:00:22.907918 env[1306]: time="2023-10-02T20:00:22.907875093Z" level=info msg="RemoveContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" Oct 2 20:00:22.908617 env[1306]: time="2023-10-02T20:00:22.908573303Z" level=info msg="RemoveContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\"" Oct 2 20:00:22.908797 env[1306]: time="2023-10-02T20:00:22.908755406Z" level=error msg="RemoveContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\" failed" error="failed to set removing state for container \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\": container is already in removing state" Oct 2 20:00:22.909154 kubelet[2414]: E1002 20:00:22.909131 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\": container is already in removing state" containerID="58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5" Oct 2 20:00:22.909260 kubelet[2414]: E1002 20:00:22.909192 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5": container is already in removing state; Skipping pod "cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)" Oct 2 20:00:22.909856 kubelet[2414]: E1002 20:00:22.909564 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:22.920115 env[1306]: time="2023-10-02T20:00:22.920085569Z" level=info msg="RemoveContainer for \"58c28d43f56a4a31064c26e0c09b152f7fa6c11ae9121be637ed7c32262737e5\" returns successfully" Oct 2 20:00:23.262690 kubelet[2414]: E1002 20:00:23.262459 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:25.304928 kubelet[2414]: W1002 20:00:25.304867 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice/cri-containerd-520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60.scope WatchSource:0}: task 520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60 not found: not found Oct 2 20:00:28.264415 kubelet[2414]: E1002 20:00:28.264362 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:33.266351 kubelet[2414]: E1002 20:00:33.266305 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:36.078721 kubelet[2414]: E1002 20:00:36.078672 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:38.267717 kubelet[2414]: E1002 20:00:38.267656 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:43.269541 kubelet[2414]: E1002 20:00:43.269478 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:48.270397 kubelet[2414]: E1002 20:00:48.270346 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:50.081772 env[1306]: time="2023-10-02T20:00:50.081710654Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:00:50.108859 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3317321913.mount: Deactivated successfully. Oct 2 20:00:50.122760 env[1306]: time="2023-10-02T20:00:50.122616470Z" level=info msg="CreateContainer within sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\"" Oct 2 20:00:50.123721 env[1306]: time="2023-10-02T20:00:50.123663283Z" level=info msg="StartContainer for \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\"" Oct 2 20:00:50.147059 systemd[1]: Started cri-containerd-32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16.scope. Oct 2 20:00:50.157746 systemd[1]: cri-containerd-32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16.scope: Deactivated successfully. Oct 2 20:00:50.158046 systemd[1]: Stopped cri-containerd-32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16.scope. Oct 2 20:00:50.191775 env[1306]: time="2023-10-02T20:00:50.191721541Z" level=info msg="shim disconnected" id=32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16 Oct 2 20:00:50.192026 env[1306]: time="2023-10-02T20:00:50.191775442Z" level=warning msg="cleaning up after shim disconnected" id=32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16 namespace=k8s.io Oct 2 20:00:50.192026 env[1306]: time="2023-10-02T20:00:50.191787842Z" level=info msg="cleaning up dead shim" Oct 2 20:00:50.200059 env[1306]: time="2023-10-02T20:00:50.200020246Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3648 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:00:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:00:50.200342 env[1306]: time="2023-10-02T20:00:50.200278349Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:00:50.203751 env[1306]: time="2023-10-02T20:00:50.203699292Z" level=error msg="Failed to pipe stdout of container \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\"" error="reading from a closed fifo" Oct 2 20:00:50.203962 env[1306]: time="2023-10-02T20:00:50.203907895Z" level=error msg="Failed to pipe stderr of container \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\"" error="reading from a closed fifo" Oct 2 20:00:50.208154 env[1306]: time="2023-10-02T20:00:50.208108348Z" level=error msg="StartContainer for \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:00:50.208387 kubelet[2414]: E1002 20:00:50.208368 2414 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16" Oct 2 20:00:50.208788 kubelet[2414]: E1002 20:00:50.208509 2414 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:00:50.208788 kubelet[2414]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:00:50.208788 kubelet[2414]: rm /hostbin/cilium-mount Oct 2 20:00:50.208788 kubelet[2414]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qd8bl,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:00:50.209118 kubelet[2414]: E1002 20:00:50.209098 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:50.964382 kubelet[2414]: I1002 20:00:50.964336 2414 scope.go:115] "RemoveContainer" containerID="520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60" Oct 2 20:00:50.965807 kubelet[2414]: I1002 20:00:50.964829 2414 scope.go:115] "RemoveContainer" containerID="520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60" Oct 2 20:00:50.968299 env[1306]: time="2023-10-02T20:00:50.967966932Z" level=info msg="RemoveContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" Oct 2 20:00:50.971816 env[1306]: time="2023-10-02T20:00:50.971760180Z" level=info msg="RemoveContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\"" Oct 2 20:00:50.971952 env[1306]: time="2023-10-02T20:00:50.971909082Z" level=error msg="RemoveContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\" failed" error="failed to set removing state for container \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\": container is already in removing state" Oct 2 20:00:50.972572 kubelet[2414]: E1002 20:00:50.972526 2414 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\": container is already in removing state" containerID="520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60" Oct 2 20:00:50.972759 kubelet[2414]: E1002 20:00:50.972747 2414 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60": container is already in removing state; Skipping pod "cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)" Oct 2 20:00:50.978385 env[1306]: time="2023-10-02T20:00:50.978262362Z" level=info msg="RemoveContainer for \"520124982762de6060bc859b66d9ec7353e81e1b907f06e987ca341742f6af60\" returns successfully" Oct 2 20:00:50.978877 kubelet[2414]: E1002 20:00:50.978861 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:00:51.104565 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16-rootfs.mount: Deactivated successfully. Oct 2 20:00:53.272159 kubelet[2414]: E1002 20:00:53.272119 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:53.296287 kubelet[2414]: W1002 20:00:53.296244 2414 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice/cri-containerd-32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16.scope WatchSource:0}: task 32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16 not found: not found Oct 2 20:00:57.854000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.860485 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:00:57.860598 kernel: audit: type=1400 audit(1696276857.854:1387): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.854000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.890940 kernel: audit: type=1400 audit(1696276857.854:1388): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:57.891008 kernel: audit: type=1300 audit(1696276857.854:1387): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269a820 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:57.854000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00269a820 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:57.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.911725 kernel: audit: type=1327 audit(1696276857.854:1387): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.854000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e60060 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:57.947358 kernel: audit: type=1300 audit(1696276857.854:1388): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e60060 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:00:57.947442 kernel: audit: type=1327 audit(1696276857.854:1388): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:57.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:58.273986 kubelet[2414]: E1002 20:00:58.273881 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:58.788000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.788000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004f7ecc0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.824672 kernel: audit: type=1400 audit(1696276858.788:1389): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6888 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.824767 kernel: audit: type=1300 audit(1696276858.788:1389): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004f7ecc0 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.824795 kernel: audit: type=1327 audit(1696276858.788:1389): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.788000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.858315 kernel: audit: type=1400 audit(1696276858.791:1390): avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004f7ef60 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008c3fc20 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002ff1410 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008c3fc40 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:00:58.791000 audit[2235]: AVC avc: denied { watch } for pid=2235 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6894 scontext=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:58.791000 audit[2235]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004f7f050 a2=fc6 a3=0 items=0 ppid=2098 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c17,c553 key=(null) Oct 2 20:00:58.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:01:03.079856 kubelet[2414]: E1002 20:01:03.079815 2414 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-w7xgh_kube-system(fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb)\"" pod="kube-system/cilium-w7xgh" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb Oct 2 20:01:03.275087 kubelet[2414]: E1002 20:01:03.275046 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:06.686291 env[1306]: time="2023-10-02T20:01:06.686198186Z" level=info msg="StopPodSandbox for \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\"" Oct 2 20:01:06.686937 env[1306]: time="2023-10-02T20:01:06.686348788Z" level=info msg="Container to stop \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:01:06.690744 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42-shm.mount: Deactivated successfully. Oct 2 20:01:06.706595 systemd[1]: cri-containerd-5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42.scope: Deactivated successfully. Oct 2 20:01:06.705000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:01:06.712833 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:01:06.712932 kernel: audit: type=1334 audit(1696276866.705:1395): prog-id=126 op=UNLOAD Oct 2 20:01:06.720000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:01:06.733654 kernel: audit: type=1334 audit(1696276866.720:1396): prog-id=129 op=UNLOAD Oct 2 20:01:06.739730 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42-rootfs.mount: Deactivated successfully. Oct 2 20:01:06.757220 env[1306]: time="2023-10-02T20:01:06.757168022Z" level=info msg="shim disconnected" id=5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42 Oct 2 20:01:06.757220 env[1306]: time="2023-10-02T20:01:06.757224423Z" level=warning msg="cleaning up after shim disconnected" id=5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42 namespace=k8s.io Oct 2 20:01:06.757479 env[1306]: time="2023-10-02T20:01:06.757236523Z" level=info msg="cleaning up dead shim" Oct 2 20:01:06.772468 env[1306]: time="2023-10-02T20:01:06.772424902Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3679 runtime=io.containerd.runc.v2\n" Oct 2 20:01:06.772819 env[1306]: time="2023-10-02T20:01:06.772788406Z" level=info msg="TearDown network for sandbox \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" successfully" Oct 2 20:01:06.772927 env[1306]: time="2023-10-02T20:01:06.772818006Z" level=info msg="StopPodSandbox for \"5cd8b935284732fb338b0e0cde16080c25d333f90a64b4d9716a66d57de7ef42\" returns successfully" Oct 2 20:01:06.868567 sshd[3449]: pam_unix(sshd:session): session closed for user core Oct 2 20:01:06.868000 audit[3449]: USER_END pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:06.872261 systemd[1]: sshd@29-10.200.8.17:22-10.200.12.6:52240.service: Deactivated successfully. Oct 2 20:01:06.873085 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:01:06.873250 systemd[1]: session-32.scope: Consumed 1.026s CPU time. Oct 2 20:01:06.874723 systemd-logind[1289]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:01:06.876042 systemd-logind[1289]: Removed session 32. Oct 2 20:01:06.868000 audit[3449]: CRED_DISP pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:06.904021 kernel: audit: type=1106 audit(1696276866.868:1397): pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:06.908064 kernel: audit: type=1104 audit(1696276866.868:1398): pid=3449 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:01:06.908116 kernel: audit: type=1131 audit(1696276866.870:1399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.17:22-10.200.12.6:52240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:01:06.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.17:22-10.200.12.6:52240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:01:06.972784 kubelet[2414]: I1002 20:01:06.972655 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-net\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.973430 kubelet[2414]: I1002 20:01:06.973410 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hubble-tls\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.973559 kubelet[2414]: I1002 20:01:06.973547 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-bpf-maps\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.973717 kubelet[2414]: I1002 20:01:06.973702 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-cgroup\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.973861 kubelet[2414]: I1002 20:01:06.973850 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-ipsec-secrets\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.973980 kubelet[2414]: I1002 20:01:06.973970 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-kernel\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974097 kubelet[2414]: I1002 20:01:06.974087 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-clustermesh-secrets\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974212 kubelet[2414]: I1002 20:01:06.974199 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hostproc\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974350 kubelet[2414]: I1002 20:01:06.974333 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-etc-cni-netd\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974493 kubelet[2414]: I1002 20:01:06.974477 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qd8bl\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-kube-api-access-qd8bl\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974621 kubelet[2414]: I1002 20:01:06.974606 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-config-path\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974764 kubelet[2414]: I1002 20:01:06.974750 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-run\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.974904 kubelet[2414]: I1002 20:01:06.974891 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-xtables-lock\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.975026 kubelet[2414]: I1002 20:01:06.975013 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cni-path\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.975131 kubelet[2414]: I1002 20:01:06.975107 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.975209 kubelet[2414]: I1002 20:01:06.974370 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.975209 kubelet[2414]: I1002 20:01:06.972660 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.975359 kubelet[2414]: I1002 20:01:06.975342 2414 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-lib-modules\") pod \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\" (UID: \"fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb\") " Oct 2 20:01:06.975518 kubelet[2414]: I1002 20:01:06.975501 2414 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-bpf-maps\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:06.975651 kubelet[2414]: I1002 20:01:06.975625 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-cgroup\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:06.975766 kubelet[2414]: I1002 20:01:06.975754 2414 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-net\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:06.975880 kubelet[2414]: I1002 20:01:06.975860 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.976425 kubelet[2414]: W1002 20:01:06.976381 2414 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:01:06.976962 kubelet[2414]: I1002 20:01:06.976930 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.979845 kubelet[2414]: I1002 20:01:06.979809 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:01:06.979970 kubelet[2414]: I1002 20:01:06.976524 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.979970 kubelet[2414]: I1002 20:01:06.976548 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.979970 kubelet[2414]: I1002 20:01:06.976586 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cni-path" (OuterVolumeSpecName: "cni-path") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.979970 kubelet[2414]: I1002 20:01:06.979895 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.979970 kubelet[2414]: I1002 20:01:06.979923 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hostproc" (OuterVolumeSpecName: "hostproc") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:01:06.985716 kubelet[2414]: I1002 20:01:06.983187 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:01:06.984567 systemd[1]: var-lib-kubelet-pods-fc73e0a4\x2d6018\x2d4a7b\x2db5a4\x2df6098c0cfdbb-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:01:06.984720 systemd[1]: var-lib-kubelet-pods-fc73e0a4\x2d6018\x2d4a7b\x2db5a4\x2df6098c0cfdbb-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:01:06.986460 kubelet[2414]: I1002 20:01:06.986326 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:01:06.991981 kubelet[2414]: I1002 20:01:06.989731 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:01:06.990941 systemd[1]: var-lib-kubelet-pods-fc73e0a4\x2d6018\x2d4a7b\x2db5a4\x2df6098c0cfdbb-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqd8bl.mount: Deactivated successfully. Oct 2 20:01:06.991066 systemd[1]: var-lib-kubelet-pods-fc73e0a4\x2d6018\x2d4a7b\x2db5a4\x2df6098c0cfdbb-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:01:06.992253 kubelet[2414]: I1002 20:01:06.992134 2414 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-kube-api-access-qd8bl" (OuterVolumeSpecName: "kube-api-access-qd8bl") pod "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb" (UID: "fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb"). InnerVolumeSpecName "kube-api-access-qd8bl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:01:06.999780 kubelet[2414]: I1002 20:01:06.999759 2414 scope.go:115] "RemoveContainer" containerID="32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16" Oct 2 20:01:07.002682 env[1306]: time="2023-10-02T20:01:07.002183807Z" level=info msg="RemoveContainer for \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\"" Oct 2 20:01:07.006703 systemd[1]: Removed slice kubepods-burstable-podfc73e0a4_6018_4a7b_b5a4_f6098c0cfdbb.slice. Oct 2 20:01:07.016656 env[1306]: time="2023-10-02T20:01:07.011948522Z" level=info msg="RemoveContainer for \"32441229f556602f0879f16e34188f47b2673b7738889c5a67707b86a21c3b16\" returns successfully" Oct 2 20:01:07.076927 kubelet[2414]: I1002 20:01:07.076827 2414 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-lib-modules\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.076927 kubelet[2414]: I1002 20:01:07.076918 2414 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-xtables-lock\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.076961 2414 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cni-path\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.076999 2414 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hubble-tls\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077042 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077087 2414 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077129 2414 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-clustermesh-secrets\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077170 2414 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-hostproc\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077215 2414 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-qd8bl\" (UniqueName: \"kubernetes.io/projected/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-kube-api-access-qd8bl\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077259 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-config-path\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077323 2414 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-cilium-run\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.077382 kubelet[2414]: I1002 20:01:07.077341 2414 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb-etc-cni-netd\") on node \"ci-3510.3.0-a-74ed58c6f8\" DevicePath \"\"" Oct 2 20:01:07.080848 kubelet[2414]: I1002 20:01:07.080817 2414 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb path="/var/lib/kubelet/pods/fc73e0a4-6018-4a7b-b5a4-f6098c0cfdbb/volumes" Oct 2 20:01:08.276623 kubelet[2414]: E1002 20:01:08.276577 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:11.897000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.897000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.929364 kernel: audit: type=1400 audit(1696276871.897:1400): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.929456 kernel: audit: type=1400 audit(1696276871.897:1401): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.929480 kernel: audit: type=1300 audit(1696276871.897:1401): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e40320 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:11.897000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e40320 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:11.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:11.966727 kernel: audit: type=1327 audit(1696276871.897:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:11.898000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.898000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e40560 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:12.001050 kernel: audit: type=1400 audit(1696276871.898:1402): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:12.001130 kernel: audit: type=1300 audit(1696276871.898:1402): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e40560 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:12.001160 kernel: audit: type=1327 audit(1696276871.898:1402): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:11.898000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:11.897000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001461920 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:12.036923 kernel: audit: type=1300 audit(1696276871.897:1400): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001461920 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:11.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:12.037696 kernel: audit: type=1327 audit(1696276871.897:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:11.902000 audit[2281]: AVC avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:12.070370 kernel: audit: type=1400 audit(1696276871.902:1403): avc: denied { watch } for pid=2281 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:11.902000 audit[2281]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e40920 a2=fc6 a3=0 items=0 ppid=2122 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:11.902000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:13.277488 kubelet[2414]: E1002 20:01:13.277447 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:18.278560 kubelet[2414]: E1002 20:01:18.278512 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:20.480959 systemd[1]: cri-containerd-40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b.scope: Deactivated successfully. Oct 2 20:01:20.481306 systemd[1]: cri-containerd-40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b.scope: Consumed 5.355s CPU time. Oct 2 20:01:20.487000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:01:20.492661 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:01:20.492755 kernel: audit: type=1334 audit(1696276880.487:1404): prog-id=81 op=UNLOAD Oct 2 20:01:20.487000 audit: BPF prog-id=97 op=UNLOAD Oct 2 20:01:20.503775 kernel: audit: type=1334 audit(1696276880.487:1405): prog-id=97 op=UNLOAD Oct 2 20:01:20.505434 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b-rootfs.mount: Deactivated successfully. Oct 2 20:01:20.580027 env[1306]: time="2023-10-02T20:01:20.579969490Z" level=info msg="shim disconnected" id=40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b Oct 2 20:01:20.580675 env[1306]: time="2023-10-02T20:01:20.580644597Z" level=warning msg="cleaning up after shim disconnected" id=40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b namespace=k8s.io Oct 2 20:01:20.580836 env[1306]: time="2023-10-02T20:01:20.580815799Z" level=info msg="cleaning up dead shim" Oct 2 20:01:20.590239 env[1306]: time="2023-10-02T20:01:20.590207304Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3710 runtime=io.containerd.runc.v2\n" Oct 2 20:01:21.029390 kubelet[2414]: I1002 20:01:21.029352 2414 scope.go:115] "RemoveContainer" containerID="40e25e55cda3d19d9d0601ccd83f6ec59c09667abcc63b8c01f8fe5ded92cc0b" Oct 2 20:01:21.032186 env[1306]: time="2023-10-02T20:01:21.032128718Z" level=info msg="CreateContainer within sandbox \"ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:01:21.074716 env[1306]: time="2023-10-02T20:01:21.074663589Z" level=info msg="CreateContainer within sandbox \"ec959098b92a4b67aceeba44b65b7160089e1f4e16f3233ae16d73a580a75251\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"1252185749b3cb7eb62385876c8e682e44ba262b9f3114881926de0bc1b0014d\"" Oct 2 20:01:21.075276 env[1306]: time="2023-10-02T20:01:21.075228396Z" level=info msg="StartContainer for \"1252185749b3cb7eb62385876c8e682e44ba262b9f3114881926de0bc1b0014d\"" Oct 2 20:01:21.101742 systemd[1]: Started cri-containerd-1252185749b3cb7eb62385876c8e682e44ba262b9f3114881926de0bc1b0014d.scope. Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130769 kernel: audit: type=1400 audit(1696276881.115:1406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.155962 kernel: audit: type=1400 audit(1696276881.115:1407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.156363 kernel: audit: type=1400 audit(1696276881.115:1408): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.156394 kernel: audit: type=1400 audit(1696276881.115:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.189153 kernel: audit: type=1400 audit(1696276881.115:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.192681 kernel: audit: type=1400 audit(1696276881.115:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.227694 kernel: audit: type=1400 audit(1696276881.115:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.227786 kernel: audit: type=1400 audit(1696276881.115:1413): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit: BPF prog-id=130 op=LOAD Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2122 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:21.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353231383537343962336362376562363233383538373663386536 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2122 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:21.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353231383537343962336362376562363233383538373663386536 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.116000 audit: BPF prog-id=131 op=LOAD Oct 2 20:01:21.116000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003a7440 items=0 ppid=2122 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:21.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353231383537343962336362376562363233383538373663386536 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit: BPF prog-id=132 op=LOAD Oct 2 20:01:21.130000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003a7488 items=0 ppid=2122 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:21.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353231383537343962336362376562363233383538373663386536 Oct 2 20:01:21.130000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:01:21.130000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:21.130000 audit: BPF prog-id=133 op=LOAD Oct 2 20:01:21.130000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003a7898 items=0 ppid=2122 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:21.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353231383537343962336362376562363233383538373663386536 Oct 2 20:01:21.248263 env[1306]: time="2023-10-02T20:01:21.248162512Z" level=info msg="StartContainer for \"1252185749b3cb7eb62385876c8e682e44ba262b9f3114881926de0bc1b0014d\" returns successfully" Oct 2 20:01:21.506040 systemd[1]: run-containerd-runc-k8s.io-1252185749b3cb7eb62385876c8e682e44ba262b9f3114881926de0bc1b0014d-runc.COgeOW.mount: Deactivated successfully. Oct 2 20:01:22.151000 audit[3741]: AVC avc: denied { watch } for pid=3741 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:22.151000 audit[3741]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00102a000 a2=fc6 a3=0 items=0 ppid=2122 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:22.151000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:22.151000 audit[3741]: AVC avc: denied { watch } for pid=3741 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6877 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:01:22.151000 audit[3741]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000058a60 a2=fc6 a3=0 items=0 ppid=2122 pid=3741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c761 key=(null) Oct 2 20:01:22.151000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:01:22.368487 kubelet[2414]: E1002 20:01:22.368432 2414 controller.go:193] "Failed to update lease" err="Put \"https://10.200.8.17:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-74ed58c6f8?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:01:22.869532 kubelet[2414]: E1002 20:01:22.869487 2414 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.17:33804->10.200.8.11:2379: read: connection timed out" Oct 2 20:01:22.878046 systemd[1]: cri-containerd-228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e.scope: Deactivated successfully. Oct 2 20:01:22.878380 systemd[1]: cri-containerd-228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e.scope: Consumed 2.265s CPU time. Oct 2 20:01:22.881000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:01:22.881000 audit: BPF prog-id=101 op=UNLOAD Oct 2 20:01:22.899192 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e-rootfs.mount: Deactivated successfully. Oct 2 20:01:22.932990 env[1306]: time="2023-10-02T20:01:22.932931037Z" level=info msg="shim disconnected" id=228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e Oct 2 20:01:22.932990 env[1306]: time="2023-10-02T20:01:22.932990638Z" level=warning msg="cleaning up after shim disconnected" id=228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e namespace=k8s.io Oct 2 20:01:22.933516 env[1306]: time="2023-10-02T20:01:22.933003438Z" level=info msg="cleaning up dead shim" Oct 2 20:01:22.941039 env[1306]: time="2023-10-02T20:01:22.941003726Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:01:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3772 runtime=io.containerd.runc.v2\n" Oct 2 20:01:23.036943 kubelet[2414]: I1002 20:01:23.036909 2414 scope.go:115] "RemoveContainer" containerID="228088c5e7416e568ff36041bde0e72fc6a041c7d7f213528d3014f6e3071b0e" Oct 2 20:01:23.039319 env[1306]: time="2023-10-02T20:01:23.039252009Z" level=info msg="CreateContainer within sandbox \"30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:01:23.066272 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount452845387.mount: Deactivated successfully. Oct 2 20:01:23.078797 env[1306]: time="2023-10-02T20:01:23.078751743Z" level=info msg="CreateContainer within sandbox \"30a3780904301af3088fa126aaf9f0b5fba9a57bf0f09b480966db63ebd7c3e8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"70bdbd13da0c6e427601bb89c1bf3f9f7c18023b8d0eb62e821bcd2c7e10776d\"" Oct 2 20:01:23.079368 env[1306]: time="2023-10-02T20:01:23.079339750Z" level=info msg="StartContainer for \"70bdbd13da0c6e427601bb89c1bf3f9f7c18023b8d0eb62e821bcd2c7e10776d\"" Oct 2 20:01:23.100767 systemd[1]: Started cri-containerd-70bdbd13da0c6e427601bb89c1bf3f9f7c18023b8d0eb62e821bcd2c7e10776d.scope. Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.116000 audit: BPF prog-id=134 op=LOAD Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2146 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:23.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626462643133646130633665343237363031626238396331626633 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2146 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:23.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626462643133646130633665343237363031626238396331626633 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit: BPF prog-id=135 op=LOAD Oct 2 20:01:23.117000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025df60 items=0 ppid=2146 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:23.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626462643133646130633665343237363031626238396331626633 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit: BPF prog-id=136 op=LOAD Oct 2 20:01:23.117000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025dfa8 items=0 ppid=2146 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:23.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626462643133646130633665343237363031626238396331626633 Oct 2 20:01:23.117000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:01:23.117000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:01:23.117000 audit: BPF prog-id=137 op=LOAD Oct 2 20:01:23.117000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ba3b8 items=0 ppid=2146 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:01:23.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626462643133646130633665343237363031626238396331626633 Oct 2 20:01:23.157415 env[1306]: time="2023-10-02T20:01:23.157349407Z" level=info msg="StartContainer for \"70bdbd13da0c6e427601bb89c1bf3f9f7c18023b8d0eb62e821bcd2c7e10776d\" returns successfully" Oct 2 20:01:23.280913 kubelet[2414]: E1002 20:01:23.280885 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:25.236959 kubelet[2414]: E1002 20:01:25.236794 2414 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-74ed58c6f8.178a62d491869893", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-74ed58c6f8", UID:"40db5e4689956c6d42300e87a39caec7", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-74ed58c6f8"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 1, 14, 772519059, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 1, 14, 772519059, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.17:33616->10.200.8.11:2379: read: connection timed out' (will not retry!) Oct 2 20:01:28.283007 kubelet[2414]: E1002 20:01:28.282959 2414 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:01:31.252907 kubelet[2414]: I1002 20:01:31.252858 2414 status_manager.go:809] "Failed to get status for pod" podUID=40db5e4689956c6d42300e87a39caec7 pod="kube-system/kube-apiserver-ci-3510.3.0-a-74ed58c6f8" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.17:33706->10.200.8.11:2379: read: connection timed out"