Oct 2 20:09:49.037177 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:09:49.037204 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:49.037214 kernel: BIOS-provided physical RAM map: Oct 2 20:09:49.037221 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 20:09:49.037229 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 20:09:49.037234 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 20:09:49.037243 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 20:09:49.037252 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 20:09:49.037258 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 20:09:49.037263 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 20:09:49.037271 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 20:09:49.037278 kernel: printk: bootconsole [earlyser0] enabled Oct 2 20:09:49.037284 kernel: NX (Execute Disable) protection: active Oct 2 20:09:49.037289 kernel: efi: EFI v2.70 by Microsoft Oct 2 20:09:49.037302 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 20:09:49.037309 kernel: random: crng init done Oct 2 20:09:49.037315 kernel: SMBIOS 3.1.0 present. Oct 2 20:09:49.037324 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 20:09:49.037330 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 20:09:49.037336 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 20:09:49.037345 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 20:09:49.037352 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 20:09:49.037360 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 20:09:49.037370 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 20:09:49.037377 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 20:09:49.037383 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 20:09:49.037392 kernel: tsc: Detected 2593.908 MHz processor Oct 2 20:09:49.037400 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:09:49.037407 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:09:49.037414 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 20:09:49.037422 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:09:49.037429 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 20:09:49.037438 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 20:09:49.037446 kernel: Using GB pages for direct mapping Oct 2 20:09:49.037452 kernel: Secure boot disabled Oct 2 20:09:49.037459 kernel: ACPI: Early table checksum verification disabled Oct 2 20:09:49.037468 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 20:09:49.037474 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037481 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037490 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:09:49.037502 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 20:09:49.037510 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037519 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037525 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037532 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037542 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037551 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037559 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:49.037568 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 20:09:49.037575 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 20:09:49.037583 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 20:09:49.037592 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 20:09:49.037599 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 20:09:49.037608 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 20:09:49.037620 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 20:09:49.037628 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 20:09:49.037638 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 20:09:49.037645 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 20:09:49.037654 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:09:49.037662 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:09:49.037671 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 20:09:49.037677 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 20:09:49.037685 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 20:09:49.037697 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 20:09:49.037704 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 20:09:49.037712 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 20:09:49.037721 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 20:09:49.037727 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 20:09:49.037735 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 20:09:49.037744 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 20:09:49.037751 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 20:09:49.037758 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 20:09:49.037769 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 20:09:49.037776 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 20:09:49.037784 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 20:09:49.037793 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 20:09:49.037799 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 20:09:49.037807 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 20:09:49.037816 kernel: Zone ranges: Oct 2 20:09:49.037823 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:09:49.037830 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 20:09:49.037841 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:09:49.037848 kernel: Movable zone start for each node Oct 2 20:09:49.037855 kernel: Early memory node ranges Oct 2 20:09:49.037865 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 20:09:49.037872 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 20:09:49.037878 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 20:09:49.037888 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:09:49.037895 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 20:09:49.037902 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:09:49.037913 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 20:09:49.037920 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 20:09:49.037927 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 20:09:49.037936 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 20:09:49.037944 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:09:49.037950 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:09:49.037960 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:09:49.037967 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 20:09:49.037974 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:09:49.037986 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 20:09:49.037993 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 20:09:49.038000 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:09:49.038010 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:09:49.038016 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:09:49.038023 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:09:49.038041 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:09:49.038050 kernel: Hyper-V: PV spinlocks enabled Oct 2 20:09:49.038058 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:09:49.038069 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 20:09:49.038078 kernel: Policy zone: Normal Oct 2 20:09:49.038087 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:49.038096 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:09:49.038106 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 20:09:49.038113 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:09:49.038121 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:09:49.038130 kernel: Memory: 8073736K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 313464K reserved, 0K cma-reserved) Oct 2 20:09:49.038139 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:09:49.038149 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:09:49.038163 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:09:49.038172 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:09:49.038182 kernel: rcu: RCU event tracing is enabled. Oct 2 20:09:49.038191 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:09:49.038198 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:09:49.038206 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:09:49.038216 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:09:49.038223 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:09:49.038231 kernel: Using NULL legacy PIC Oct 2 20:09:49.038242 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 20:09:49.038250 kernel: Console: colour dummy device 80x25 Oct 2 20:09:49.038259 kernel: printk: console [tty1] enabled Oct 2 20:09:49.038267 kernel: printk: console [ttyS0] enabled Oct 2 20:09:49.038274 kernel: printk: bootconsole [earlyser0] disabled Oct 2 20:09:49.038287 kernel: ACPI: Core revision 20210730 Oct 2 20:09:49.038294 kernel: Failed to register legacy timer interrupt Oct 2 20:09:49.038301 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:09:49.038312 kernel: Hyper-V: Using IPI hypercalls Oct 2 20:09:49.038319 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593908) Oct 2 20:09:49.038327 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:09:49.038337 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:09:49.038344 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:09:49.038352 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:09:49.038361 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:09:49.038371 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:09:49.038380 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:09:49.038388 kernel: RETBleed: Vulnerable Oct 2 20:09:49.038395 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:09:49.038404 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:09:49.038412 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:09:49.038419 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:09:49.038428 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:09:49.038436 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:09:49.038444 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:09:49.038455 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:09:49.038464 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:09:49.038471 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:09:49.038480 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:09:49.038488 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 20:09:49.038498 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 20:09:49.038506 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 20:09:49.038517 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 20:09:49.038524 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:09:49.038534 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:09:49.038542 kernel: LSM: Security Framework initializing Oct 2 20:09:49.038550 kernel: SELinux: Initializing. Oct 2 20:09:49.038562 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:09:49.038569 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:09:49.038578 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:09:49.038587 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:09:49.038594 kernel: signal: max sigframe size: 3632 Oct 2 20:09:49.038602 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:09:49.038612 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:09:49.038619 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:09:49.038627 kernel: x86: Booting SMP configuration: Oct 2 20:09:49.038637 kernel: .... node #0, CPUs: #1 Oct 2 20:09:49.038649 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 20:09:49.038657 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:09:49.038671 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:09:49.038682 kernel: smpboot: Max logical packages: 1 Oct 2 20:09:49.038690 kernel: smpboot: Total of 2 processors activated (10375.63 BogoMIPS) Oct 2 20:09:49.038701 kernel: devtmpfs: initialized Oct 2 20:09:49.038712 kernel: x86/mm: Memory block size: 128MB Oct 2 20:09:49.038723 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 20:09:49.038739 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:09:49.038747 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:09:49.038758 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:09:49.038766 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:09:49.038776 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:09:49.038785 kernel: audit: type=2000 audit(1696277388.027:1): state=initialized audit_enabled=0 res=1 Oct 2 20:09:49.038794 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:09:49.038803 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:09:49.038811 kernel: cpuidle: using governor menu Oct 2 20:09:49.038822 kernel: ACPI: bus type PCI registered Oct 2 20:09:49.038833 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:09:49.038840 kernel: dca service started, version 1.12.1 Oct 2 20:09:49.038848 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:09:49.038858 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:09:49.038866 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:09:49.038875 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:09:49.038885 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:09:49.038894 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:09:49.038906 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:09:49.038914 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:09:49.038925 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:09:49.038933 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:09:49.038943 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:09:49.038956 kernel: ACPI: Interpreter enabled Oct 2 20:09:49.038965 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:09:49.038974 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:09:49.038983 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:09:49.038993 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 20:09:49.039002 kernel: iommu: Default domain type: Translated Oct 2 20:09:49.039011 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:09:49.039022 kernel: vgaarb: loaded Oct 2 20:09:49.044048 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:09:49.044069 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:09:49.044078 kernel: PTP clock support registered Oct 2 20:09:49.044088 kernel: Registered efivars operations Oct 2 20:09:49.044099 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:09:49.044106 kernel: PCI: System does not support PCI Oct 2 20:09:49.044120 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 20:09:49.044129 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:09:49.044138 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:09:49.044146 kernel: pnp: PnP ACPI init Oct 2 20:09:49.044156 kernel: pnp: PnP ACPI: found 3 devices Oct 2 20:09:49.044165 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:09:49.044174 kernel: NET: Registered PF_INET protocol family Oct 2 20:09:49.044181 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:09:49.044194 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 20:09:49.044204 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:09:49.044212 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:09:49.044222 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 20:09:49.044231 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 20:09:49.044240 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:09:49.044248 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:09:49.044258 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:09:49.044268 kernel: NET: Registered PF_XDP protocol family Oct 2 20:09:49.044277 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:09:49.044288 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 20:09:49.044297 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 20:09:49.044306 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:09:49.044313 kernel: Initialise system trusted keyrings Oct 2 20:09:49.044323 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 20:09:49.044332 kernel: Key type asymmetric registered Oct 2 20:09:49.044340 kernel: Asymmetric key parser 'x509' registered Oct 2 20:09:49.044348 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:09:49.044359 kernel: io scheduler mq-deadline registered Oct 2 20:09:49.044368 kernel: io scheduler kyber registered Oct 2 20:09:49.044377 kernel: io scheduler bfq registered Oct 2 20:09:49.044384 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:09:49.044395 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:09:49.044404 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:09:49.044412 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 20:09:49.044420 kernel: i8042: PNP: No PS/2 controller found. Oct 2 20:09:49.044559 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 20:09:49.044655 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T20:09:48 UTC (1696277388) Oct 2 20:09:49.044741 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 20:09:49.044752 kernel: fail to initialize ptp_kvm Oct 2 20:09:49.044761 kernel: intel_pstate: CPU model not supported Oct 2 20:09:49.044771 kernel: efifb: probing for efifb Oct 2 20:09:49.044779 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:09:49.044787 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:09:49.044797 kernel: efifb: scrolling: redraw Oct 2 20:09:49.044810 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:09:49.044817 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:09:49.044826 kernel: fb0: EFI VGA frame buffer device Oct 2 20:09:49.044836 kernel: pstore: Registered efi as persistent store backend Oct 2 20:09:49.044855 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:09:49.044866 kernel: Segment Routing with IPv6 Oct 2 20:09:49.044874 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:09:49.044884 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:09:49.044891 kernel: Key type dns_resolver registered Oct 2 20:09:49.044904 kernel: IPI shorthand broadcast: enabled Oct 2 20:09:49.044913 kernel: sched_clock: Marking stable (803504900, 23757500)->(1064429400, -237167000) Oct 2 20:09:49.044921 kernel: registered taskstats version 1 Oct 2 20:09:49.044929 kernel: Loading compiled-in X.509 certificates Oct 2 20:09:49.044936 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:09:49.044943 kernel: Key type .fscrypt registered Oct 2 20:09:49.044950 kernel: Key type fscrypt-provisioning registered Oct 2 20:09:49.044958 kernel: pstore: Using crash dump compression: deflate Oct 2 20:09:49.044970 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:09:49.044979 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:09:49.044987 kernel: ima: No architecture policies found Oct 2 20:09:49.044994 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:09:49.045005 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:09:49.045013 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:09:49.045023 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:09:49.045038 kernel: Run /init as init process Oct 2 20:09:49.045047 kernel: with arguments: Oct 2 20:09:49.045057 kernel: /init Oct 2 20:09:49.045069 kernel: with environment: Oct 2 20:09:49.045077 kernel: HOME=/ Oct 2 20:09:49.045087 kernel: TERM=linux Oct 2 20:09:49.045097 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:09:49.045107 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:09:49.045117 systemd[1]: Detected virtualization microsoft. Oct 2 20:09:49.045125 systemd[1]: Detected architecture x86-64. Oct 2 20:09:49.045134 systemd[1]: Running in initrd. Oct 2 20:09:49.045142 systemd[1]: No hostname configured, using default hostname. Oct 2 20:09:49.045153 systemd[1]: Hostname set to . Oct 2 20:09:49.045161 systemd[1]: Initializing machine ID from random generator. Oct 2 20:09:49.045169 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:09:49.045179 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:09:49.045187 systemd[1]: Reached target cryptsetup.target. Oct 2 20:09:49.045197 systemd[1]: Reached target paths.target. Oct 2 20:09:49.045205 systemd[1]: Reached target slices.target. Oct 2 20:09:49.045217 systemd[1]: Reached target swap.target. Oct 2 20:09:49.045225 systemd[1]: Reached target timers.target. Oct 2 20:09:49.045233 systemd[1]: Listening on iscsid.socket. Oct 2 20:09:49.045241 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:09:49.045248 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:09:49.045256 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:09:49.045267 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:09:49.045276 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:09:49.045288 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:09:49.045296 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:09:49.045303 systemd[1]: Reached target sockets.target. Oct 2 20:09:49.045315 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:09:49.045323 systemd[1]: Finished network-cleanup.service. Oct 2 20:09:49.045331 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:09:49.045339 systemd[1]: Starting systemd-journald.service... Oct 2 20:09:49.045346 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:09:49.045359 systemd[1]: Starting systemd-resolved.service... Oct 2 20:09:49.045367 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:09:49.045377 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:09:49.045386 kernel: audit: type=1130 audit(1696277389.039:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.045397 systemd-journald[182]: Journal started Oct 2 20:09:49.045445 systemd-journald[182]: Runtime Journal (/run/log/journal/ec637140046a444c84aeeaf526459b9e) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:09:49.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.022074 systemd-modules-load[183]: Inserted module 'overlay' Oct 2 20:09:49.055404 systemd[1]: Started systemd-journald.service. Oct 2 20:09:49.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.063073 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:09:49.081779 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:09:49.081802 kernel: audit: type=1130 audit(1696277389.061:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.087617 systemd-modules-load[183]: Inserted module 'br_netfilter' Oct 2 20:09:49.098696 kernel: Bridge firewalling registered Oct 2 20:09:49.098963 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:09:49.104193 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:09:49.112960 kernel: SCSI subsystem initialized Oct 2 20:09:49.115285 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:09:49.126669 systemd-resolved[184]: Positive Trust Anchors: Oct 2 20:09:49.126691 systemd-resolved[184]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:09:49.126734 systemd-resolved[184]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:09:49.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.148394 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:09:49.186764 kernel: audit: type=1130 audit(1696277389.098:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.186789 kernel: audit: type=1130 audit(1696277389.102:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.186801 kernel: audit: type=1130 audit(1696277389.162:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.186812 kernel: audit: type=1130 audit(1696277389.184:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.150405 systemd-resolved[184]: Defaulting to hostname 'linux'. Oct 2 20:09:49.162280 systemd[1]: Started systemd-resolved.service. Oct 2 20:09:49.184729 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:09:49.198151 systemd[1]: Reached target nss-lookup.target. Oct 2 20:09:49.201659 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:09:49.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.227141 kernel: audit: type=1130 audit(1696277389.197:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.227176 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:09:49.227904 dracut-cmdline[199]: dracut-dracut-053 Oct 2 20:09:49.235948 dracut-cmdline[199]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:49.252609 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:09:49.259058 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:09:49.262236 systemd-modules-load[183]: Inserted module 'dm_multipath' Oct 2 20:09:49.263187 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:09:49.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.284060 kernel: audit: type=1130 audit(1696277389.270:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.284273 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:09:49.297348 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:09:49.314354 kernel: audit: type=1130 audit(1696277389.299:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.319049 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:09:49.333056 kernel: iscsi: registered transport (tcp) Oct 2 20:09:49.357909 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:09:49.357966 kernel: QLogic iSCSI HBA Driver Oct 2 20:09:49.386755 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:09:49.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.390114 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:09:49.445056 kernel: raid6: avx512x4 gen() 18048 MB/s Oct 2 20:09:49.465045 kernel: raid6: avx512x4 xor() 8288 MB/s Oct 2 20:09:49.485041 kernel: raid6: avx512x2 gen() 18181 MB/s Oct 2 20:09:49.505045 kernel: raid6: avx512x2 xor() 29171 MB/s Oct 2 20:09:49.525040 kernel: raid6: avx512x1 gen() 18288 MB/s Oct 2 20:09:49.545042 kernel: raid6: avx512x1 xor() 26138 MB/s Oct 2 20:09:49.566042 kernel: raid6: avx2x4 gen() 18131 MB/s Oct 2 20:09:49.586044 kernel: raid6: avx2x4 xor() 7728 MB/s Oct 2 20:09:49.606042 kernel: raid6: avx2x2 gen() 17983 MB/s Oct 2 20:09:49.626045 kernel: raid6: avx2x2 xor() 21163 MB/s Oct 2 20:09:49.646040 kernel: raid6: avx2x1 gen() 13776 MB/s Oct 2 20:09:49.666042 kernel: raid6: avx2x1 xor() 18687 MB/s Oct 2 20:09:49.687045 kernel: raid6: sse2x4 gen() 11222 MB/s Oct 2 20:09:49.707043 kernel: raid6: sse2x4 xor() 6856 MB/s Oct 2 20:09:49.727041 kernel: raid6: sse2x2 gen() 12104 MB/s Oct 2 20:09:49.747058 kernel: raid6: sse2x2 xor() 7238 MB/s Oct 2 20:09:49.767041 kernel: raid6: sse2x1 gen() 11351 MB/s Oct 2 20:09:49.790093 kernel: raid6: sse2x1 xor() 5590 MB/s Oct 2 20:09:49.790117 kernel: raid6: using algorithm avx512x1 gen() 18288 MB/s Oct 2 20:09:49.790129 kernel: raid6: .... xor() 26138 MB/s, rmw enabled Oct 2 20:09:49.797852 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:09:49.814058 kernel: xor: automatically using best checksumming function avx Oct 2 20:09:49.909059 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:09:49.917493 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:09:49.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.922000 audit: BPF prog-id=7 op=LOAD Oct 2 20:09:49.922000 audit: BPF prog-id=8 op=LOAD Oct 2 20:09:49.923191 systemd[1]: Starting systemd-udevd.service... Oct 2 20:09:49.938148 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 20:09:49.942873 systemd[1]: Started systemd-udevd.service. Oct 2 20:09:49.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.951698 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:09:49.967935 dracut-pre-trigger[402]: rd.md=0: removing MD RAID activation Oct 2 20:09:49.998715 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:09:50.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.002165 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:09:50.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.038428 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:09:50.082079 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:09:50.096062 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 20:09:50.111048 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:09:50.148053 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:09:50.152050 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:09:50.158071 kernel: AES CTR mode by8 optimization enabled Oct 2 20:09:50.164047 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:09:50.169584 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:09:50.169616 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:09:50.178233 kernel: scsi host0: storvsc_host_t Oct 2 20:09:50.178416 kernel: scsi host1: storvsc_host_t Oct 2 20:09:50.178442 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:09:50.191058 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:09:50.204061 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:09:50.216160 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:09:50.216206 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:09:50.231538 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:09:50.231796 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:09:50.233051 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:09:50.233218 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:09:50.241282 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:09:50.241461 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:09:50.249963 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:09:50.250198 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:09:50.255048 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:09:50.261194 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:09:50.370537 kernel: hv_netvsc 000d3ab7-4f23-000d-3ab7-4f23000d3ab7 eth0: VF slot 1 added Oct 2 20:09:50.380058 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:09:50.386072 kernel: hv_pci f3868ec3-7d69-46ed-a304-cfefbecff871: PCI VMBus probing: Using version 0x10004 Oct 2 20:09:50.398748 kernel: hv_pci f3868ec3-7d69-46ed-a304-cfefbecff871: PCI host bridge to bus 7d69:00 Oct 2 20:09:50.398930 kernel: pci_bus 7d69:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 20:09:50.399081 kernel: pci_bus 7d69:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:09:50.410081 kernel: pci 7d69:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 20:09:50.422125 kernel: pci 7d69:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:09:50.443260 kernel: pci 7d69:00:02.0: enabling Extended Tags Oct 2 20:09:50.466072 kernel: pci 7d69:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 7d69:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 20:09:50.477295 kernel: pci_bus 7d69:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:09:50.477552 kernel: pci 7d69:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:09:50.578058 kernel: mlx5_core 7d69:00:02.0: firmware version: 14.30.1224 Oct 2 20:09:50.618198 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:09:50.646059 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (446) Oct 2 20:09:50.666513 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:09:50.742053 kernel: mlx5_core 7d69:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 20:09:50.787943 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:09:50.791086 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:09:50.802092 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:09:50.803160 systemd[1]: Starting disk-uuid.service... Oct 2 20:09:50.909362 kernel: mlx5_core 7d69:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 20:09:50.909603 kernel: mlx5_core 7d69:00:02.0: mlx5e_tc_post_act_init:40:(pid 187): firmware level support is missing Oct 2 20:09:50.922742 kernel: hv_netvsc 000d3ab7-4f23-000d-3ab7-4f23000d3ab7 eth0: VF registering: eth1 Oct 2 20:09:50.922957 kernel: mlx5_core 7d69:00:02.0 eth1: joined to eth0 Oct 2 20:09:50.943054 kernel: mlx5_core 7d69:00:02.0 enP32105s1: renamed from eth1 Oct 2 20:09:51.824410 disk-uuid[548]: The operation has completed successfully. Oct 2 20:09:51.827530 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:09:51.897074 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:09:51.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:51.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:51.897178 systemd[1]: Finished disk-uuid.service. Oct 2 20:09:51.908559 systemd[1]: Starting verity-setup.service... Oct 2 20:09:51.942060 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:09:52.103860 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:09:52.107025 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:09:52.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.113682 systemd[1]: Finished verity-setup.service. Oct 2 20:09:52.187926 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:09:52.193723 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:09:52.190169 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:09:52.191707 systemd[1]: Starting ignition-setup.service... Oct 2 20:09:52.194806 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:09:52.223180 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:52.223230 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:52.223247 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:52.269169 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:09:52.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.275000 audit: BPF prog-id=9 op=LOAD Oct 2 20:09:52.275813 systemd[1]: Starting systemd-networkd.service... Oct 2 20:09:52.281461 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:09:52.300068 systemd-networkd[823]: lo: Link UP Oct 2 20:09:52.300078 systemd-networkd[823]: lo: Gained carrier Oct 2 20:09:52.304269 systemd-networkd[823]: Enumeration completed Oct 2 20:09:52.304365 systemd[1]: Started systemd-networkd.service. Oct 2 20:09:52.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.307973 systemd-networkd[823]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:09:52.310863 systemd[1]: Reached target network.target. Oct 2 20:09:52.319317 systemd[1]: Starting iscsiuio.service... Oct 2 20:09:52.328327 systemd[1]: Started iscsiuio.service. Oct 2 20:09:52.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.332210 systemd[1]: Starting iscsid.service... Oct 2 20:09:52.337095 iscsid[828]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:09:52.337095 iscsid[828]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:09:52.337095 iscsid[828]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:09:52.337095 iscsid[828]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:09:52.362643 iscsid[828]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:09:52.362643 iscsid[828]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:09:52.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.358621 systemd[1]: Started iscsid.service. Oct 2 20:09:52.366025 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:09:52.380081 kernel: mlx5_core 7d69:00:02.0 enP32105s1: Link up Oct 2 20:09:52.382902 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:09:52.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.386074 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:09:52.395439 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:09:52.400164 systemd[1]: Reached target remote-fs.target. Oct 2 20:09:52.405249 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:09:52.413671 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:09:52.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.421549 systemd[1]: Finished ignition-setup.service. Oct 2 20:09:52.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.426941 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:09:52.464192 kernel: hv_netvsc 000d3ab7-4f23-000d-3ab7-4f23000d3ab7 eth0: Data path switched to VF: enP32105s1 Oct 2 20:09:52.464425 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:09:52.464913 systemd-networkd[823]: enP32105s1: Link UP Oct 2 20:09:52.465227 systemd-networkd[823]: eth0: Link UP Oct 2 20:09:52.465693 systemd-networkd[823]: eth0: Gained carrier Oct 2 20:09:52.474217 systemd-networkd[823]: enP32105s1: Gained carrier Oct 2 20:09:52.509132 systemd-networkd[823]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:09:53.538251 systemd-networkd[823]: eth0: Gained IPv6LL Oct 2 20:09:55.049542 ignition[843]: Ignition 2.14.0 Oct 2 20:09:55.049556 ignition[843]: Stage: fetch-offline Oct 2 20:09:55.049637 ignition[843]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:55.049679 ignition[843]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:55.143204 ignition[843]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:55.146230 ignition[843]: parsed url from cmdline: "" Oct 2 20:09:55.146237 ignition[843]: no config URL provided Oct 2 20:09:55.146247 ignition[843]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:09:55.147608 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:09:55.160989 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:09:55.161041 kernel: audit: type=1130 audit(1696277395.156:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.146263 ignition[843]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:09:55.157070 systemd[1]: Starting ignition-fetch.service... Oct 2 20:09:55.146277 ignition[843]: failed to fetch config: resource requires networking Oct 2 20:09:55.146517 ignition[843]: Ignition finished successfully Oct 2 20:09:55.165852 ignition[849]: Ignition 2.14.0 Oct 2 20:09:55.165857 ignition[849]: Stage: fetch Oct 2 20:09:55.165963 ignition[849]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:55.165987 ignition[849]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:55.169269 ignition[849]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:55.170777 ignition[849]: parsed url from cmdline: "" Oct 2 20:09:55.170783 ignition[849]: no config URL provided Oct 2 20:09:55.170807 ignition[849]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:09:55.170819 ignition[849]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:09:55.170854 ignition[849]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:09:55.202885 ignition[849]: GET result: OK Oct 2 20:09:55.202900 ignition[849]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 20:09:55.303491 ignition[849]: opening config device: "/dev/sr0" Oct 2 20:09:55.303808 ignition[849]: getting drive status for "/dev/sr0" Oct 2 20:09:55.303854 ignition[849]: drive status: OK Oct 2 20:09:55.303893 ignition[849]: mounting config device Oct 2 20:09:55.303919 ignition[849]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure799454523" Oct 2 20:09:55.327069 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 20:09:55.327146 ignition[849]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure799454523" Oct 2 20:09:55.327153 ignition[849]: checking for config drive Oct 2 20:09:55.328544 systemd[1]: tmp-ignition\x2dazure799454523.mount: Deactivated successfully. Oct 2 20:09:55.327532 ignition[849]: reading config Oct 2 20:09:55.328133 ignition[849]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure799454523" Oct 2 20:09:55.328219 ignition[849]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure799454523" Oct 2 20:09:55.328234 ignition[849]: config has been read from custom data Oct 2 20:09:55.328279 ignition[849]: parsing config with SHA512: 4add3c6983de92593e854eafc9045821b5e7ea8730214a840913c43362de33f69f606243f76d1f9657544c7897e779157d91aa866481d518cef243d399d42ae7 Oct 2 20:09:55.362301 unknown[849]: fetched base config from "system" Oct 2 20:09:55.362315 unknown[849]: fetched base config from "system" Oct 2 20:09:55.362322 unknown[849]: fetched user config from "azure" Oct 2 20:09:55.380361 ignition[849]: fetch: fetch complete Oct 2 20:09:55.380374 ignition[849]: fetch: fetch passed Oct 2 20:09:55.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.382050 systemd[1]: Finished ignition-fetch.service. Oct 2 20:09:55.401268 kernel: audit: type=1130 audit(1696277395.384:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.380450 ignition[849]: Ignition finished successfully Oct 2 20:09:55.384967 systemd[1]: Starting ignition-kargs.service... Oct 2 20:09:55.409643 ignition[856]: Ignition 2.14.0 Oct 2 20:09:55.409654 ignition[856]: Stage: kargs Oct 2 20:09:55.409791 ignition[856]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:55.409823 ignition[856]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:55.414893 ignition[856]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:55.416205 ignition[856]: kargs: kargs passed Oct 2 20:09:55.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.419883 systemd[1]: Finished ignition-kargs.service. Oct 2 20:09:55.438066 kernel: audit: type=1130 audit(1696277395.421:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.416246 ignition[856]: Ignition finished successfully Oct 2 20:09:55.422898 systemd[1]: Starting ignition-disks.service... Oct 2 20:09:55.444216 ignition[862]: Ignition 2.14.0 Oct 2 20:09:55.444226 ignition[862]: Stage: disks Oct 2 20:09:55.444355 ignition[862]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:55.444388 ignition[862]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:55.447652 ignition[862]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:55.450582 ignition[862]: disks: disks passed Oct 2 20:09:55.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.451392 systemd[1]: Finished ignition-disks.service. Oct 2 20:09:55.473580 kernel: audit: type=1130 audit(1696277395.456:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.450622 ignition[862]: Ignition finished successfully Oct 2 20:09:55.469229 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:09:55.473590 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:09:55.477788 systemd[1]: Reached target local-fs.target. Oct 2 20:09:55.485837 systemd[1]: Reached target sysinit.target. Oct 2 20:09:55.489977 systemd[1]: Reached target basic.target. Oct 2 20:09:55.494715 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:09:55.543105 systemd-fsck[870]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 20:09:55.549563 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:09:55.571994 kernel: audit: type=1130 audit(1696277395.552:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.553427 systemd[1]: Mounting sysroot.mount... Oct 2 20:09:55.583050 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:09:55.583482 systemd[1]: Mounted sysroot.mount. Oct 2 20:09:55.587171 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:09:55.628639 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:09:55.634829 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:09:55.640182 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:09:55.640219 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:09:55.648332 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:09:55.678502 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:09:55.684267 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:09:55.699052 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (880) Oct 2 20:09:55.702047 initrd-setup-root[885]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:09:55.715600 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:55.715638 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:55.715654 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:55.718294 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:09:55.723726 initrd-setup-root[911]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:09:55.741148 initrd-setup-root[919]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:09:55.747817 initrd-setup-root[927]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:09:56.070810 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:09:56.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.087324 systemd[1]: Starting ignition-mount.service... Oct 2 20:09:56.092765 kernel: audit: type=1130 audit(1696277396.073:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.093113 systemd[1]: Starting sysroot-boot.service... Oct 2 20:09:56.115915 systemd[1]: Finished sysroot-boot.service. Oct 2 20:09:56.135239 kernel: audit: type=1130 audit(1696277396.118:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.135272 kernel: audit: type=1130 audit(1696277396.135:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.135354 ignition[946]: INFO : Ignition 2.14.0 Oct 2 20:09:56.135354 ignition[946]: INFO : Stage: mount Oct 2 20:09:56.135354 ignition[946]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:56.135354 ignition[946]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:56.135354 ignition[946]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:56.135354 ignition[946]: INFO : mount: mount passed Oct 2 20:09:56.135354 ignition[946]: INFO : Ignition finished successfully Oct 2 20:09:56.126587 systemd[1]: Finished ignition-mount.service. Oct 2 20:09:56.328947 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:09:56.329072 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:09:56.990185 coreos-metadata[879]: Oct 02 20:09:56.990 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:09:57.003679 coreos-metadata[879]: Oct 02 20:09:57.003 INFO Fetch successful Oct 2 20:09:57.036761 coreos-metadata[879]: Oct 02 20:09:57.036 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:09:57.053211 coreos-metadata[879]: Oct 02 20:09:57.053 INFO Fetch successful Oct 2 20:09:57.067801 coreos-metadata[879]: Oct 02 20:09:57.067 INFO wrote hostname ci-3510.3.0-a-7019f225b0 to /sysroot/etc/hostname Oct 2 20:09:57.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:57.069780 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:09:57.093139 kernel: audit: type=1130 audit(1696277397.074:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:57.076264 systemd[1]: Starting ignition-files.service... Oct 2 20:09:57.096386 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:09:57.111113 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (958) Oct 2 20:09:57.120169 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:57.120198 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:57.120211 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:57.128341 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:09:57.142515 ignition[977]: INFO : Ignition 2.14.0 Oct 2 20:09:57.142515 ignition[977]: INFO : Stage: files Oct 2 20:09:57.147076 ignition[977]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:57.147076 ignition[977]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:57.157130 ignition[977]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:57.168833 ignition[977]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:09:57.172386 ignition[977]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:09:57.172386 ignition[977]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:09:57.193004 ignition[977]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:09:57.196884 ignition[977]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:09:57.213900 unknown[977]: wrote ssh authorized keys file for user: core Oct 2 20:09:57.217291 ignition[977]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:09:57.217291 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:09:57.217291 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 20:09:57.566146 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:09:58.223688 ignition[977]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 20:09:58.232707 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:09:58.232707 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:09:58.232707 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:09:58.632415 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:09:59.041197 ignition[977]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 20:09:59.049966 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:09:59.049966 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:09:59.049966 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:09:59.205108 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:10:01.295296 ignition[977]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 20:10:01.304645 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:10:01.304645 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:10:01.304645 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:10:01.423101 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:10:05.848722 ignition[977]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 20:10:05.857369 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:10:05.857369 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:10:05.857369 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:10:05.983697 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:10:07.947120 ignition[977]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 20:10:07.958131 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:10:07.958131 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:10:07.958131 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:10:07.958131 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:10:07.958131 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:10:08.148442 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:10:08.616725 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:10:08.622004 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:10:08.622004 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:10:08.622004 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:10:08.622004 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:10:08.647066 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:10:08.655841 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:10:08.666469 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870044" Oct 2 20:10:08.666469 ignition[977]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870044": device or resource busy Oct 2 20:10:08.666469 ignition[977]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2870044", trying btrfs: device or resource busy Oct 2 20:10:08.666469 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870044" Oct 2 20:10:08.691936 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (977) Oct 2 20:10:08.675258 systemd[1]: mnt-oem2870044.mount: Deactivated successfully. Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2870044" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem2870044" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem2870044" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem980463958" Oct 2 20:10:08.694877 ignition[977]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem980463958": device or resource busy Oct 2 20:10:08.694877 ignition[977]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem980463958", trying btrfs: device or resource busy Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem980463958" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem980463958" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem980463958" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem980463958" Oct 2 20:10:08.694877 ignition[977]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:10:08.694877 ignition[977]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 20:10:08.694877 ignition[977]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 20:10:08.726166 kernel: audit: type=1130 audit(1696277408.702:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.691953 systemd[1]: mnt-oem980463958.mount: Deactivated successfully. Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(18): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(18): op(19): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(18): op(19): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(18): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:10:08.726699 ignition[977]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:10:08.726699 ignition[977]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:10:08.726699 ignition[977]: INFO : files: files passed Oct 2 20:10:08.948427 kernel: audit: type=1130 audit(1696277408.840:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.948465 kernel: audit: type=1130 audit(1696277408.856:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.948485 kernel: audit: type=1131 audit(1696277408.856:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.948509 kernel: audit: type=1130 audit(1696277408.908:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.948527 kernel: audit: type=1131 audit(1696277408.921:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.694980 systemd[1]: Finished ignition-files.service. Oct 2 20:10:08.950722 ignition[977]: INFO : Ignition finished successfully Oct 2 20:10:08.718299 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:10:08.955955 initrd-setup-root-after-ignition[1002]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:10:08.727224 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:10:08.785522 systemd[1]: Starting ignition-quench.service... Oct 2 20:10:08.833735 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:10:08.853936 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:10:08.854045 systemd[1]: Finished ignition-quench.service. Oct 2 20:10:08.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.856697 systemd[1]: Reached target ignition-complete.target. Oct 2 20:10:08.999510 kernel: audit: type=1130 audit(1696277408.981:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:08.888241 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:10:08.903119 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:10:08.903210 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:10:08.921870 systemd[1]: Reached target initrd-fs.target. Oct 2 20:10:08.935341 systemd[1]: Reached target initrd.target. Oct 2 20:10:08.948416 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:10:08.960358 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:10:08.977708 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:10:08.981966 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:10:09.027376 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:10:09.029918 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:10:09.034270 systemd[1]: Stopped target timers.target. Oct 2 20:10:09.038593 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:10:09.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.038730 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:10:09.060263 kernel: audit: type=1131 audit(1696277409.042:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.056007 systemd[1]: Stopped target initrd.target. Oct 2 20:10:09.060344 systemd[1]: Stopped target basic.target. Oct 2 20:10:09.064546 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:10:09.068888 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:10:09.073797 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:10:09.078538 systemd[1]: Stopped target remote-fs.target. Oct 2 20:10:09.083183 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:10:09.087542 systemd[1]: Stopped target sysinit.target. Oct 2 20:10:09.092277 systemd[1]: Stopped target local-fs.target. Oct 2 20:10:09.096305 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:10:09.100571 systemd[1]: Stopped target swap.target. Oct 2 20:10:09.105131 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:10:09.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.105277 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:10:09.127879 kernel: audit: type=1131 audit(1696277409.110:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.123818 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:10:09.127835 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:10:09.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.127971 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:10:09.151641 kernel: audit: type=1131 audit(1696277409.132:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.132406 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:10:09.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.132541 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:10:09.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.147640 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:10:09.147762 systemd[1]: Stopped ignition-files.service. Oct 2 20:10:09.169409 iscsid[828]: iscsid shutting down. Oct 2 20:10:09.151741 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:10:09.181345 ignition[1015]: INFO : Ignition 2.14.0 Oct 2 20:10:09.181345 ignition[1015]: INFO : Stage: umount Oct 2 20:10:09.181345 ignition[1015]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:10:09.181345 ignition[1015]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:10:09.151849 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:10:09.197180 ignition[1015]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:10:09.197180 ignition[1015]: INFO : umount: umount passed Oct 2 20:10:09.197180 ignition[1015]: INFO : Ignition finished successfully Oct 2 20:10:09.160062 systemd[1]: Stopping ignition-mount.service... Oct 2 20:10:09.169377 systemd[1]: Stopping iscsid.service... Oct 2 20:10:09.172110 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:10:09.178471 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:10:09.178636 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:10:09.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.218131 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:10:09.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.218296 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:10:09.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.222101 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:10:09.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.222353 systemd[1]: Stopped iscsid.service. Oct 2 20:10:09.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.226225 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:10:09.226314 systemd[1]: Stopped ignition-mount.service. Oct 2 20:10:09.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.231143 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:10:09.231232 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:10:09.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.235628 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:10:09.235677 systemd[1]: Stopped ignition-disks.service. Oct 2 20:10:09.238629 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:10:09.238679 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:10:09.243574 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:10:09.243615 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:10:09.247869 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:10:09.247921 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:10:09.254561 systemd[1]: Stopped target paths.target. Oct 2 20:10:09.257263 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:10:09.262069 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:10:09.264559 systemd[1]: Stopped target slices.target. Oct 2 20:10:09.266564 systemd[1]: Stopped target sockets.target. Oct 2 20:10:09.272150 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:10:09.272197 systemd[1]: Closed iscsid.socket. Oct 2 20:10:09.276200 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:10:09.278657 systemd[1]: Stopped ignition-setup.service. Oct 2 20:10:09.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.305334 systemd[1]: Stopping iscsiuio.service... Oct 2 20:10:09.310274 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:10:09.312984 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:10:09.315541 systemd[1]: Stopped iscsiuio.service. Oct 2 20:10:09.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.319358 systemd[1]: Stopped target network.target. Oct 2 20:10:09.323425 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:10:09.323466 systemd[1]: Closed iscsiuio.socket. Oct 2 20:10:09.333502 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:10:09.337801 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:10:09.342293 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:10:09.344847 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:10:09.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.347080 systemd-networkd[823]: eth0: DHCPv6 lease lost Oct 2 20:10:09.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.349246 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:10:09.349357 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:10:09.359924 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:10:09.362789 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:10:09.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.367000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:10:09.367518 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:10:09.369000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:10:09.367564 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:10:09.374400 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:10:09.374456 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:10:09.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.382092 systemd[1]: Stopping network-cleanup.service... Oct 2 20:10:09.386210 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:10:09.386273 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:10:09.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.393913 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:10:09.393966 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:10:09.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.400769 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:10:09.400823 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:10:09.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.408338 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:10:09.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.411372 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:10:09.411598 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:10:09.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.413996 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:10:09.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.414080 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:10:09.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.418621 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:10:09.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.418656 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:10:09.423689 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:10:09.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.423739 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:10:09.425917 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:10:09.425960 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:10:09.429918 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:10:09.429967 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:10:09.433180 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:10:09.442121 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:10:09.442173 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:10:09.445125 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:10:09.490107 kernel: hv_netvsc 000d3ab7-4f23-000d-3ab7-4f23000d3ab7 eth0: Data path switched from VF: enP32105s1 Oct 2 20:10:09.445174 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:10:09.447445 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:10:09.447487 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:10:09.453237 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:10:09.453327 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:10:09.510483 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:10:09.510607 systemd[1]: Stopped network-cleanup.service. Oct 2 20:10:09.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:09.518053 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:10:09.524464 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:10:09.535663 systemd[1]: Switching root. Oct 2 20:10:09.559977 systemd-journald[182]: Journal stopped Oct 2 20:10:22.976243 systemd-journald[182]: Received SIGTERM from PID 1 (systemd). Oct 2 20:10:22.976272 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:10:22.976286 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:10:22.976294 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:10:22.976305 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:10:22.976313 kernel: SELinux: policy capability open_perms=1 Oct 2 20:10:22.976325 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:10:22.976335 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:10:22.976343 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:10:22.976353 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:10:22.976361 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:10:22.976370 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:10:22.976381 systemd[1]: Successfully loaded SELinux policy in 298.634ms. Oct 2 20:10:22.976391 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 31.948ms. Oct 2 20:10:22.976407 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:10:22.976417 systemd[1]: Detected virtualization microsoft. Oct 2 20:10:22.976428 systemd[1]: Detected architecture x86-64. Oct 2 20:10:22.976437 systemd[1]: Detected first boot. Oct 2 20:10:22.976450 systemd[1]: Hostname set to . Oct 2 20:10:22.976460 systemd[1]: Initializing machine ID from random generator. Oct 2 20:10:22.976469 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:10:22.976481 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:10:22.976492 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:10:22.976505 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:10:22.976514 kernel: kauditd_printk_skb: 42 callbacks suppressed Oct 2 20:10:22.976526 kernel: audit: type=1334 audit(1696277422.402:90): prog-id=12 op=LOAD Oct 2 20:10:22.976538 kernel: audit: type=1334 audit(1696277422.402:91): prog-id=3 op=UNLOAD Oct 2 20:10:22.976549 kernel: audit: type=1334 audit(1696277422.411:92): prog-id=13 op=LOAD Oct 2 20:10:22.976560 kernel: audit: type=1334 audit(1696277422.421:93): prog-id=14 op=LOAD Oct 2 20:10:22.976569 kernel: audit: type=1334 audit(1696277422.421:94): prog-id=4 op=UNLOAD Oct 2 20:10:22.976580 kernel: audit: type=1334 audit(1696277422.421:95): prog-id=5 op=UNLOAD Oct 2 20:10:22.976591 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:10:22.976602 kernel: audit: type=1131 audit(1696277422.422:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.976614 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:10:22.976627 kernel: audit: type=1130 audit(1696277422.461:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.976636 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:10:22.976646 kernel: audit: type=1131 audit(1696277422.461:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.976657 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:10:22.976666 kernel: audit: type=1334 audit(1696277422.461:99): prog-id=12 op=UNLOAD Oct 2 20:10:22.976677 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:10:22.976690 systemd[1]: Created slice system-getty.slice. Oct 2 20:10:22.976702 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:10:22.976715 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:10:22.976725 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:10:22.976737 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:10:22.976746 systemd[1]: Created slice user.slice. Oct 2 20:10:22.976757 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:10:22.976769 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:10:22.976779 systemd[1]: Set up automount boot.automount. Oct 2 20:10:22.976793 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:10:22.976802 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:10:22.976813 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:10:22.976824 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:10:22.976836 systemd[1]: Reached target integritysetup.target. Oct 2 20:10:22.976846 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:10:22.976858 systemd[1]: Reached target remote-fs.target. Oct 2 20:10:22.976872 systemd[1]: Reached target slices.target. Oct 2 20:10:22.976885 systemd[1]: Reached target swap.target. Oct 2 20:10:22.976895 systemd[1]: Reached target torcx.target. Oct 2 20:10:22.976904 systemd[1]: Reached target veritysetup.target. Oct 2 20:10:22.976915 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:10:22.976925 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:10:22.976934 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:10:22.976948 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:10:22.976959 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:10:22.976968 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:10:22.976979 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:10:22.976991 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:10:22.977001 systemd[1]: Mounting media.mount... Oct 2 20:10:22.977014 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:10:22.977028 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:10:22.977048 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:10:22.977057 systemd[1]: Mounting tmp.mount... Oct 2 20:10:22.977070 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:10:22.977081 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:10:22.977094 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:10:22.977104 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:10:22.977114 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:10:22.977123 systemd[1]: Starting modprobe@drm.service... Oct 2 20:10:22.977138 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:10:22.977148 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:10:22.977159 systemd[1]: Starting modprobe@loop.service... Oct 2 20:10:22.977170 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:10:22.977183 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:10:22.977196 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:10:22.977208 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:10:22.977220 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:10:22.977237 systemd[1]: Stopped systemd-journald.service. Oct 2 20:10:22.977252 kernel: loop: module loaded Oct 2 20:10:22.977265 systemd[1]: Starting systemd-journald.service... Oct 2 20:10:22.977277 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:10:22.977304 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:10:22.977319 kernel: fuse: init (API version 7.34) Oct 2 20:10:22.977330 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:10:22.977344 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:10:22.977355 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:10:22.977368 systemd[1]: Stopped verity-setup.service. Oct 2 20:10:22.977382 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:10:22.977395 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:10:22.977406 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:10:22.977417 systemd[1]: Mounted media.mount. Oct 2 20:10:22.977428 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:10:22.977438 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:10:22.977448 systemd[1]: Mounted tmp.mount. Oct 2 20:10:22.977460 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:10:22.977477 systemd-journald[1141]: Journal started Oct 2 20:10:22.977527 systemd-journald[1141]: Runtime Journal (/run/log/journal/27549ccca263452a9e48e9ff17b31732) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:10:11.576000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:10:12.299000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:10:12.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:10:12.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:10:12.314000 audit: BPF prog-id=10 op=LOAD Oct 2 20:10:12.314000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:10:12.314000 audit: BPF prog-id=11 op=LOAD Oct 2 20:10:12.314000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:10:22.402000 audit: BPF prog-id=12 op=LOAD Oct 2 20:10:22.402000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:10:22.411000 audit: BPF prog-id=13 op=LOAD Oct 2 20:10:22.421000 audit: BPF prog-id=14 op=LOAD Oct 2 20:10:22.421000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:10:22.421000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:10:22.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.461000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:10:22.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.858000 audit: BPF prog-id=15 op=LOAD Oct 2 20:10:22.858000 audit: BPF prog-id=16 op=LOAD Oct 2 20:10:22.858000 audit: BPF prog-id=17 op=LOAD Oct 2 20:10:22.858000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:10:22.858000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:10:22.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.970000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:10:22.970000 audit[1141]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffe119c7d70 a2=4000 a3=7ffe119c7e0c items=0 ppid=1 pid=1141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:22.970000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:10:22.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:13.604245 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:10:22.400498 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:10:13.604783 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:10:22.422158 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:10:13.604808 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:10:13.604847 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:10:13.604858 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:10:13.604914 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:10:13.604929 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:10:13.605190 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:10:13.605232 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:10:13.605246 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:10:13.605638 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:10:13.605677 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:10:13.605697 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:10:13.605713 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:10:13.605729 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:10:13.605744 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:10:21.129398 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:21.129651 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:21.129939 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:21.130377 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:21.130451 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:10:21.130529 /usr/lib/systemd/system-generators/torcx-generator[1048]: time="2023-10-02T20:10:21Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:10:22.983646 systemd[1]: Started systemd-journald.service. Oct 2 20:10:22.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.984689 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:10:22.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.987769 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:10:22.987913 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:10:22.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.990769 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:10:22.990907 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:10:22.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.993730 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:10:22.993871 systemd[1]: Finished modprobe@drm.service. Oct 2 20:10:22.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.996537 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:10:22.996679 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:10:22.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.999000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.999691 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:10:23.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.999853 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:10:23.002720 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:10:23.002931 systemd[1]: Finished modprobe@loop.service. Oct 2 20:10:23.007242 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:10:23.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.009938 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:10:23.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.012685 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:10:23.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.015695 systemd[1]: Reached target network-pre.target. Oct 2 20:10:23.019700 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:10:23.023319 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:10:23.026593 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:10:23.073081 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:10:23.076626 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:10:23.078811 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:10:23.080067 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:10:23.082353 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:10:23.083567 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:10:23.086829 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:10:23.091821 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:10:23.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.094432 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:10:23.096685 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:10:23.100265 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:10:23.112379 udevadm[1171]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:10:23.120234 systemd-journald[1141]: Time spent on flushing to /var/log/journal/27549ccca263452a9e48e9ff17b31732 is 25.509ms for 1173 entries. Oct 2 20:10:23.120234 systemd-journald[1141]: System Journal (/var/log/journal/27549ccca263452a9e48e9ff17b31732) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:10:23.218946 systemd-journald[1141]: Received client request to flush runtime journal. Oct 2 20:10:23.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.134652 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:10:23.138239 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:10:23.171347 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:10:23.219989 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:10:23.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.711950 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:10:23.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.716102 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:10:24.114642 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:10:24.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:24.369521 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:10:24.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:24.373000 audit: BPF prog-id=18 op=LOAD Oct 2 20:10:24.373000 audit: BPF prog-id=19 op=LOAD Oct 2 20:10:24.373000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:10:24.373000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:10:24.374077 systemd[1]: Starting systemd-udevd.service... Oct 2 20:10:24.393930 systemd-udevd[1176]: Using default interface naming scheme 'v252'. Oct 2 20:10:24.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:24.633000 audit: BPF prog-id=20 op=LOAD Oct 2 20:10:24.629050 systemd[1]: Started systemd-udevd.service. Oct 2 20:10:24.634615 systemd[1]: Starting systemd-networkd.service... Oct 2 20:10:24.670887 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:10:24.743253 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:10:24.745648 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:10:24.744000 audit: BPF prog-id=21 op=LOAD Oct 2 20:10:24.744000 audit: BPF prog-id=22 op=LOAD Oct 2 20:10:24.744000 audit: BPF prog-id=23 op=LOAD Oct 2 20:10:24.758052 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:10:24.769020 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:10:24.769145 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:10:24.775877 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:10:24.756000 audit[1201]: AVC avc: denied { confidentiality } for pid=1201 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:10:24.790945 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:10:24.791044 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:10:24.791070 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:10:24.799124 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:10:24.811851 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:10:24.811961 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:10:24.811995 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:10:24.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:24.801887 systemd[1]: Started systemd-userdbd.service. Oct 2 20:10:25.451766 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:10:24.756000 audit[1201]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55d39b8f2aa0 a1=f884 a2=7f5ebfd32bc5 a3=5 items=10 ppid=1176 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:24.756000 audit: CWD cwd="/" Oct 2 20:10:24.756000 audit: PATH item=0 name=(null) inode=15439 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=1 name=(null) inode=15440 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=2 name=(null) inode=15439 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=3 name=(null) inode=15441 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=4 name=(null) inode=15439 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=5 name=(null) inode=15442 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=6 name=(null) inode=15439 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=7 name=(null) inode=15443 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=8 name=(null) inode=15439 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PATH item=9 name=(null) inode=15444 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:24.756000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:10:25.637759 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1181) Oct 2 20:10:25.685932 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:10:26.573763 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 20:10:26.615078 systemd-networkd[1187]: lo: Link UP Oct 2 20:10:26.615088 systemd-networkd[1187]: lo: Gained carrier Oct 2 20:10:26.615684 systemd-networkd[1187]: Enumeration completed Oct 2 20:10:26.615927 systemd[1]: Started systemd-networkd.service. Oct 2 20:10:26.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.619805 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:10:26.631121 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:10:26.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.634922 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:10:26.650339 systemd-networkd[1187]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:10:26.703762 kernel: mlx5_core 7d69:00:02.0 enP32105s1: Link up Oct 2 20:10:26.739768 kernel: hv_netvsc 000d3ab7-4f23-000d-3ab7-4f23000d3ab7 eth0: Data path switched to VF: enP32105s1 Oct 2 20:10:26.740494 systemd-networkd[1187]: enP32105s1: Link UP Oct 2 20:10:26.740674 systemd-networkd[1187]: eth0: Link UP Oct 2 20:10:26.740680 systemd-networkd[1187]: eth0: Gained carrier Oct 2 20:10:26.747100 systemd-networkd[1187]: enP32105s1: Gained carrier Oct 2 20:10:26.769872 systemd-networkd[1187]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:10:26.930836 lvm[1253]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:10:26.957941 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:10:26.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.960687 systemd[1]: Reached target cryptsetup.target. Oct 2 20:10:26.964155 systemd[1]: Starting lvm2-activation.service... Oct 2 20:10:26.970518 lvm[1255]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:10:26.999012 systemd[1]: Finished lvm2-activation.service. Oct 2 20:10:27.000000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:27.001686 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:10:27.004101 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:10:27.004138 systemd[1]: Reached target local-fs.target. Oct 2 20:10:27.006370 systemd[1]: Reached target machines.target. Oct 2 20:10:27.009789 systemd[1]: Starting ldconfig.service... Oct 2 20:10:27.023182 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:10:27.023316 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:27.024913 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:10:27.030916 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:10:27.036026 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:10:27.039414 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:10:27.039495 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:10:27.040833 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:10:27.082071 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1257 (bootctl) Oct 2 20:10:27.083400 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:10:27.095082 systemd-tmpfiles[1260]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:10:27.098692 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:10:27.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:27.140296 systemd-tmpfiles[1260]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:10:27.188526 systemd-tmpfiles[1260]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:10:28.027221 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:10:28.027943 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:10:28.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.154919 systemd-networkd[1187]: eth0: Gained IPv6LL Oct 2 20:10:28.161093 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:10:28.179156 kernel: kauditd_printk_skb: 68 callbacks suppressed Oct 2 20:10:28.179243 kernel: audit: type=1130 audit(1696277428.160:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.384576 systemd-fsck[1265]: fsck.fat 4.2 (2021-01-31) Oct 2 20:10:28.384576 systemd-fsck[1265]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 20:10:28.387278 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:10:28.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.392184 systemd[1]: Mounting boot.mount... Oct 2 20:10:28.404773 kernel: audit: type=1130 audit(1696277428.390:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.434549 systemd[1]: Mounted boot.mount. Oct 2 20:10:28.449806 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:10:28.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.464853 kernel: audit: type=1130 audit(1696277428.452:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.590143 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:10:28.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.594721 systemd[1]: Starting audit-rules.service... Oct 2 20:10:28.605752 kernel: audit: type=1130 audit(1696277428.592:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.608617 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:10:28.612287 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:10:28.616985 systemd[1]: Starting systemd-resolved.service... Oct 2 20:10:28.635282 kernel: audit: type=1334 audit(1696277428.615:157): prog-id=24 op=LOAD Oct 2 20:10:28.635359 kernel: audit: type=1334 audit(1696277428.622:158): prog-id=25 op=LOAD Oct 2 20:10:28.615000 audit: BPF prog-id=24 op=LOAD Oct 2 20:10:28.622000 audit: BPF prog-id=25 op=LOAD Oct 2 20:10:28.624767 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:10:28.631911 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:10:28.656000 audit[1276]: SYSTEM_BOOT pid=1276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.674757 kernel: audit: type=1127 audit(1696277428.656:159): pid=1276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.678332 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:10:28.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.697755 kernel: audit: type=1130 audit(1696277428.680:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.698685 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:10:28.701405 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:10:28.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.721765 kernel: audit: type=1130 audit(1696277428.700:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.751388 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:10:28.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.769769 kernel: audit: type=1130 audit(1696277428.753:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.773340 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:10:28.776109 systemd[1]: Reached target time-set.target. Oct 2 20:10:28.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:28.846720 systemd-resolved[1274]: Positive Trust Anchors: Oct 2 20:10:28.846751 systemd-resolved[1274]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:10:28.846791 systemd-resolved[1274]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:10:28.872369 augenrules[1292]: No rules Oct 2 20:10:28.871000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:10:28.871000 audit[1292]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc304fa760 a2=420 a3=0 items=0 ppid=1271 pid=1292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:28.871000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:10:28.873424 systemd[1]: Finished audit-rules.service. Oct 2 20:10:28.939537 systemd-resolved[1274]: Using system hostname 'ci-3510.3.0-a-7019f225b0'. Oct 2 20:10:28.941249 systemd[1]: Started systemd-resolved.service. Oct 2 20:10:28.944353 systemd[1]: Reached target network.target. Oct 2 20:10:28.946974 systemd[1]: Reached target network-online.target. Oct 2 20:10:28.950053 systemd[1]: Reached target nss-lookup.target. Oct 2 20:10:29.020361 systemd-timesyncd[1275]: Contacted time server 89.234.64.77:123 (0.flatcar.pool.ntp.org). Oct 2 20:10:29.020429 systemd-timesyncd[1275]: Initial clock synchronization to Mon 2023-10-02 20:10:29.021190 UTC. Oct 2 20:10:34.325361 ldconfig[1256]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:10:34.336527 systemd[1]: Finished ldconfig.service. Oct 2 20:10:34.341331 systemd[1]: Starting systemd-update-done.service... Oct 2 20:10:34.408551 systemd[1]: Finished systemd-update-done.service. Oct 2 20:10:34.411368 systemd[1]: Reached target sysinit.target. Oct 2 20:10:34.413644 systemd[1]: Started motdgen.path. Oct 2 20:10:34.415488 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:10:34.418702 systemd[1]: Started logrotate.timer. Oct 2 20:10:34.420854 systemd[1]: Started mdadm.timer. Oct 2 20:10:34.422861 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:10:34.425179 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:10:34.425217 systemd[1]: Reached target paths.target. Oct 2 20:10:34.427209 systemd[1]: Reached target timers.target. Oct 2 20:10:34.429505 systemd[1]: Listening on dbus.socket. Oct 2 20:10:34.432819 systemd[1]: Starting docker.socket... Oct 2 20:10:34.457404 systemd[1]: Listening on sshd.socket. Oct 2 20:10:34.460131 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:34.460683 systemd[1]: Listening on docker.socket. Oct 2 20:10:34.462876 systemd[1]: Reached target sockets.target. Oct 2 20:10:34.465107 systemd[1]: Reached target basic.target. Oct 2 20:10:34.467209 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:10:34.467244 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:10:34.468503 systemd[1]: Starting containerd.service... Oct 2 20:10:34.472260 systemd[1]: Starting dbus.service... Oct 2 20:10:34.475166 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:10:34.478645 systemd[1]: Starting extend-filesystems.service... Oct 2 20:10:34.481209 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:10:34.482457 systemd[1]: Starting motdgen.service... Oct 2 20:10:34.485574 systemd[1]: Started nvidia.service. Oct 2 20:10:34.491649 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:10:34.496119 systemd[1]: Starting prepare-critools.service... Oct 2 20:10:34.503231 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:10:34.507004 systemd[1]: Starting sshd-keygen.service... Oct 2 20:10:34.513659 systemd[1]: Starting systemd-logind.service... Oct 2 20:10:34.516095 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:34.516177 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:10:34.516693 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:10:34.519544 systemd[1]: Starting update-engine.service... Oct 2 20:10:34.523077 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:10:34.531154 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:10:34.531816 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:10:34.564675 jq[1302]: false Oct 2 20:10:34.566339 jq[1320]: true Oct 2 20:10:34.568258 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:10:34.568500 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:10:34.573194 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:10:34.573406 systemd[1]: Finished motdgen.service. Oct 2 20:10:34.585545 jq[1333]: true Oct 2 20:10:34.603910 extend-filesystems[1303]: Found sda Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda1 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda2 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda3 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found usr Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda4 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda6 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda7 Oct 2 20:10:34.607263 extend-filesystems[1303]: Found sda9 Oct 2 20:10:34.607263 extend-filesystems[1303]: Checking size of /dev/sda9 Oct 2 20:10:34.644461 env[1328]: time="2023-10-02T20:10:34.642938404Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.674615710Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.674783117Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.676486593Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.676518994Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.676776906Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.676796607Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.678185568Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.678200969Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.678301073Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679158 env[1328]: time="2023-10-02T20:10:34.678692491Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679574 env[1328]: time="2023-10-02T20:10:34.678903200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:34.679574 env[1328]: time="2023-10-02T20:10:34.678926601Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:10:34.679574 env[1328]: time="2023-10-02T20:10:34.678991004Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:10:34.679574 env[1328]: time="2023-10-02T20:10:34.679005405Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:10:34.698108 env[1328]: time="2023-10-02T20:10:34.698078151Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:10:34.698266 env[1328]: time="2023-10-02T20:10:34.698249459Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:10:34.698344 env[1328]: time="2023-10-02T20:10:34.698332463Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:10:34.698436 env[1328]: time="2023-10-02T20:10:34.698423867Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698541 env[1328]: time="2023-10-02T20:10:34.698527771Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698627 env[1328]: time="2023-10-02T20:10:34.698615075Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698696 env[1328]: time="2023-10-02T20:10:34.698684678Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698785 env[1328]: time="2023-10-02T20:10:34.698772382Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698868 env[1328]: time="2023-10-02T20:10:34.698856186Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.698939 env[1328]: time="2023-10-02T20:10:34.698926889Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.699012 env[1328]: time="2023-10-02T20:10:34.699000192Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.699083 env[1328]: time="2023-10-02T20:10:34.699071295Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:10:34.699513 env[1328]: time="2023-10-02T20:10:34.699246003Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:10:34.700036 env[1328]: time="2023-10-02T20:10:34.700014637Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:10:34.703078 env[1328]: time="2023-10-02T20:10:34.703039771Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:10:34.703206 env[1328]: time="2023-10-02T20:10:34.703190878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.703301 env[1328]: time="2023-10-02T20:10:34.703287782Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:10:34.703479 env[1328]: time="2023-10-02T20:10:34.703413088Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.703557 env[1328]: time="2023-10-02T20:10:34.703544794Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.703634 env[1328]: time="2023-10-02T20:10:34.703622297Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.703707 env[1328]: time="2023-10-02T20:10:34.703694701Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.711569 tar[1323]: ./ Oct 2 20:10:34.711569 tar[1323]: ./macvlan Oct 2 20:10:34.713185 systemd-logind[1313]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:10:34.714364 tar[1324]: crictl Oct 2 20:10:34.724833 systemd-logind[1313]: New seat seat0. Oct 2 20:10:34.730241 env[1328]: time="2023-10-02T20:10:34.730214978Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.730366 env[1328]: time="2023-10-02T20:10:34.730349384Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.730450 env[1328]: time="2023-10-02T20:10:34.730436987Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.730536 env[1328]: time="2023-10-02T20:10:34.730522791Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.730626 env[1328]: time="2023-10-02T20:10:34.730613495Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:10:34.730869 env[1328]: time="2023-10-02T20:10:34.730852306Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.730971 env[1328]: time="2023-10-02T20:10:34.730957511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.731068 env[1328]: time="2023-10-02T20:10:34.731054015Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.731148 env[1328]: time="2023-10-02T20:10:34.731135618Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:10:34.731235 env[1328]: time="2023-10-02T20:10:34.731218622Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:10:34.731305 env[1328]: time="2023-10-02T20:10:34.731293025Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:10:34.731412 env[1328]: time="2023-10-02T20:10:34.731397030Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:10:34.731514 env[1328]: time="2023-10-02T20:10:34.731501735Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:10:34.731948 env[1328]: time="2023-10-02T20:10:34.731885652Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.732087961Z" level=info msg="Connect containerd service" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.732153564Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.732917498Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.733242812Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.733300915Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.733347017Z" level=info msg="containerd successfully booted in 0.095642s" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.743988889Z" level=info msg="Start subscribing containerd event" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.744060892Z" level=info msg="Start recovering state" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.744138796Z" level=info msg="Start event monitor" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.744151596Z" level=info msg="Start snapshots syncer" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.744163797Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:10:34.758798 env[1328]: time="2023-10-02T20:10:34.744173497Z" level=info msg="Start streaming server" Oct 2 20:10:34.734958 systemd[1]: Started containerd.service. Oct 2 20:10:34.768139 extend-filesystems[1303]: Old size kept for /dev/sda9 Oct 2 20:10:34.773745 extend-filesystems[1303]: Found sr0 Oct 2 20:10:34.779760 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:10:34.779972 systemd[1]: Finished extend-filesystems.service. Oct 2 20:10:34.789781 bash[1353]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:10:34.790562 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:10:34.833852 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:10:34.869634 tar[1323]: ./static Oct 2 20:10:34.927376 dbus-daemon[1301]: [system] SELinux support is enabled Oct 2 20:10:34.927534 systemd[1]: Started dbus.service. Oct 2 20:10:34.932503 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:10:34.932533 systemd[1]: Reached target system-config.target. Oct 2 20:10:34.933273 dbus-daemon[1301]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:10:34.935756 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:10:34.935782 systemd[1]: Reached target user-config.target. Oct 2 20:10:34.938808 systemd[1]: Started systemd-logind.service. Oct 2 20:10:34.955560 tar[1323]: ./vlan Oct 2 20:10:35.039127 tar[1323]: ./portmap Oct 2 20:10:35.104197 tar[1323]: ./host-local Oct 2 20:10:35.139391 tar[1323]: ./vrf Oct 2 20:10:35.192504 tar[1323]: ./bridge Oct 2 20:10:35.247902 tar[1323]: ./tuning Oct 2 20:10:35.285692 tar[1323]: ./firewall Oct 2 20:10:35.362074 tar[1323]: ./host-device Oct 2 20:10:35.439759 tar[1323]: ./sbr Oct 2 20:10:35.447522 update_engine[1317]: I1002 20:10:35.432808 1317 main.cc:92] Flatcar Update Engine starting Oct 2 20:10:35.492199 systemd[1]: Started update-engine.service. Oct 2 20:10:35.492962 update_engine[1317]: I1002 20:10:35.492856 1317 update_check_scheduler.cc:74] Next update check in 2m34s Oct 2 20:10:35.496993 systemd[1]: Started locksmithd.service. Oct 2 20:10:35.509896 sshd_keygen[1316]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:10:35.522964 tar[1323]: ./loopback Oct 2 20:10:35.542978 systemd[1]: Finished sshd-keygen.service. Oct 2 20:10:35.547030 systemd[1]: Starting issuegen.service... Oct 2 20:10:35.550186 systemd[1]: Started waagent.service. Oct 2 20:10:35.558469 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:10:35.558639 systemd[1]: Finished issuegen.service. Oct 2 20:10:35.562357 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:10:35.583453 tar[1323]: ./dhcp Oct 2 20:10:35.604034 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:10:35.608844 systemd[1]: Started getty@tty1.service. Oct 2 20:10:35.613176 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:10:35.615951 systemd[1]: Reached target getty.target. Oct 2 20:10:35.700274 tar[1323]: ./ptp Oct 2 20:10:35.702560 systemd[1]: Finished prepare-critools.service. Oct 2 20:10:35.736165 tar[1323]: ./ipvlan Oct 2 20:10:35.768009 tar[1323]: ./bandwidth Oct 2 20:10:35.832213 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:10:35.835190 systemd[1]: Reached target multi-user.target. Oct 2 20:10:35.838867 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:10:35.847484 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:10:35.847633 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:10:35.850534 systemd[1]: Startup finished in 873ms (firmware) + 22.670s (loader) + 962ms (kernel) + 22.382s (initrd) + 24.119s (userspace) = 1min 11.008s. Oct 2 20:10:36.273283 login[1416]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:10:36.277082 login[1417]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:10:36.308366 systemd[1]: Created slice user-500.slice. Oct 2 20:10:36.309710 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:10:36.312538 systemd-logind[1313]: New session 1 of user core. Oct 2 20:10:36.316376 systemd-logind[1313]: New session 2 of user core. Oct 2 20:10:36.332033 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:10:36.333624 systemd[1]: Starting user@500.service... Oct 2 20:10:36.336854 (systemd)[1427]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:36.502814 systemd[1427]: Queued start job for default target default.target. Oct 2 20:10:36.503436 systemd[1427]: Reached target paths.target. Oct 2 20:10:36.503467 systemd[1427]: Reached target sockets.target. Oct 2 20:10:36.503488 systemd[1427]: Reached target timers.target. Oct 2 20:10:36.503507 systemd[1427]: Reached target basic.target. Oct 2 20:10:36.503561 systemd[1427]: Reached target default.target. Oct 2 20:10:36.503598 systemd[1427]: Startup finished in 161ms. Oct 2 20:10:36.503726 systemd[1]: Started user@500.service. Oct 2 20:10:36.505114 systemd[1]: Started session-1.scope. Oct 2 20:10:36.506170 systemd[1]: Started session-2.scope. Oct 2 20:10:36.904987 locksmithd[1402]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:10:42.174027 waagent[1411]: 2023-10-02T20:10:42.173922Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:10:42.178348 waagent[1411]: 2023-10-02T20:10:42.178142Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:10:42.178348 waagent[1411]: 2023-10-02T20:10:42.178411Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:10:42.178348 waagent[1411]: 2023-10-02T20:10:42.179670Z INFO Daemon Daemon Run daemon Oct 2 20:10:42.178348 waagent[1411]: 2023-10-02T20:10:42.181422Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:10:42.226724 waagent[1411]: 2023-10-02T20:10:42.226572Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:10:42.235843 waagent[1411]: 2023-10-02T20:10:42.235713Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:10:42.241275 waagent[1411]: 2023-10-02T20:10:42.241215Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:10:42.244120 waagent[1411]: 2023-10-02T20:10:42.244061Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:10:42.247573 waagent[1411]: 2023-10-02T20:10:42.247512Z INFO Daemon Daemon Activate resource disk Oct 2 20:10:42.250310 waagent[1411]: 2023-10-02T20:10:42.250251Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:10:42.260892 waagent[1411]: 2023-10-02T20:10:42.260830Z INFO Daemon Daemon Found device: None Oct 2 20:10:42.263610 waagent[1411]: 2023-10-02T20:10:42.263550Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:10:42.265870 waagent[1411]: 2023-10-02T20:10:42.265814Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:10:42.266888 waagent[1411]: 2023-10-02T20:10:42.266831Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:10:42.267183 waagent[1411]: 2023-10-02T20:10:42.267130Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:10:42.285228 waagent[1411]: 2023-10-02T20:10:42.285113Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:10:42.293779 waagent[1411]: 2023-10-02T20:10:42.293664Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:10:42.298869 waagent[1411]: 2023-10-02T20:10:42.298813Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:10:42.301920 waagent[1411]: 2023-10-02T20:10:42.301862Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:10:42.323578 waagent[1411]: 2023-10-02T20:10:42.322759Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:10:48.487686 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:10:48.504319 waagent[1411]: 2023-10-02T20:10:48.504183Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:10:48.507411 waagent[1411]: 2023-10-02T20:10:48.507228Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:10:48.521009 waagent[1411]: 2023-10-02T20:10:48.507626Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:10:48.521009 waagent[1411]: 2023-10-02T20:10:48.508502Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:10:48.521009 waagent[1411]: 2023-10-02T20:10:48.509766Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:10:48.521009 waagent[1411]: 2023-10-02T20:10:48.510567Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:10:48.627963 waagent[1411]: 2023-10-02T20:10:48.627883Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:10:48.636260 waagent[1411]: 2023-10-02T20:10:48.628893Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:10:48.636260 waagent[1411]: 2023-10-02T20:10:48.629819Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:10:48.904069 waagent[1411]: 2023-10-02T20:10:48.903922Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:10:48.916079 waagent[1411]: 2023-10-02T20:10:48.915999Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:10:48.919232 waagent[1411]: 2023-10-02T20:10:48.919161Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:10:48.997259 waagent[1411]: 2023-10-02T20:10:48.997134Z INFO Daemon Daemon Found private key matching thumbprint CA22102757CEF9C34C4CEA47F16E6044D3092989 Oct 2 20:10:49.001946 waagent[1411]: 2023-10-02T20:10:49.001870Z INFO Daemon Daemon Certificate with thumbprint 10C6EECF690F24BF390298629B796AE47EE9D731 has no matching private key. Oct 2 20:10:49.007348 waagent[1411]: 2023-10-02T20:10:49.007277Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:10:49.048189 waagent[1411]: 2023-10-02T20:10:49.048103Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 88149d9f-e04d-4c7d-8b61-8d821a24c68a New eTag: 4763362142179165864] Oct 2 20:10:49.055115 waagent[1411]: 2023-10-02T20:10:49.055024Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:10:49.067188 waagent[1411]: 2023-10-02T20:10:49.067121Z INFO Daemon Daemon Starting provisioning Oct 2 20:10:49.070379 waagent[1411]: 2023-10-02T20:10:49.070312Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:10:49.072949 waagent[1411]: 2023-10-02T20:10:49.072887Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-7019f225b0] Oct 2 20:10:49.100681 waagent[1411]: 2023-10-02T20:10:49.100525Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-7019f225b0] Oct 2 20:10:49.104797 waagent[1411]: 2023-10-02T20:10:49.104688Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:10:49.108990 waagent[1411]: 2023-10-02T20:10:49.108923Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:10:49.123686 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:10:49.123967 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:10:49.124040 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:10:49.124382 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:10:49.130789 systemd-networkd[1187]: eth0: DHCPv6 lease lost Oct 2 20:10:49.132116 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:10:49.132321 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:10:49.134876 systemd[1]: Starting systemd-networkd.service... Oct 2 20:10:49.165363 systemd-networkd[1470]: enP32105s1: Link UP Oct 2 20:10:49.165372 systemd-networkd[1470]: enP32105s1: Gained carrier Oct 2 20:10:49.166729 systemd-networkd[1470]: eth0: Link UP Oct 2 20:10:49.166751 systemd-networkd[1470]: eth0: Gained carrier Oct 2 20:10:49.167175 systemd-networkd[1470]: lo: Link UP Oct 2 20:10:49.167184 systemd-networkd[1470]: lo: Gained carrier Oct 2 20:10:49.167491 systemd-networkd[1470]: eth0: Gained IPv6LL Oct 2 20:10:49.168378 systemd-networkd[1470]: Enumeration completed Oct 2 20:10:49.168485 systemd[1]: Started systemd-networkd.service. Oct 2 20:10:49.170764 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:10:49.172787 waagent[1411]: 2023-10-02T20:10:49.172511Z INFO Daemon Daemon Create user account if not exists Oct 2 20:10:49.175295 waagent[1411]: 2023-10-02T20:10:49.173377Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:10:49.175295 waagent[1411]: 2023-10-02T20:10:49.174268Z INFO Daemon Daemon Configure sudoer Oct 2 20:10:49.176069 systemd-networkd[1470]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:10:49.180833 waagent[1411]: 2023-10-02T20:10:49.180756Z INFO Daemon Daemon Configure sshd Oct 2 20:10:49.181240 waagent[1411]: 2023-10-02T20:10:49.181183Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:10:49.222255 waagent[1411]: 2023-10-02T20:10:49.222134Z INFO Daemon Daemon Decode custom data Oct 2 20:10:49.225488 waagent[1411]: 2023-10-02T20:10:49.225417Z INFO Daemon Daemon Save custom data Oct 2 20:10:49.234849 systemd-networkd[1470]: eth0: DHCPv4 address 10.200.8.18/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:10:49.237556 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:10:50.460696 waagent[1411]: 2023-10-02T20:10:50.460595Z INFO Daemon Daemon Provisioning complete Oct 2 20:10:50.474936 waagent[1411]: 2023-10-02T20:10:50.474863Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:10:50.478396 waagent[1411]: 2023-10-02T20:10:50.478329Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:10:50.484169 waagent[1411]: 2023-10-02T20:10:50.484108Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:10:50.749296 waagent[1479]: 2023-10-02T20:10:50.749135Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:10:50.750024 waagent[1479]: 2023-10-02T20:10:50.749959Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:50.750170 waagent[1479]: 2023-10-02T20:10:50.750117Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:50.761057 waagent[1479]: 2023-10-02T20:10:50.760982Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:10:50.761219 waagent[1479]: 2023-10-02T20:10:50.761165Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:10:50.818693 waagent[1479]: 2023-10-02T20:10:50.818569Z INFO ExtHandler ExtHandler Found private key matching thumbprint CA22102757CEF9C34C4CEA47F16E6044D3092989 Oct 2 20:10:50.818926 waagent[1479]: 2023-10-02T20:10:50.818862Z INFO ExtHandler ExtHandler Certificate with thumbprint 10C6EECF690F24BF390298629B796AE47EE9D731 has no matching private key. Oct 2 20:10:50.819159 waagent[1479]: 2023-10-02T20:10:50.819109Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:10:50.832390 waagent[1479]: 2023-10-02T20:10:50.832328Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 05658879-510f-47e9-9d0c-489345cb69f0 New eTag: 4763362142179165864] Oct 2 20:10:50.832972 waagent[1479]: 2023-10-02T20:10:50.832914Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:10:50.908419 waagent[1479]: 2023-10-02T20:10:50.908253Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:10:50.917489 waagent[1479]: 2023-10-02T20:10:50.917406Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1479 Oct 2 20:10:50.920895 waagent[1479]: 2023-10-02T20:10:50.920829Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:10:50.922146 waagent[1479]: 2023-10-02T20:10:50.922088Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:10:51.033180 waagent[1479]: 2023-10-02T20:10:51.033058Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:10:51.033539 waagent[1479]: 2023-10-02T20:10:51.033473Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:10:51.041306 waagent[1479]: 2023-10-02T20:10:51.041248Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:10:51.041808 waagent[1479]: 2023-10-02T20:10:51.041745Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:10:51.042883 waagent[1479]: 2023-10-02T20:10:51.042819Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:10:51.044159 waagent[1479]: 2023-10-02T20:10:51.044101Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:10:51.044503 waagent[1479]: 2023-10-02T20:10:51.044450Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:51.044893 waagent[1479]: 2023-10-02T20:10:51.044839Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:51.045416 waagent[1479]: 2023-10-02T20:10:51.045361Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:10:51.045704 waagent[1479]: 2023-10-02T20:10:51.045649Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:10:51.045704 waagent[1479]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:10:51.045704 waagent[1479]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:10:51.045704 waagent[1479]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:10:51.045704 waagent[1479]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:51.045704 waagent[1479]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:51.045704 waagent[1479]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:51.049071 waagent[1479]: 2023-10-02T20:10:51.048875Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:10:51.049245 waagent[1479]: 2023-10-02T20:10:51.049187Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:51.049627 waagent[1479]: 2023-10-02T20:10:51.049573Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:51.050433 waagent[1479]: 2023-10-02T20:10:51.050373Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:10:51.050578 waagent[1479]: 2023-10-02T20:10:51.050530Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:10:51.050708 waagent[1479]: 2023-10-02T20:10:51.050663Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:10:51.051409 waagent[1479]: 2023-10-02T20:10:51.051358Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:10:51.051557 waagent[1479]: 2023-10-02T20:10:51.051501Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:10:51.052486 waagent[1479]: 2023-10-02T20:10:51.052431Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:10:51.052570 waagent[1479]: 2023-10-02T20:10:51.052515Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:10:51.052936 waagent[1479]: 2023-10-02T20:10:51.052889Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:10:51.063169 waagent[1479]: 2023-10-02T20:10:51.063114Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:10:51.066342 waagent[1479]: 2023-10-02T20:10:51.066076Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:10:51.067695 waagent[1479]: 2023-10-02T20:10:51.067635Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:10:51.076977 waagent[1479]: 2023-10-02T20:10:51.076919Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1470' Oct 2 20:10:51.119123 waagent[1479]: 2023-10-02T20:10:51.119033Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:10:51.180906 waagent[1479]: 2023-10-02T20:10:51.180775Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:10:51.180906 waagent[1479]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:10:51.180906 waagent[1479]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:10:51.180906 waagent[1479]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b7:4f:23 brd ff:ff:ff:ff:ff:ff Oct 2 20:10:51.180906 waagent[1479]: 3: enP32105s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b7:4f:23 brd ff:ff:ff:ff:ff:ff\ altname enP32105p0s2 Oct 2 20:10:51.180906 waagent[1479]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:10:51.180906 waagent[1479]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:10:51.180906 waagent[1479]: 2: eth0 inet 10.200.8.18/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:10:51.180906 waagent[1479]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:10:51.180906 waagent[1479]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:10:51.180906 waagent[1479]: 2: eth0 inet6 fe80::20d:3aff:feb7:4f23/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:10:51.435021 waagent[1479]: 2023-10-02T20:10:51.434888Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 20:10:51.438040 waagent[1479]: 2023-10-02T20:10:51.437933Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 20:10:51.438040 waagent[1479]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:51.438040 waagent[1479]: pkts bytes target prot opt in out source destination Oct 2 20:10:51.438040 waagent[1479]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:51.438040 waagent[1479]: pkts bytes target prot opt in out source destination Oct 2 20:10:51.438040 waagent[1479]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:51.438040 waagent[1479]: pkts bytes target prot opt in out source destination Oct 2 20:10:51.438040 waagent[1479]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:10:51.438040 waagent[1479]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:10:51.439377 waagent[1479]: 2023-10-02T20:10:51.439324Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:10:51.567221 waagent[1479]: 2023-10-02T20:10:51.567144Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 20:10:52.488893 waagent[1411]: 2023-10-02T20:10:52.488700Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:10:52.495826 waagent[1411]: 2023-10-02T20:10:52.495762Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 20:10:53.543589 waagent[1520]: 2023-10-02T20:10:53.543479Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 20:10:53.544289 waagent[1520]: 2023-10-02T20:10:53.544222Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:10:53.544438 waagent[1520]: 2023-10-02T20:10:53.544384Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:10:53.553711 waagent[1520]: 2023-10-02T20:10:53.553617Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:10:53.554098 waagent[1520]: 2023-10-02T20:10:53.554042Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:53.554254 waagent[1520]: 2023-10-02T20:10:53.554205Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:53.565579 waagent[1520]: 2023-10-02T20:10:53.565504Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:10:53.573786 waagent[1520]: 2023-10-02T20:10:53.573710Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:10:53.574671 waagent[1520]: 2023-10-02T20:10:53.574609Z INFO ExtHandler Oct 2 20:10:53.574832 waagent[1520]: 2023-10-02T20:10:53.574781Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 84677a35-17c7-490c-9f3f-a0372a8835a1 eTag: 4763362142179165864 source: Fabric] Oct 2 20:10:53.575511 waagent[1520]: 2023-10-02T20:10:53.575453Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:10:53.576573 waagent[1520]: 2023-10-02T20:10:53.576512Z INFO ExtHandler Oct 2 20:10:53.576702 waagent[1520]: 2023-10-02T20:10:53.576651Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:10:53.582994 waagent[1520]: 2023-10-02T20:10:53.582943Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:10:53.583405 waagent[1520]: 2023-10-02T20:10:53.583358Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:10:53.599646 waagent[1520]: 2023-10-02T20:10:53.599587Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:10:53.662496 waagent[1520]: 2023-10-02T20:10:53.662366Z INFO ExtHandler Downloaded certificate {'thumbprint': 'CA22102757CEF9C34C4CEA47F16E6044D3092989', 'hasPrivateKey': True} Oct 2 20:10:53.663445 waagent[1520]: 2023-10-02T20:10:53.663378Z INFO ExtHandler Downloaded certificate {'thumbprint': '10C6EECF690F24BF390298629B796AE47EE9D731', 'hasPrivateKey': False} Oct 2 20:10:53.664427 waagent[1520]: 2023-10-02T20:10:53.664363Z INFO ExtHandler Fetch goal state completed Oct 2 20:10:53.685084 waagent[1520]: 2023-10-02T20:10:53.685016Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1520 Oct 2 20:10:53.688278 waagent[1520]: 2023-10-02T20:10:53.688217Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:10:53.689744 waagent[1520]: 2023-10-02T20:10:53.689679Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:10:53.694366 waagent[1520]: 2023-10-02T20:10:53.694313Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:10:53.694703 waagent[1520]: 2023-10-02T20:10:53.694649Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:10:53.702316 waagent[1520]: 2023-10-02T20:10:53.702262Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:10:53.702756 waagent[1520]: 2023-10-02T20:10:53.702694Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:10:53.725847 waagent[1520]: 2023-10-02T20:10:53.725704Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 20:10:53.728809 waagent[1520]: 2023-10-02T20:10:53.728672Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 20:10:53.734173 waagent[1520]: 2023-10-02T20:10:53.734115Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:10:53.735569 waagent[1520]: 2023-10-02T20:10:53.735512Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:10:53.736098 waagent[1520]: 2023-10-02T20:10:53.736045Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:53.736257 waagent[1520]: 2023-10-02T20:10:53.736209Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:53.736810 waagent[1520]: 2023-10-02T20:10:53.736729Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:10:53.737229 waagent[1520]: 2023-10-02T20:10:53.737171Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:10:53.737925 waagent[1520]: 2023-10-02T20:10:53.737872Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:53.738404 waagent[1520]: 2023-10-02T20:10:53.738349Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:10:53.738404 waagent[1520]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:10:53.738404 waagent[1520]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:10:53.738404 waagent[1520]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:10:53.738404 waagent[1520]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:53.738404 waagent[1520]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:53.738404 waagent[1520]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:53.738795 waagent[1520]: 2023-10-02T20:10:53.738717Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:10:53.738994 waagent[1520]: 2023-10-02T20:10:53.738944Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:10:53.739343 waagent[1520]: 2023-10-02T20:10:53.739293Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:53.742115 waagent[1520]: 2023-10-02T20:10:53.742044Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:10:53.743018 waagent[1520]: 2023-10-02T20:10:53.742961Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:10:53.743148 waagent[1520]: 2023-10-02T20:10:53.743100Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:10:53.748391 waagent[1520]: 2023-10-02T20:10:53.748254Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:10:53.749031 waagent[1520]: 2023-10-02T20:10:53.748968Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:10:53.750533 waagent[1520]: 2023-10-02T20:10:53.748656Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:10:53.766382 waagent[1520]: 2023-10-02T20:10:53.766301Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:10:53.766382 waagent[1520]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:10:53.766382 waagent[1520]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:10:53.766382 waagent[1520]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b7:4f:23 brd ff:ff:ff:ff:ff:ff Oct 2 20:10:53.766382 waagent[1520]: 3: enP32105s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b7:4f:23 brd ff:ff:ff:ff:ff:ff\ altname enP32105p0s2 Oct 2 20:10:53.766382 waagent[1520]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:10:53.766382 waagent[1520]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:10:53.766382 waagent[1520]: 2: eth0 inet 10.200.8.18/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:10:53.766382 waagent[1520]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:10:53.766382 waagent[1520]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:10:53.766382 waagent[1520]: 2: eth0 inet6 fe80::20d:3aff:feb7:4f23/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:10:53.782644 waagent[1520]: 2023-10-02T20:10:53.782563Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 20:10:53.822311 waagent[1520]: 2023-10-02T20:10:53.822086Z INFO ExtHandler ExtHandler Oct 2 20:10:53.827689 waagent[1520]: 2023-10-02T20:10:53.827607Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: d53f2871-7dec-4c8d-8996-854aa5bd1af1 correlation f95a3fc0-44a0-4531-8b45-d508271b9732 created: 2023-10-02T20:09:13.173508Z] Oct 2 20:10:53.832582 waagent[1520]: 2023-10-02T20:10:53.832513Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:10:53.837568 waagent[1520]: 2023-10-02T20:10:53.837462Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 15 ms] Oct 2 20:10:53.854677 waagent[1520]: 2023-10-02T20:10:53.854591Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:10:53.854677 waagent[1520]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:53.854677 waagent[1520]: pkts bytes target prot opt in out source destination Oct 2 20:10:53.854677 waagent[1520]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:53.854677 waagent[1520]: pkts bytes target prot opt in out source destination Oct 2 20:10:53.854677 waagent[1520]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:53.854677 waagent[1520]: pkts bytes target prot opt in out source destination Oct 2 20:10:53.854677 waagent[1520]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:10:53.854677 waagent[1520]: 154 17779 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:10:53.854677 waagent[1520]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:10:53.868360 waagent[1520]: 2023-10-02T20:10:53.868297Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:10:53.879488 waagent[1520]: 2023-10-02T20:10:53.879420Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 4C3D8A80-3BFC-4CE0-A118-2E6DA6FDC730;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:11:13.569609 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 20:11:19.942611 systemd[1]: Created slice system-sshd.slice. Oct 2 20:11:19.944488 systemd[1]: Started sshd@0-10.200.8.18:22-10.200.12.6:47808.service. Oct 2 20:11:20.417854 update_engine[1317]: I1002 20:11:20.417786 1317 update_attempter.cc:505] Updating boot flags... Oct 2 20:11:20.734556 sshd[1559]: Accepted publickey for core from 10.200.12.6 port 47808 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:20.736162 sshd[1559]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:20.740801 systemd-logind[1313]: New session 3 of user core. Oct 2 20:11:20.742358 systemd[1]: Started session-3.scope. Oct 2 20:11:21.275064 systemd[1]: Started sshd@1-10.200.8.18:22-10.200.12.6:47810.service. Oct 2 20:11:21.911323 sshd[1603]: Accepted publickey for core from 10.200.12.6 port 47810 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:21.912665 sshd[1603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:21.917451 systemd[1]: Started session-4.scope. Oct 2 20:11:21.918049 systemd-logind[1313]: New session 4 of user core. Oct 2 20:11:22.354716 sshd[1603]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:22.357862 systemd[1]: sshd@1-10.200.8.18:22-10.200.12.6:47810.service: Deactivated successfully. Oct 2 20:11:22.358703 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:11:22.359332 systemd-logind[1313]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:11:22.360060 systemd-logind[1313]: Removed session 4. Oct 2 20:11:22.459112 systemd[1]: Started sshd@2-10.200.8.18:22-10.200.12.6:47820.service. Oct 2 20:11:23.079885 sshd[1609]: Accepted publickey for core from 10.200.12.6 port 47820 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:23.082575 sshd[1609]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:23.088649 systemd[1]: Started session-5.scope. Oct 2 20:11:23.089239 systemd-logind[1313]: New session 5 of user core. Oct 2 20:11:23.518549 sshd[1609]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:23.522022 systemd[1]: sshd@2-10.200.8.18:22-10.200.12.6:47820.service: Deactivated successfully. Oct 2 20:11:23.522921 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:11:23.523500 systemd-logind[1313]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:11:23.524230 systemd-logind[1313]: Removed session 5. Oct 2 20:11:23.633603 systemd[1]: Started sshd@3-10.200.8.18:22-10.200.12.6:47834.service. Oct 2 20:11:24.255689 sshd[1615]: Accepted publickey for core from 10.200.12.6 port 47834 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:24.257181 sshd[1615]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:24.262235 systemd[1]: Started session-6.scope. Oct 2 20:11:24.262677 systemd-logind[1313]: New session 6 of user core. Oct 2 20:11:24.699598 sshd[1615]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:24.702844 systemd[1]: sshd@3-10.200.8.18:22-10.200.12.6:47834.service: Deactivated successfully. Oct 2 20:11:24.703817 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:11:24.704542 systemd-logind[1313]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:11:24.705487 systemd-logind[1313]: Removed session 6. Oct 2 20:11:24.805499 systemd[1]: Started sshd@4-10.200.8.18:22-10.200.12.6:47838.service. Oct 2 20:11:25.431634 sshd[1621]: Accepted publickey for core from 10.200.12.6 port 47838 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:25.433481 sshd[1621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:25.438693 systemd-logind[1313]: New session 7 of user core. Oct 2 20:11:25.439998 systemd[1]: Started session-7.scope. Oct 2 20:11:26.014416 sudo[1627]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:11:26.014711 sudo[1627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:26.068942 dbus-daemon[1301]: \xd0]\x90\x8c\xb0U: received setenforce notice (enforcing=1907320640) Oct 2 20:11:26.070719 sudo[1627]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:26.208301 sshd[1621]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:26.211924 systemd[1]: sshd@4-10.200.8.18:22-10.200.12.6:47838.service: Deactivated successfully. Oct 2 20:11:26.213067 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:11:26.213719 systemd-logind[1313]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:11:26.214529 systemd-logind[1313]: Removed session 7. Oct 2 20:11:26.312014 systemd[1]: Started sshd@5-10.200.8.18:22-10.200.12.6:47846.service. Oct 2 20:11:27.193441 sshd[1631]: Accepted publickey for core from 10.200.12.6 port 47846 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:27.194964 sshd[1631]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:27.199799 systemd-logind[1313]: New session 8 of user core. Oct 2 20:11:27.199899 systemd[1]: Started session-8.scope. Oct 2 20:11:27.634852 sudo[1635]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:11:27.635110 sudo[1635]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:27.637825 sudo[1635]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:27.642240 sudo[1634]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:11:27.642494 sudo[1634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:27.651132 systemd[1]: Stopping audit-rules.service... Oct 2 20:11:27.651000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:11:27.654887 auditctl[1638]: No rules Oct 2 20:11:27.659805 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 20:11:27.659873 kernel: audit: type=1305 audit(1696277487.651:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:11:27.655332 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:11:27.655499 systemd[1]: Stopped audit-rules.service. Oct 2 20:11:27.657064 systemd[1]: Starting audit-rules.service... Oct 2 20:11:27.651000 audit[1638]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff4c9b2030 a2=420 a3=0 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:27.677911 kernel: audit: type=1300 audit(1696277487.651:165): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff4c9b2030 a2=420 a3=0 items=0 ppid=1 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:27.651000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:11:27.679270 augenrules[1655]: No rules Oct 2 20:11:27.680029 systemd[1]: Finished audit-rules.service. Oct 2 20:11:27.683168 kernel: audit: type=1327 audit(1696277487.651:165): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:11:27.683230 kernel: audit: type=1131 audit(1696277487.654:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.682281 sudo[1634]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:27.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.705527 kernel: audit: type=1130 audit(1696277487.679:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.705626 kernel: audit: type=1106 audit(1696277487.681:168): pid=1634 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.681000 audit[1634]: USER_END pid=1634 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.681000 audit[1634]: CRED_DISP pid=1634 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.731007 kernel: audit: type=1104 audit(1696277487.681:169): pid=1634 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.781922 sshd[1631]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:27.782000 audit[1631]: USER_END pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.785438 systemd[1]: sshd@5-10.200.8.18:22-10.200.12.6:47846.service: Deactivated successfully. Oct 2 20:11:27.786262 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:11:27.787627 systemd-logind[1313]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:11:27.788695 systemd-logind[1313]: Removed session 8. Oct 2 20:11:27.782000 audit[1631]: CRED_DISP pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.814415 kernel: audit: type=1106 audit(1696277487.782:170): pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.814485 kernel: audit: type=1104 audit(1696277487.782:171): pid=1631 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.814515 kernel: audit: type=1131 audit(1696277487.784:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.18:22-10.200.12.6:47846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.18:22-10.200.12.6:47846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.910771 systemd[1]: Started sshd@6-10.200.8.18:22-10.200.12.6:50936.service. Oct 2 20:11:27.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.18:22-10.200.12.6:50936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:28.544000 audit[1661]: USER_ACCT pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:28.545187 sshd[1661]: Accepted publickey for core from 10.200.12.6 port 50936 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:28.545000 audit[1661]: CRED_ACQ pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:28.545000 audit[1661]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd69d2b4f0 a2=3 a3=0 items=0 ppid=1 pid=1661 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:28.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:28.546683 sshd[1661]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:28.551269 systemd[1]: Started session-9.scope. Oct 2 20:11:28.551706 systemd-logind[1313]: New session 9 of user core. Oct 2 20:11:28.555000 audit[1661]: USER_START pid=1661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:28.556000 audit[1663]: CRED_ACQ pid=1663 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:28.888000 audit[1664]: USER_ACCT pid=1664 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:28.888000 audit[1664]: CRED_REFR pid=1664 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:28.888887 sudo[1664]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:11:28.889224 sudo[1664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:28.890000 audit[1664]: USER_START pid=1664 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:29.883103 systemd[1]: Starting docker.service... Oct 2 20:11:29.918593 env[1679]: time="2023-10-02T20:11:29.918530107Z" level=info msg="Starting up" Oct 2 20:11:29.919929 env[1679]: time="2023-10-02T20:11:29.919904909Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:11:29.920054 env[1679]: time="2023-10-02T20:11:29.920042109Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:11:29.920116 env[1679]: time="2023-10-02T20:11:29.920104010Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:11:29.920154 env[1679]: time="2023-10-02T20:11:29.920146310Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:11:29.921584 env[1679]: time="2023-10-02T20:11:29.921555811Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:11:29.921584 env[1679]: time="2023-10-02T20:11:29.921573511Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:11:29.921715 env[1679]: time="2023-10-02T20:11:29.921591011Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:11:29.921715 env[1679]: time="2023-10-02T20:11:29.921602411Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:11:29.927214 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2902260805-merged.mount: Deactivated successfully. Oct 2 20:11:30.042476 env[1679]: time="2023-10-02T20:11:30.042427562Z" level=info msg="Loading containers: start." Oct 2 20:11:30.082000 audit[1707]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.082000 audit[1707]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe2fa78c80 a2=0 a3=7ffe2fa78c6c items=0 ppid=1679 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.082000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:11:30.083000 audit[1709]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.083000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc60eb83a0 a2=0 a3=7ffc60eb838c items=0 ppid=1679 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.083000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:11:30.085000 audit[1711]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.085000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff1e2c9660 a2=0 a3=7fff1e2c964c items=0 ppid=1679 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.085000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:11:30.087000 audit[1713]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.087000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffef45d1b80 a2=0 a3=7ffef45d1b6c items=0 ppid=1679 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.087000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:11:30.089000 audit[1715]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1715 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.089000 audit[1715]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc7ab95cc0 a2=0 a3=7ffc7ab95cac items=0 ppid=1679 pid=1715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.089000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:11:30.091000 audit[1717]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.091000 audit[1717]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc07416450 a2=0 a3=7ffc0741643c items=0 ppid=1679 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:11:30.111000 audit[1719]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.111000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc817b73a0 a2=0 a3=7ffc817b738c items=0 ppid=1679 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.111000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:11:30.113000 audit[1721]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.113000 audit[1721]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd5a663e80 a2=0 a3=7ffd5a663e6c items=0 ppid=1679 pid=1721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:11:30.114000 audit[1723]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.114000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffeaea6b040 a2=0 a3=7ffeaea6b02c items=0 ppid=1679 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.114000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:30.132000 audit[1727]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.132000 audit[1727]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff9ec80b80 a2=0 a3=7fff9ec80b6c items=0 ppid=1679 pid=1727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:30.133000 audit[1728]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.133000 audit[1728]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffed2dc0bf0 a2=0 a3=7ffed2dc0bdc items=0 ppid=1679 pid=1728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.133000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:30.175778 kernel: Initializing XFRM netlink socket Oct 2 20:11:30.208355 env[1679]: time="2023-10-02T20:11:30.208312561Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:11:30.265000 audit[1736]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.265000 audit[1736]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffe0f41ee0 a2=0 a3=7fffe0f41ecc items=0 ppid=1679 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.265000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:11:30.286000 audit[1739]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1739 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.286000 audit[1739]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff9ebc0ba0 a2=0 a3=7fff9ebc0b8c items=0 ppid=1679 pid=1739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:11:30.289000 audit[1742]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.289000 audit[1742]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd5eab0b70 a2=0 a3=7ffd5eab0b5c items=0 ppid=1679 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.289000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:11:30.291000 audit[1744]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.291000 audit[1744]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffed652a810 a2=0 a3=7ffed652a7fc items=0 ppid=1679 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.291000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:11:30.293000 audit[1746]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.293000 audit[1746]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd5dadb9d0 a2=0 a3=7ffd5dadb9bc items=0 ppid=1679 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.293000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:11:30.295000 audit[1748]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.295000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff43a719b0 a2=0 a3=7fff43a7199c items=0 ppid=1679 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.295000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:11:30.297000 audit[1750]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.297000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe913ba6d0 a2=0 a3=7ffe913ba6bc items=0 ppid=1679 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:11:30.299000 audit[1752]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.299000 audit[1752]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff5c850d10 a2=0 a3=7fff5c850cfc items=0 ppid=1679 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.299000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:11:30.301000 audit[1754]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1754 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.301000 audit[1754]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe58839cc0 a2=0 a3=7ffe58839cac items=0 ppid=1679 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.301000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:11:30.303000 audit[1756]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.303000 audit[1756]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff392472b0 a2=0 a3=7fff3924729c items=0 ppid=1679 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.303000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:11:30.305000 audit[1758]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.305000 audit[1758]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcf6fe7e30 a2=0 a3=7ffcf6fe7e1c items=0 ppid=1679 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.305000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:11:30.306435 systemd-networkd[1470]: docker0: Link UP Oct 2 20:11:30.332000 audit[1762]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.332000 audit[1762]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc4f0bdd30 a2=0 a3=7ffc4f0bdd1c items=0 ppid=1679 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.332000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:30.333000 audit[1763]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:30.333000 audit[1763]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffafb5eb50 a2=0 a3=7fffafb5eb3c items=0 ppid=1679 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:30.333000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:30.334589 env[1679]: time="2023-10-02T20:11:30.334550011Z" level=info msg="Loading containers: done." Oct 2 20:11:30.395014 env[1679]: time="2023-10-02T20:11:30.393999283Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:11:30.395014 env[1679]: time="2023-10-02T20:11:30.394231883Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:11:30.395014 env[1679]: time="2023-10-02T20:11:30.394559083Z" level=info msg="Daemon has completed initialization" Oct 2 20:11:30.437119 systemd[1]: Started docker.service. Oct 2 20:11:30.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:30.448671 env[1679]: time="2023-10-02T20:11:30.448615748Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:11:30.465898 systemd[1]: Reloading. Oct 2 20:11:30.544690 /usr/lib/systemd/system-generators/torcx-generator[1808]: time="2023-10-02T20:11:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:11:30.545271 /usr/lib/systemd/system-generators/torcx-generator[1808]: time="2023-10-02T20:11:30Z" level=info msg="torcx already run" Oct 2 20:11:30.643887 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:11:30.643907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:11:30.661875 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit: BPF prog-id=32 op=LOAD Oct 2 20:11:30.729000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit: BPF prog-id=33 op=LOAD Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.729000 audit: BPF prog-id=34 op=LOAD Oct 2 20:11:30.729000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:11:30.729000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit: BPF prog-id=35 op=LOAD Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.730000 audit: BPF prog-id=36 op=LOAD Oct 2 20:11:30.730000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:11:30.730000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.732000 audit: BPF prog-id=37 op=LOAD Oct 2 20:11:30.732000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.733000 audit: BPF prog-id=38 op=LOAD Oct 2 20:11:30.733000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.734000 audit: BPF prog-id=39 op=LOAD Oct 2 20:11:30.734000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit: BPF prog-id=40 op=LOAD Oct 2 20:11:30.735000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit: BPF prog-id=41 op=LOAD Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.735000 audit: BPF prog-id=42 op=LOAD Oct 2 20:11:30.735000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:11:30.735000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.736000 audit: BPF prog-id=43 op=LOAD Oct 2 20:11:30.736000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit: BPF prog-id=44 op=LOAD Oct 2 20:11:30.738000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit: BPF prog-id=45 op=LOAD Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:30.739000 audit: BPF prog-id=46 op=LOAD Oct 2 20:11:30.739000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:11:30.739000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:11:30.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:30.751597 systemd[1]: Started kubelet.service. Oct 2 20:11:30.821719 kubelet[1870]: E1002 20:11:30.821652 1870 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:11:30.823622 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:30.823794 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:30.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:34.059604 env[1328]: time="2023-10-02T20:11:34.059537849Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 20:11:34.716286 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3835054309.mount: Deactivated successfully. Oct 2 20:11:37.587763 env[1328]: time="2023-10-02T20:11:37.587702680Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:37.594846 env[1328]: time="2023-10-02T20:11:37.594804670Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:37.600053 env[1328]: time="2023-10-02T20:11:37.600010636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:37.611227 env[1328]: time="2023-10-02T20:11:37.611182677Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:37.611954 env[1328]: time="2023-10-02T20:11:37.611922186Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 20:11:37.621513 env[1328]: time="2023-10-02T20:11:37.621484508Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 20:11:40.549436 env[1328]: time="2023-10-02T20:11:40.549363025Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:40.556858 env[1328]: time="2023-10-02T20:11:40.556816712Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:40.562801 env[1328]: time="2023-10-02T20:11:40.562667780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:40.567971 env[1328]: time="2023-10-02T20:11:40.567937941Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:40.568600 env[1328]: time="2023-10-02T20:11:40.568569049Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 20:11:40.578512 env[1328]: time="2023-10-02T20:11:40.578485464Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 20:11:41.070504 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:11:41.077683 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:11:41.077761 kernel: audit: type=1130 audit(1696277501.070:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.070796 systemd[1]: Stopped kubelet.service. Oct 2 20:11:41.072271 systemd[1]: Started kubelet.service. Oct 2 20:11:41.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.102593 kernel: audit: type=1131 audit(1696277501.070:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.118760 kernel: audit: type=1130 audit(1696277501.071:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:41.130870 kubelet[1899]: E1002 20:11:41.130824 1899 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:11:41.134075 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:41.134242 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:41.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:41.151766 kernel: audit: type=1131 audit(1696277501.133:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:42.863498 env[1328]: time="2023-10-02T20:11:42.863439744Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:42.873832 env[1328]: time="2023-10-02T20:11:42.873794158Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:42.879480 env[1328]: time="2023-10-02T20:11:42.879447520Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:42.885581 env[1328]: time="2023-10-02T20:11:42.885551188Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:42.886260 env[1328]: time="2023-10-02T20:11:42.886229095Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 20:11:42.895594 env[1328]: time="2023-10-02T20:11:42.895536498Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 20:11:43.918717 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2892237737.mount: Deactivated successfully. Oct 2 20:11:44.403387 env[1328]: time="2023-10-02T20:11:44.403331001Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.411546 env[1328]: time="2023-10-02T20:11:44.411498586Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.415896 env[1328]: time="2023-10-02T20:11:44.415855831Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.424259 env[1328]: time="2023-10-02T20:11:44.424224219Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.424744 env[1328]: time="2023-10-02T20:11:44.424699924Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 20:11:44.434706 env[1328]: time="2023-10-02T20:11:44.434671728Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:11:44.878543 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3989986397.mount: Deactivated successfully. Oct 2 20:11:44.918524 env[1328]: time="2023-10-02T20:11:44.918477283Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.934691 env[1328]: time="2023-10-02T20:11:44.934633152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.943029 env[1328]: time="2023-10-02T20:11:44.942990839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.968652 env[1328]: time="2023-10-02T20:11:44.968604906Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.969522 env[1328]: time="2023-10-02T20:11:44.969478016Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:11:44.981559 env[1328]: time="2023-10-02T20:11:44.981528241Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 20:11:45.781771 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount164595161.mount: Deactivated successfully. Oct 2 20:11:49.974045 env[1328]: time="2023-10-02T20:11:49.973987431Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:49.984347 env[1328]: time="2023-10-02T20:11:49.984304026Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:49.990021 env[1328]: time="2023-10-02T20:11:49.989984077Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:49.996106 env[1328]: time="2023-10-02T20:11:49.995988832Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:49.996906 env[1328]: time="2023-10-02T20:11:49.996870040Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 20:11:50.007470 env[1328]: time="2023-10-02T20:11:50.007443835Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 20:11:50.642344 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3078841390.mount: Deactivated successfully. Oct 2 20:11:51.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.178945 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:11:51.179181 systemd[1]: Stopped kubelet.service. Oct 2 20:11:51.180830 systemd[1]: Started kubelet.service. Oct 2 20:11:51.193758 kernel: audit: type=1130 audit(1696277511.178:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.226361 kernel: audit: type=1131 audit(1696277511.178:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.226472 kernel: audit: type=1130 audit(1696277511.178:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:51.267319 kubelet[1926]: E1002 20:11:51.267272 1926 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:11:51.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:51.269860 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:51.270019 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:51.286781 kernel: audit: type=1131 audit(1696277511.269:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:51.384296 env[1328]: time="2023-10-02T20:11:51.384240402Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.396721 env[1328]: time="2023-10-02T20:11:51.396674610Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.404817 env[1328]: time="2023-10-02T20:11:51.404778980Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.412133 env[1328]: time="2023-10-02T20:11:51.412095544Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.412641 env[1328]: time="2023-10-02T20:11:51.412608248Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 20:11:54.066814 systemd[1]: Stopped kubelet.service. Oct 2 20:11:54.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.092876 systemd[1]: Reloading. Oct 2 20:11:54.098220 kernel: audit: type=1130 audit(1696277514.066:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.098306 kernel: audit: type=1131 audit(1696277514.066:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.183263 /usr/lib/systemd/system-generators/torcx-generator[2009]: time="2023-10-02T20:11:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:11:54.183300 /usr/lib/systemd/system-generators/torcx-generator[2009]: time="2023-10-02T20:11:54Z" level=info msg="torcx already run" Oct 2 20:11:54.267626 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:11:54.267647 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:11:54.285262 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378372 kernel: audit: type=1400 audit(1696277514.350:391): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378495 kernel: audit: type=1400 audit(1696277514.350:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405715 kernel: audit: type=1400 audit(1696277514.350:393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405828 kernel: audit: type=1400 audit(1696277514.350:394): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit: BPF prog-id=47 op=LOAD Oct 2 20:11:54.377000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit: BPF prog-id=48 op=LOAD Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.377000 audit: BPF prog-id=49 op=LOAD Oct 2 20:11:54.377000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:11:54.377000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit: BPF prog-id=50 op=LOAD Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit: BPF prog-id=51 op=LOAD Oct 2 20:11:54.391000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:11:54.391000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405000 audit: BPF prog-id=52 op=LOAD Oct 2 20:11:54.405000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:11:54.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.406000 audit: BPF prog-id=53 op=LOAD Oct 2 20:11:54.406000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.407000 audit: BPF prog-id=54 op=LOAD Oct 2 20:11:54.407000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:11:54.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit: BPF prog-id=55 op=LOAD Oct 2 20:11:54.408000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit: BPF prog-id=56 op=LOAD Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.408000 audit: BPF prog-id=57 op=LOAD Oct 2 20:11:54.408000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:11:54.408000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.409000 audit: BPF prog-id=58 op=LOAD Oct 2 20:11:54.409000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit: BPF prog-id=59 op=LOAD Oct 2 20:11:54.412000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit: BPF prog-id=60 op=LOAD Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.412000 audit: BPF prog-id=61 op=LOAD Oct 2 20:11:54.412000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:11:54.412000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:11:54.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.429157 systemd[1]: Started kubelet.service. Oct 2 20:11:54.478532 kubelet[2072]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:11:54.478532 kubelet[2072]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:11:54.478976 kubelet[2072]: I1002 20:11:54.478570 2072 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:11:54.480016 kubelet[2072]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:11:54.480016 kubelet[2072]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:11:54.700046 kubelet[2072]: I1002 20:11:54.695258 2072 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:11:54.700046 kubelet[2072]: I1002 20:11:54.695286 2072 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:11:54.700046 kubelet[2072]: I1002 20:11:54.695571 2072 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:11:54.700938 kubelet[2072]: I1002 20:11:54.700908 2072 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:11:54.701956 kubelet[2072]: E1002 20:11:54.701937 2072 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.705070 kubelet[2072]: I1002 20:11:54.705048 2072 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:11:54.705440 kubelet[2072]: I1002 20:11:54.705425 2072 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:11:54.705644 kubelet[2072]: I1002 20:11:54.705629 2072 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:11:54.706093 kubelet[2072]: I1002 20:11:54.706067 2072 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:11:54.706093 kubelet[2072]: I1002 20:11:54.706094 2072 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:11:54.706230 kubelet[2072]: I1002 20:11:54.706211 2072 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:11:54.711769 kubelet[2072]: I1002 20:11:54.711749 2072 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:11:54.711851 kubelet[2072]: I1002 20:11:54.711815 2072 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:11:54.711851 kubelet[2072]: I1002 20:11:54.711843 2072 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:11:54.712284 kubelet[2072]: I1002 20:11:54.712263 2072 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:11:54.713340 kubelet[2072]: W1002 20:11:54.713278 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7019f225b0&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.713424 kubelet[2072]: E1002 20:11:54.713352 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7019f225b0&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.713478 kubelet[2072]: W1002 20:11:54.713438 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.713517 kubelet[2072]: E1002 20:11:54.713489 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.713869 kubelet[2072]: I1002 20:11:54.713851 2072 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:11:54.714236 kubelet[2072]: W1002 20:11:54.714218 2072 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:11:54.714815 kubelet[2072]: I1002 20:11:54.714785 2072 server.go:1186] "Started kubelet" Oct 2 20:11:54.715000 audit[2072]: AVC avc: denied { mac_admin } for pid=2072 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.715000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.715000 audit[2072]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000274cf0 a1=c000db4e70 a2=c000274c90 a3=25 items=0 ppid=1 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.715000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:54.715000 audit[2072]: AVC avc: denied { mac_admin } for pid=2072 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.715000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.715000 audit[2072]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0002654c0 a1=c000db4e88 a2=c000274e10 a3=25 items=0 ppid=1 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.715000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:54.717293 kubelet[2072]: I1002 20:11:54.716613 2072 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:11:54.717293 kubelet[2072]: I1002 20:11:54.716654 2072 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:11:54.717293 kubelet[2072]: I1002 20:11:54.716727 2072 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:11:54.719000 audit[2083]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.719000 audit[2083]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd5b9b3c00 a2=0 a3=7ffd5b9b3bec items=0 ppid=2072 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.719000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:11:54.720288 kubelet[2072]: I1002 20:11:54.720195 2072 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:11:54.720883 kubelet[2072]: E1002 20:11:54.720864 2072 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:11:54.720990 kubelet[2072]: E1002 20:11:54.720979 2072 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:11:54.721063 kubelet[2072]: I1002 20:11:54.720989 2072 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:11:54.722294 kubelet[2072]: E1002 20:11:54.722189 2072 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-7019f225b0.178a6369910e43de", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-7019f225b0", UID:"ci-3510.3.0-a-7019f225b0", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7019f225b0"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 714760158, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 714760158, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.18:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:11:54.723516 kubelet[2072]: I1002 20:11:54.723411 2072 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:11:54.724000 audit[2084]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.724000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff160a1d40 a2=0 a3=7fff160a1d2c items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:11:54.725265 kubelet[2072]: I1002 20:11:54.724962 2072 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:11:54.725667 kubelet[2072]: E1002 20:11:54.725644 2072 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7019f225b0?timeout=10s": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.726000 audit[2086]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.726000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc531d6840 a2=0 a3=7ffc531d682c items=0 ppid=2072 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:11:54.728000 audit[2088]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.728000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd111bc9a0 a2=0 a3=7ffd111bc98c items=0 ppid=2072 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:11:54.738684 kubelet[2072]: W1002 20:11:54.738652 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.738800 kubelet[2072]: E1002 20:11:54.738781 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.750000 audit[2093]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.750000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc12d7a810 a2=0 a3=7ffc12d7a7fc items=0 ppid=2072 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:11:54.754000 audit[2096]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2096 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.754000 audit[2096]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc677ee510 a2=0 a3=7ffc677ee4fc items=0 ppid=2072 pid=2096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.754000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:11:54.799000 audit[2099]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.799000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc57a17b20 a2=0 a3=7ffc57a17b0c items=0 ppid=2072 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:11:54.841587 kubelet[2072]: I1002 20:11:54.841561 2072 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:54.842494 kubelet[2072]: E1002 20:11:54.842477 2072 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:54.842893 kubelet[2072]: I1002 20:11:54.842876 2072 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:11:54.843001 kubelet[2072]: I1002 20:11:54.842896 2072 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:11:54.843001 kubelet[2072]: I1002 20:11:54.842916 2072 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:11:54.851000 audit[2102]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.851000 audit[2102]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffcebe80e50 a2=0 a3=7ffcebe80e3c items=0 ppid=2072 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.851000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:11:54.852000 audit[2103]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.852000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff58100410 a2=0 a3=7fff581003fc items=0 ppid=2072 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.852000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:11:54.854000 audit[2104]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.854000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2e52f570 a2=0 a3=7fff2e52f55c items=0 ppid=2072 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.854000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:11:54.856000 audit[2106]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2106 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.856000 audit[2106]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff294adee0 a2=0 a3=7fff294adecc items=0 ppid=2072 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.856000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:11:54.858000 audit[2108]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2108 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.858000 audit[2108]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffeee4ffd80 a2=0 a3=7ffeee4ffd6c items=0 ppid=2072 pid=2108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:11:54.861000 audit[2110]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2110 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.861000 audit[2110]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffcc7a7d770 a2=0 a3=7ffcc7a7d75c items=0 ppid=2072 pid=2110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.861000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:11:54.863000 audit[2112]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2112 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.863000 audit[2112]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffcbfd81470 a2=0 a3=7ffcbfd8145c items=0 ppid=2072 pid=2112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.863000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:11:54.865000 audit[2114]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=2114 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.865000 audit[2114]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7fff8b9ae780 a2=0 a3=7fff8b9ae76c items=0 ppid=2072 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:11:54.867034 kubelet[2072]: I1002 20:11:54.867014 2072 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:11:54.867000 audit[2115]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.867000 audit[2115]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe5e55e430 a2=0 a3=7ffe5e55e41c items=0 ppid=2072 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:11:54.867000 audit[2116]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.867000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2b3852a0 a2=0 a3=7fff2b38528c items=0 ppid=2072 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.867000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:11:54.868000 audit[2117]: NETFILTER_CFG table=nat:47 family=10 entries=2 op=nft_register_chain pid=2117 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.868000 audit[2117]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffef0180060 a2=0 a3=7ffef018004c items=0 ppid=2072 pid=2117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:11:54.869000 audit[2118]: NETFILTER_CFG table=nat:48 family=2 entries=1 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.869000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff38383cf0 a2=0 a3=7fff38383cdc items=0 ppid=2072 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.869000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:11:54.870000 audit[2120]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.870000 audit[2120]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd41bbfda0 a2=0 a3=7ffd41bbfd8c items=0 ppid=2072 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:11:54.871000 audit[2121]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_rule pid=2121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.871000 audit[2121]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffeae008e60 a2=0 a3=7ffeae008e4c items=0 ppid=2072 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.871000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:11:54.872000 audit[2122]: NETFILTER_CFG table=filter:51 family=10 entries=2 op=nft_register_chain pid=2122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.872000 audit[2122]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe189e0030 a2=0 a3=7ffe189e001c items=0 ppid=2072 pid=2122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:11:54.874000 audit[2124]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=2124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.874000 audit[2124]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffc2796e670 a2=0 a3=7ffc2796e65c items=0 ppid=2072 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.874000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:11:54.875000 audit[2125]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.875000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffce33593b0 a2=0 a3=7ffce335939c items=0 ppid=2072 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.875000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:11:54.876000 audit[2126]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.876000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa9c700b0 a2=0 a3=7fffa9c7009c items=0 ppid=2072 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:11:54.879000 audit[2128]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.879000 audit[2128]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd284c6080 a2=0 a3=7ffd284c606c items=0 ppid=2072 pid=2128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.879000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:11:54.881000 audit[2130]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=2130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.881000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffe0346980 a2=0 a3=7fffe034696c items=0 ppid=2072 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.881000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:11:54.883000 audit[2132]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.883000 audit[2132]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffee0af9200 a2=0 a3=7ffee0af91ec items=0 ppid=2072 pid=2132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:11:54.885000 audit[2134]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.885000 audit[2134]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffc2b6fabf0 a2=0 a3=7ffc2b6fabdc items=0 ppid=2072 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.885000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:11:54.927000 audit[2136]: NETFILTER_CFG table=nat:59 family=10 entries=1 op=nft_register_rule pid=2136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.927000 audit[2136]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffd6aa847b0 a2=0 a3=7ffd6aa8479c items=0 ppid=2072 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:11:54.930381 kubelet[2072]: E1002 20:11:54.926108 2072 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7019f225b0?timeout=10s": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.930381 kubelet[2072]: I1002 20:11:54.929122 2072 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:11:54.930381 kubelet[2072]: I1002 20:11:54.929150 2072 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:11:54.930381 kubelet[2072]: I1002 20:11:54.929168 2072 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:11:54.930381 kubelet[2072]: E1002 20:11:54.929806 2072 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:11:54.931000 audit[2137]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.931000 audit[2137]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc20f92f00 a2=0 a3=7ffc20f92eec items=0 ppid=2072 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:11:54.932982 kubelet[2072]: I1002 20:11:54.932964 2072 policy_none.go:49] "None policy: Start" Oct 2 20:11:54.933000 audit[2139]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.933000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe03ef8ca0 a2=0 a3=7ffe03ef8c8c items=0 ppid=2072 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.933000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:11:54.936388 kubelet[2072]: W1002 20:11:54.936357 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.936473 kubelet[2072]: E1002 20:11:54.936398 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:54.937349 kubelet[2072]: I1002 20:11:54.937328 2072 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:11:54.937440 kubelet[2072]: I1002 20:11:54.937360 2072 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:11:54.937000 audit[2140]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.937000 audit[2140]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd35456a30 a2=0 a3=7ffd35456a1c items=0 ppid=2072 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.937000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:11:54.985000 systemd[1]: Created slice kubepods.slice. Oct 2 20:11:54.992059 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:11:54.994874 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:11:55.000365 kubelet[2072]: I1002 20:11:55.000343 2072 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:11:54.999000 audit[2072]: AVC avc: denied { mac_admin } for pid=2072 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.999000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.999000 audit[2072]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011a4c00 a1=c0011d44b0 a2=c0011a4bd0 a3=25 items=0 ppid=1 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.999000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:55.000786 kubelet[2072]: I1002 20:11:55.000414 2072 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:11:55.001074 kubelet[2072]: I1002 20:11:55.001053 2072 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:11:55.003031 kubelet[2072]: E1002 20:11:55.003015 2072 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-7019f225b0\" not found" Oct 2 20:11:55.030590 kubelet[2072]: I1002 20:11:55.030552 2072 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:11:55.032172 kubelet[2072]: I1002 20:11:55.032150 2072 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:11:55.034114 kubelet[2072]: I1002 20:11:55.034077 2072 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:11:55.035857 kubelet[2072]: I1002 20:11:55.035724 2072 status_manager.go:698] "Failed to get status for pod" podUID=496f51627045b051f5cb93e82d12f2fd pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" err="Get \"https://10.200.8.18:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-7019f225b0\": dial tcp 10.200.8.18:6443: connect: connection refused" Oct 2 20:11:55.037690 kubelet[2072]: I1002 20:11:55.037555 2072 status_manager.go:698] "Failed to get status for pod" podUID=e867a667a286dad300d649620f43469e pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" err="Get \"https://10.200.8.18:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-7019f225b0\": dial tcp 10.200.8.18:6443: connect: connection refused" Oct 2 20:11:55.040603 kubelet[2072]: I1002 20:11:55.039994 2072 status_manager.go:698] "Failed to get status for pod" podUID=eec792e472de3f4f087fb8aa0859deb4 pod="kube-system/kube-scheduler-ci-3510.3.0-a-7019f225b0" err="Get \"https://10.200.8.18:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-7019f225b0\": dial tcp 10.200.8.18:6443: connect: connection refused" Oct 2 20:11:55.042272 systemd[1]: Created slice kubepods-burstable-pod496f51627045b051f5cb93e82d12f2fd.slice. Oct 2 20:11:55.045105 kubelet[2072]: I1002 20:11:55.045084 2072 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.045354 kubelet[2072]: E1002 20:11:55.045337 2072 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.050987 systemd[1]: Created slice kubepods-burstable-podeec792e472de3f4f087fb8aa0859deb4.slice. Oct 2 20:11:55.061205 systemd[1]: Created slice kubepods-burstable-pode867a667a286dad300d649620f43469e.slice. Oct 2 20:11:55.126478 kubelet[2072]: I1002 20:11:55.126442 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126478 kubelet[2072]: I1002 20:11:55.126489 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/eec792e472de3f4f087fb8aa0859deb4-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-7019f225b0\" (UID: \"eec792e472de3f4f087fb8aa0859deb4\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126705 kubelet[2072]: I1002 20:11:55.126520 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126705 kubelet[2072]: I1002 20:11:55.126548 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126705 kubelet[2072]: I1002 20:11:55.126574 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126705 kubelet[2072]: I1002 20:11:55.126598 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126705 kubelet[2072]: I1002 20:11:55.126627 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126993 kubelet[2072]: I1002 20:11:55.126655 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.126993 kubelet[2072]: I1002 20:11:55.126686 2072 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.327118 kubelet[2072]: E1002 20:11:55.327036 2072 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7019f225b0?timeout=10s": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:55.350243 env[1328]: time="2023-10-02T20:11:55.350198384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-7019f225b0,Uid:496f51627045b051f5cb93e82d12f2fd,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.358996 env[1328]: time="2023-10-02T20:11:55.358958153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-7019f225b0,Uid:eec792e472de3f4f087fb8aa0859deb4,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.364798 env[1328]: time="2023-10-02T20:11:55.364764898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-7019f225b0,Uid:e867a667a286dad300d649620f43469e,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.447522 kubelet[2072]: I1002 20:11:55.447490 2072 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.448160 kubelet[2072]: E1002 20:11:55.448123 2072 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:55.859242 kubelet[2072]: W1002 20:11:55.859178 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:55.859242 kubelet[2072]: E1002 20:11:55.859247 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.18:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:55.936442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2561762715.mount: Deactivated successfully. Oct 2 20:11:55.967042 env[1328]: time="2023-10-02T20:11:55.967001407Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.972458 env[1328]: time="2023-10-02T20:11:55.972422450Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.990457 env[1328]: time="2023-10-02T20:11:55.990421890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.994222 env[1328]: time="2023-10-02T20:11:55.994188020Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.997973 env[1328]: time="2023-10-02T20:11:55.997939849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.000306 env[1328]: time="2023-10-02T20:11:56.000274168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.004314 env[1328]: time="2023-10-02T20:11:56.004280698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.008685 env[1328]: time="2023-10-02T20:11:56.008651331Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.015509 env[1328]: time="2023-10-02T20:11:56.015476183Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.019919 env[1328]: time="2023-10-02T20:11:56.019888317Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.036245 env[1328]: time="2023-10-02T20:11:56.036210342Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.054150 env[1328]: time="2023-10-02T20:11:56.054112978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:56.128360 env[1328]: time="2023-10-02T20:11:56.127273936Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:56.128504 kubelet[2072]: E1002 20:11:56.128291 2072 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7019f225b0?timeout=10s": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.128590 env[1328]: time="2023-10-02T20:11:56.127334836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:56.128590 env[1328]: time="2023-10-02T20:11:56.127364336Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:56.128590 env[1328]: time="2023-10-02T20:11:56.127533038Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c pid=2149 runtime=io.containerd.runc.v2 Oct 2 20:11:56.132691 kubelet[2072]: W1002 20:11:56.132457 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.132691 kubelet[2072]: E1002 20:11:56.132517 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.137246 env[1328]: time="2023-10-02T20:11:56.137176711Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:56.137422 env[1328]: time="2023-10-02T20:11:56.137389813Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:56.137543 env[1328]: time="2023-10-02T20:11:56.137516814Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:56.137851 env[1328]: time="2023-10-02T20:11:56.137812316Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b52e46f4dbc2af9e74dfa59d693b7bbf4559fbe35aac43334ec2ed8d25521fd0 pid=2162 runtime=io.containerd.runc.v2 Oct 2 20:11:56.150894 systemd[1]: Started cri-containerd-a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c.scope. Oct 2 20:11:56.168700 systemd[1]: Started cri-containerd-b52e46f4dbc2af9e74dfa59d693b7bbf4559fbe35aac43334ec2ed8d25521fd0.scope. Oct 2 20:11:56.177648 env[1328]: time="2023-10-02T20:11:56.177565919Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:56.177950 env[1328]: time="2023-10-02T20:11:56.177900722Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:56.178133 env[1328]: time="2023-10-02T20:11:56.178096723Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:56.179304 env[1328]: time="2023-10-02T20:11:56.178426426Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92 pid=2203 runtime=io.containerd.runc.v2 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.222871 kernel: kauditd_printk_skb: 280 callbacks suppressed Oct 2 20:11:56.223033 kernel: audit: type=1400 audit(1696277516.188:600): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223086 kernel: audit: type=1400 audit(1696277516.188:601): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223222 kubelet[2072]: W1002 20:11:56.222757 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7019f225b0&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.223222 kubelet[2072]: E1002 20:11:56.222839 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7019f225b0&limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.237967 kernel: audit: type=1400 audit(1696277516.188:602): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.252767 kernel: audit: type=1400 audit(1696277516.188:603): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.254673 kubelet[2072]: I1002 20:11:56.254182 2072 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:56.254673 kubelet[2072]: E1002 20:11:56.254624 2072 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.18:6443/api/v1/nodes\": dial tcp 10.200.8.18:6443: connect: connection refused" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268874 kernel: audit: type=1400 audit(1696277516.188:604): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.287293 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:11:56.287375 kernel: audit: type=1400 audit(1696277516.188:605): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.287397 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.288226 kubelet[2072]: E1002 20:11:56.288004 2072 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-7019f225b0.178a6369910e43de", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-7019f225b0", UID:"ci-3510.3.0-a-7019f225b0", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7019f225b0"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 714760158, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 714760158, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.18:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.18:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:11:56.288226 kubelet[2072]: W1002 20:11:56.288158 2072 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.288226 kubelet[2072]: E1002 20:11:56.288204 2072 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.18:6443: connect: connection refused Oct 2 20:11:56.306377 kernel: audit: type=1400 audit(1696277516.188:606): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.306447 kernel: audit: backlog limit exceeded Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.189000 audit: BPF prog-id=62 op=LOAD Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2149 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363332353333613431613333353737663330343134626165336534 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2149 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363332353333613431613333353737663330343134626165336534 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.190000 audit: BPF prog-id=63 op=LOAD Oct 2 20:11:56.190000 audit[2167]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000286c50 items=0 ppid=2149 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363332353333613431613333353737663330343134626165336534 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit: BPF prog-id=64 op=LOAD Oct 2 20:11:56.268000 audit[2167]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000286c98 items=0 ppid=2149 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363332353333613431613333353737663330343134626165336534 Oct 2 20:11:56.268000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:11:56.268000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { perfmon } for pid=2167 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit[2167]: AVC avc: denied { bpf } for pid=2167 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.268000 audit: BPF prog-id=65 op=LOAD Oct 2 20:11:56.268000 audit[2167]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002870a8 items=0 ppid=2149 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130363332353333613431613333353737663330343134626165336534 Oct 2 20:11:56.309000 audit: BPF prog-id=66 op=LOAD Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2162 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235326534366634646263326166396537346466613539643639336237 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2162 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235326534366634646263326166396537346466613539643639336237 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.309000 audit: BPF prog-id=67 op=LOAD Oct 2 20:11:56.309000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ca330 items=0 ppid=2162 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235326534366634646263326166396537346466613539643639336237 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit: BPF prog-id=68 op=LOAD Oct 2 20:11:56.310000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ca378 items=0 ppid=2162 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235326534366634646263326166396537346466613539643639336237 Oct 2 20:11:56.310000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:11:56.310000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.310000 audit: BPF prog-id=69 op=LOAD Oct 2 20:11:56.310000 audit[2183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ca788 items=0 ppid=2162 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235326534366634646263326166396537346466613539643639336237 Oct 2 20:11:56.321328 systemd[1]: Started cri-containerd-12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92.scope. Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.339000 audit: BPF prog-id=70 op=LOAD Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2203 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132613338323866303733306231366539356330353964383739396366 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2203 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132613338323866303733306231366539356330353964383739396366 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit: BPF prog-id=71 op=LOAD Oct 2 20:11:56.340000 audit[2227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002926f0 items=0 ppid=2203 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132613338323866303733306231366539356330353964383739396366 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit: BPF prog-id=72 op=LOAD Oct 2 20:11:56.340000 audit[2227]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000292738 items=0 ppid=2203 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132613338323866303733306231366539356330353964383739396366 Oct 2 20:11:56.340000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:11:56.340000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { perfmon } for pid=2227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit[2227]: AVC avc: denied { bpf } for pid=2227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.340000 audit: BPF prog-id=73 op=LOAD Oct 2 20:11:56.340000 audit[2227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000292b48 items=0 ppid=2203 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132613338323866303733306231366539356330353964383739396366 Oct 2 20:11:56.356051 env[1328]: time="2023-10-02T20:11:56.356001779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-7019f225b0,Uid:496f51627045b051f5cb93e82d12f2fd,Namespace:kube-system,Attempt:0,} returns sandbox id \"b52e46f4dbc2af9e74dfa59d693b7bbf4559fbe35aac43334ec2ed8d25521fd0\"" Oct 2 20:11:56.360358 env[1328]: time="2023-10-02T20:11:56.360315412Z" level=info msg="CreateContainer within sandbox \"b52e46f4dbc2af9e74dfa59d693b7bbf4559fbe35aac43334ec2ed8d25521fd0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:11:56.390910 env[1328]: time="2023-10-02T20:11:56.385626705Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-7019f225b0,Uid:eec792e472de3f4f087fb8aa0859deb4,Namespace:kube-system,Attempt:0,} returns sandbox id \"a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c\"" Oct 2 20:11:56.390910 env[1328]: time="2023-10-02T20:11:56.390043639Z" level=info msg="CreateContainer within sandbox \"a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:11:56.398622 env[1328]: time="2023-10-02T20:11:56.398582004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-7019f225b0,Uid:e867a667a286dad300d649620f43469e,Namespace:kube-system,Attempt:0,} returns sandbox id \"12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92\"" Oct 2 20:11:56.400648 env[1328]: time="2023-10-02T20:11:56.400617019Z" level=info msg="CreateContainer within sandbox \"12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:11:56.431637 env[1328]: time="2023-10-02T20:11:56.431586955Z" level=info msg="CreateContainer within sandbox \"b52e46f4dbc2af9e74dfa59d693b7bbf4559fbe35aac43334ec2ed8d25521fd0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0322a9e4c90520c7770a85afff40d4ad47564af5c52ef654b77d863527c78b78\"" Oct 2 20:11:56.432259 env[1328]: time="2023-10-02T20:11:56.432232960Z" level=info msg="StartContainer for \"0322a9e4c90520c7770a85afff40d4ad47564af5c52ef654b77d863527c78b78\"" Oct 2 20:11:56.454254 systemd[1]: Started cri-containerd-0322a9e4c90520c7770a85afff40d4ad47564af5c52ef654b77d863527c78b78.scope. Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.473000 audit: BPF prog-id=74 op=LOAD Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2162 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033323261396534633930353230633737373061383561666666343064 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2162 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033323261396534633930353230633737373061383561666666343064 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit: BPF prog-id=75 op=LOAD Oct 2 20:11:56.474000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000254a40 items=0 ppid=2162 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033323261396534633930353230633737373061383561666666343064 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.474000 audit: BPF prog-id=76 op=LOAD Oct 2 20:11:56.474000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000254a88 items=0 ppid=2162 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033323261396534633930353230633737373061383561666666343064 Oct 2 20:11:56.475000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:11:56.475000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.475000 audit: BPF prog-id=77 op=LOAD Oct 2 20:11:56.475000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000254e98 items=0 ppid=2162 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033323261396534633930353230633737373061383561666666343064 Oct 2 20:11:56.490273 env[1328]: time="2023-10-02T20:11:56.490225402Z" level=info msg="CreateContainer within sandbox \"12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0\"" Oct 2 20:11:56.490822 env[1328]: time="2023-10-02T20:11:56.490791907Z" level=info msg="StartContainer for \"dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0\"" Oct 2 20:11:56.505123 env[1328]: time="2023-10-02T20:11:56.505074016Z" level=info msg="CreateContainer within sandbox \"a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b\"" Oct 2 20:11:56.505612 env[1328]: time="2023-10-02T20:11:56.505578419Z" level=info msg="StartContainer for \"607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b\"" Oct 2 20:11:56.518240 systemd[1]: Started cri-containerd-dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0.scope. Oct 2 20:11:56.537808 env[1328]: time="2023-10-02T20:11:56.537631364Z" level=info msg="StartContainer for \"0322a9e4c90520c7770a85afff40d4ad47564af5c52ef654b77d863527c78b78\" returns successfully" Oct 2 20:11:56.550312 systemd[1]: Started cri-containerd-607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b.scope. Oct 2 20:11:56.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.562000 audit: BPF prog-id=78 op=LOAD Oct 2 20:11:56.563000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.563000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2203 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461666432663763613331383433316637356230646530303464636238 Oct 2 20:11:56.563000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.563000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2203 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461666432663763613331383433316637356230646530303464636238 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit: BPF prog-id=79 op=LOAD Oct 2 20:11:56.564000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00009e360 items=0 ppid=2203 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461666432663763613331383433316637356230646530303464636238 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.564000 audit: BPF prog-id=80 op=LOAD Oct 2 20:11:56.564000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00009e3a8 items=0 ppid=2203 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461666432663763613331383433316637356230646530303464636238 Oct 2 20:11:56.565000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:11:56.565000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { perfmon } for pid=2303 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit[2303]: AVC avc: denied { bpf } for pid=2303 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.565000 audit: BPF prog-id=81 op=LOAD Oct 2 20:11:56.565000 audit[2303]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00009e7b8 items=0 ppid=2203 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461666432663763613331383433316637356230646530303464636238 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.587000 audit: BPF prog-id=82 op=LOAD Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2149 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376437646638346665386162383261383539643365396563313839 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2149 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376437646638346665386162383261383539643365396563313839 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.588000 audit: BPF prog-id=83 op=LOAD Oct 2 20:11:56.588000 audit[2327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000222ea0 items=0 ppid=2149 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.588000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376437646638346665386162383261383539643365396563313839 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.589000 audit: BPF prog-id=84 op=LOAD Oct 2 20:11:56.589000 audit[2327]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000222ee8 items=0 ppid=2149 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376437646638346665386162383261383539643365396563313839 Oct 2 20:11:56.590000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:11:56.590000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { perfmon } for pid=2327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit[2327]: AVC avc: denied { bpf } for pid=2327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.590000 audit: BPF prog-id=85 op=LOAD Oct 2 20:11:56.590000 audit[2327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002232f8 items=0 ppid=2149 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630376437646638346665386162383261383539643365396563313839 Oct 2 20:11:56.640033 env[1328]: time="2023-10-02T20:11:56.639974044Z" level=info msg="StartContainer for \"607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b\" returns successfully" Oct 2 20:11:56.658518 env[1328]: time="2023-10-02T20:11:56.658406884Z" level=info msg="StartContainer for \"dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0\" returns successfully" Oct 2 20:11:57.857371 kubelet[2072]: I1002 20:11:57.857333 2072 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:58.589000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.589000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000312600 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:11:58.589000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:58.589000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.589000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0000b0040 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:11:58.589000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:59.442000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.442000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002b20030 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.442000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.442000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.442000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c001b3e060 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.442000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.443000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.443000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002b20210 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002b204e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.448000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.448000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001873260 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.448000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:59.448000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0042a0de0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:11:59.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:59.629237 kubelet[2072]: E1002 20:11:59.629191 2072 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-7019f225b0\" not found" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:59.629800 kubelet[2072]: I1002 20:11:59.629708 2072 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:11:59.716146 kubelet[2072]: I1002 20:11:59.716011 2072 apiserver.go:52] "Watching apiserver" Oct 2 20:11:59.725159 kubelet[2072]: I1002 20:11:59.725127 2072 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:11:59.759438 kubelet[2072]: I1002 20:11:59.759393 2072 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:11:59.973328 kubelet[2072]: E1002 20:11:59.973212 2072 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:02.667968 systemd[1]: Reloading. Oct 2 20:12:02.764571 /usr/lib/systemd/system-generators/torcx-generator[2401]: time="2023-10-02T20:12:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:12:02.764605 /usr/lib/systemd/system-generators/torcx-generator[2401]: time="2023-10-02T20:12:02Z" level=info msg="torcx already run" Oct 2 20:12:02.851705 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:12:02.851726 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:12:02.870695 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:12:02.969892 kernel: kauditd_printk_skb: 358 callbacks suppressed Oct 2 20:12:02.970048 kernel: audit: type=1400 audit(1696277522.951:715): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.989905 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:02.989996 kernel: audit: type=1400 audit(1696277522.951:716): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.990041 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:02.951000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.007609 kernel: audit: type=1400 audit(1696277522.952:717): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.007703 kernel: audit: backlog limit exceeded Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.024713 kernel: audit: type=1400 audit(1696277522.952:718): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.024827 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048037 kernel: audit: type=1400 audit(1696277522.952:719): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048192 kernel: audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit: BPF prog-id=86 op=LOAD Oct 2 20:12:02.969000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit: BPF prog-id=87 op=LOAD Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.969000 audit: BPF prog-id=88 op=LOAD Oct 2 20:12:02.969000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:12:02.969000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit: BPF prog-id=89 op=LOAD Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit: BPF prog-id=90 op=LOAD Oct 2 20:12:02.970000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:12:02.970000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.971000 audit: BPF prog-id=91 op=LOAD Oct 2 20:12:03.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.012000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit: BPF prog-id=93 op=LOAD Oct 2 20:12:03.049000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit: BPF prog-id=94 op=LOAD Oct 2 20:12:03.050000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.050000 audit: BPF prog-id=95 op=LOAD Oct 2 20:12:03.050000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit: BPF prog-id=96 op=LOAD Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.051000 audit: BPF prog-id=97 op=LOAD Oct 2 20:12:03.051000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:12:03.051000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.052000 audit: BPF prog-id=98 op=LOAD Oct 2 20:12:03.052000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.053000 audit: BPF prog-id=99 op=LOAD Oct 2 20:12:03.053000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.055000 audit: BPF prog-id=100 op=LOAD Oct 2 20:12:03.055000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.057000 audit: BPF prog-id=101 op=LOAD Oct 2 20:12:03.057000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit: BPF prog-id=102 op=LOAD Oct 2 20:12:03.058000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit: BPF prog-id=103 op=LOAD Oct 2 20:12:03.059000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit: BPF prog-id=104 op=LOAD Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit: BPF prog-id=105 op=LOAD Oct 2 20:12:03.059000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:12:03.059000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.060000 audit: BPF prog-id=106 op=LOAD Oct 2 20:12:03.060000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:12:03.078250 systemd[1]: Stopping kubelet.service... Oct 2 20:12:03.078942 kubelet[2072]: I1002 20:12:03.078805 2072 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:12:03.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.101086 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:12:03.101305 systemd[1]: Stopped kubelet.service. Oct 2 20:12:03.103478 systemd[1]: Started kubelet.service. Oct 2 20:12:03.194702 kubelet[2464]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:12:03.194702 kubelet[2464]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:12:03.195163 kubelet[2464]: I1002 20:12:03.194776 2464 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:12:03.196392 kubelet[2464]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:12:03.196392 kubelet[2464]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:12:03.199615 kubelet[2464]: I1002 20:12:03.199588 2464 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:12:03.199615 kubelet[2464]: I1002 20:12:03.199613 2464 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:12:03.199924 kubelet[2464]: I1002 20:12:03.199903 2464 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:12:03.201530 kubelet[2464]: I1002 20:12:03.201501 2464 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:12:03.204539 kubelet[2464]: I1002 20:12:03.204512 2464 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:12:03.207727 kubelet[2464]: I1002 20:12:03.207706 2464 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:12:03.208083 kubelet[2464]: I1002 20:12:03.208066 2464 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:12:03.208274 kubelet[2464]: I1002 20:12:03.208251 2464 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:12:03.208402 kubelet[2464]: I1002 20:12:03.208289 2464 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:12:03.208402 kubelet[2464]: I1002 20:12:03.208304 2464 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:12:03.208402 kubelet[2464]: I1002 20:12:03.208359 2464 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:12:03.212030 kubelet[2464]: I1002 20:12:03.212011 2464 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:12:03.212126 kubelet[2464]: I1002 20:12:03.212040 2464 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:12:03.212126 kubelet[2464]: I1002 20:12:03.212069 2464 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:12:03.212126 kubelet[2464]: I1002 20:12:03.212087 2464 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:12:03.219370 kubelet[2464]: I1002 20:12:03.219355 2464 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:12:03.220025 kubelet[2464]: I1002 20:12:03.220012 2464 server.go:1186] "Started kubelet" Oct 2 20:12:03.221000 audit[2464]: AVC avc: denied { mac_admin } for pid=2464 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.221000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:03.221000 audit[2464]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b8cb40 a1=c000b447c8 a2=c000b8cb10 a3=25 items=0 ppid=1 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:03.221000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:03.222689 kubelet[2464]: I1002 20:12:03.222675 2464 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:12:03.222000 audit[2464]: AVC avc: denied { mac_admin } for pid=2464 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.222000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:03.222000 audit[2464]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b2f360 a1=c000b447e0 a2=c000b8cbd0 a3=25 items=0 ppid=1 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:03.222000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:03.223300 kubelet[2464]: I1002 20:12:03.223286 2464 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:12:03.223418 kubelet[2464]: I1002 20:12:03.223408 2464 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:12:03.227064 kubelet[2464]: I1002 20:12:03.227047 2464 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:12:03.227920 kubelet[2464]: I1002 20:12:03.227904 2464 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:12:03.231584 kubelet[2464]: I1002 20:12:03.231570 2464 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:12:03.232384 kubelet[2464]: I1002 20:12:03.232372 2464 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:12:03.245553 kubelet[2464]: E1002 20:12:03.245529 2464 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:12:03.245780 kubelet[2464]: E1002 20:12:03.245765 2464 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:12:03.272217 kubelet[2464]: I1002 20:12:03.272189 2464 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:12:03.286228 kubelet[2464]: I1002 20:12:03.286206 2464 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:12:03.292602 kubelet[2464]: I1002 20:12:03.286860 2464 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:12:03.292602 kubelet[2464]: I1002 20:12:03.286887 2464 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:12:03.292602 kubelet[2464]: E1002 20:12:03.286945 2464 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:12:03.334349 kubelet[2464]: I1002 20:12:03.334308 2464 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.342029 kubelet[2464]: I1002 20:12:03.341993 2464 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:12:03.342274 kubelet[2464]: I1002 20:12:03.342259 2464 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:12:03.342406 kubelet[2464]: I1002 20:12:03.342394 2464 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:12:03.342662 kubelet[2464]: I1002 20:12:03.342652 2464 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:12:03.342726 kubelet[2464]: I1002 20:12:03.342720 2464 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:12:03.342799 kubelet[2464]: I1002 20:12:03.342793 2464 policy_none.go:49] "None policy: Start" Oct 2 20:12:03.344020 kubelet[2464]: I1002 20:12:03.344002 2464 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:12:03.344173 kubelet[2464]: I1002 20:12:03.344146 2464 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:12:03.344463 kubelet[2464]: I1002 20:12:03.344452 2464 state_mem.go:75] "Updated machine memory state" Oct 2 20:12:03.346197 kubelet[2464]: I1002 20:12:03.346182 2464 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.346328 kubelet[2464]: I1002 20:12:03.346318 2464 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.354051 kubelet[2464]: I1002 20:12:03.354027 2464 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:12:03.353000 audit[2464]: AVC avc: denied { mac_admin } for pid=2464 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:03.353000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:03.353000 audit[2464]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001016960 a1=c001015f08 a2=c001016930 a3=25 items=0 ppid=1 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:03.353000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:03.355458 kubelet[2464]: I1002 20:12:03.354376 2464 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:12:03.355458 kubelet[2464]: I1002 20:12:03.354727 2464 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:12:03.387838 kubelet[2464]: I1002 20:12:03.387794 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:03.388031 kubelet[2464]: I1002 20:12:03.387901 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:03.388031 kubelet[2464]: I1002 20:12:03.387963 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:03.434309 kubelet[2464]: I1002 20:12:03.434276 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434309 kubelet[2464]: I1002 20:12:03.434318 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434541 kubelet[2464]: I1002 20:12:03.434346 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434541 kubelet[2464]: I1002 20:12:03.434372 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/eec792e472de3f4f087fb8aa0859deb4-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-7019f225b0\" (UID: \"eec792e472de3f4f087fb8aa0859deb4\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434541 kubelet[2464]: I1002 20:12:03.434399 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434541 kubelet[2464]: I1002 20:12:03.434428 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434541 kubelet[2464]: I1002 20:12:03.434452 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434698 kubelet[2464]: I1002 20:12:03.434482 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/496f51627045b051f5cb93e82d12f2fd-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" (UID: \"496f51627045b051f5cb93e82d12f2fd\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.434698 kubelet[2464]: I1002 20:12:03.434531 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e867a667a286dad300d649620f43469e-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" (UID: \"e867a667a286dad300d649620f43469e\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:03.930000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:03.930000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001024b00 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:03.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:03.931000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:03.931000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001024c60 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:03.931000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:03.933000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:03.933000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001025e40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:03.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:03.934000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:03.934000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001025f80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:03.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:04.213306 kubelet[2464]: I1002 20:12:04.213183 2464 apiserver.go:52] "Watching apiserver" Oct 2 20:12:04.233146 kubelet[2464]: I1002 20:12:04.233095 2464 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:12:04.239341 kubelet[2464]: I1002 20:12:04.239310 2464 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:12:04.348000 audit[2515]: USER_ACCT pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:04.349192 sudo[2515]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:12:04.349467 sudo[2515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:12:04.348000 audit[2515]: CRED_REFR pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:04.351000 audit[2515]: USER_START pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:04.430083 kubelet[2464]: E1002 20:12:04.430037 2464 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-7019f225b0\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:04.821185 kubelet[2464]: E1002 20:12:04.821146 2464 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-7019f225b0\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:04.902612 sudo[2515]: pam_unix(sudo:session): session closed for user root Oct 2 20:12:04.901000 audit[2515]: USER_END pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:04.902000 audit[2515]: CRED_DISP pid=2515 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:05.019036 kubelet[2464]: E1002 20:12:05.018999 2464 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-7019f225b0\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-7019f225b0" Oct 2 20:12:05.234492 kubelet[2464]: I1002 20:12:05.234389 2464 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7019f225b0" podStartSLOduration=2.234322429 pod.CreationTimestamp="2023-10-02 20:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:05.233313123 +0000 UTC m=+2.120418569" watchObservedRunningTime="2023-10-02 20:12:05.234322429 +0000 UTC m=+2.121427875" Oct 2 20:12:05.618038 kubelet[2464]: I1002 20:12:05.617994 2464 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-7019f225b0" podStartSLOduration=2.617961573 pod.CreationTimestamp="2023-10-02 20:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:05.617858072 +0000 UTC m=+2.504963518" watchObservedRunningTime="2023-10-02 20:12:05.617961573 +0000 UTC m=+2.505066919" Oct 2 20:12:06.138618 sudo[1664]: pam_unix(sudo:session): session closed for user root Oct 2 20:12:06.138000 audit[1664]: USER_END pid=1664 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:06.138000 audit[1664]: CRED_DISP pid=1664 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:06.237982 sshd[1661]: pam_unix(sshd:session): session closed for user core Oct 2 20:12:06.238000 audit[1661]: USER_END pid=1661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:12:06.238000 audit[1661]: CRED_DISP pid=1661 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:12:06.240971 systemd[1]: sshd@6-10.200.8.18:22-10.200.12.6:50936.service: Deactivated successfully. Oct 2 20:12:06.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.18:22-10.200.12.6:50936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:06.241901 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:12:06.242106 systemd[1]: session-9.scope: Consumed 3.922s CPU time. Oct 2 20:12:06.242607 systemd-logind[1313]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:12:06.243478 systemd-logind[1313]: Removed session 9. Oct 2 20:12:06.938297 kubelet[2464]: I1002 20:12:06.938241 2464 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-7019f225b0" podStartSLOduration=3.938202204 pod.CreationTimestamp="2023-10-02 20:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:06.017941413 +0000 UTC m=+2.905046859" watchObservedRunningTime="2023-10-02 20:12:06.938202204 +0000 UTC m=+3.825307550" Oct 2 20:12:16.459764 kernel: kauditd_printk_skb: 288 callbacks suppressed Oct 2 20:12:16.459946 kernel: audit: type=1400 audit(1696277536.448:969): avc: denied { watch } for pid=2334 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7171 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:12:16.448000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7171 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:12:16.448000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001468ac0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:16.495895 kernel: audit: type=1300 audit(1696277536.448:969): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001468ac0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:16.496025 kernel: audit: type=1327 audit(1696277536.448:969): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:16.448000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:16.823891 kubelet[2464]: I1002 20:12:16.823857 2464 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:12:16.824420 env[1328]: time="2023-10-02T20:12:16.824380747Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:12:16.824766 kubelet[2464]: I1002 20:12:16.824650 2464 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:12:17.127851 kubelet[2464]: I1002 20:12:17.127723 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:17.134877 systemd[1]: Created slice kubepods-besteffort-pod25c5eacf_bdb7_4de4_a026_240b9364b035.slice. Oct 2 20:12:17.143299 kubelet[2464]: I1002 20:12:17.143271 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:17.149147 systemd[1]: Created slice kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice. Oct 2 20:12:17.222507 kubelet[2464]: I1002 20:12:17.222469 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-hubble-tls\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222507 kubelet[2464]: I1002 20:12:17.222512 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/25c5eacf-bdb7-4de4-a026-240b9364b035-kube-proxy\") pod \"kube-proxy-zbc5g\" (UID: \"25c5eacf-bdb7-4de4-a026-240b9364b035\") " pod="kube-system/kube-proxy-zbc5g" Oct 2 20:12:17.222755 kubelet[2464]: I1002 20:12:17.222538 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-xtables-lock\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222755 kubelet[2464]: I1002 20:12:17.222562 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d6315197-c608-495e-8807-4fc8ed570916-clustermesh-secrets\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222755 kubelet[2464]: I1002 20:12:17.222586 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/25c5eacf-bdb7-4de4-a026-240b9364b035-lib-modules\") pod \"kube-proxy-zbc5g\" (UID: \"25c5eacf-bdb7-4de4-a026-240b9364b035\") " pod="kube-system/kube-proxy-zbc5g" Oct 2 20:12:17.222755 kubelet[2464]: I1002 20:12:17.222609 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-etc-cni-netd\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222755 kubelet[2464]: I1002 20:12:17.222633 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-kernel\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222974 kubelet[2464]: I1002 20:12:17.222656 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/25c5eacf-bdb7-4de4-a026-240b9364b035-xtables-lock\") pod \"kube-proxy-zbc5g\" (UID: \"25c5eacf-bdb7-4de4-a026-240b9364b035\") " pod="kube-system/kube-proxy-zbc5g" Oct 2 20:12:17.222974 kubelet[2464]: I1002 20:12:17.222684 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q4rhc\" (UniqueName: \"kubernetes.io/projected/25c5eacf-bdb7-4de4-a026-240b9364b035-kube-api-access-q4rhc\") pod \"kube-proxy-zbc5g\" (UID: \"25c5eacf-bdb7-4de4-a026-240b9364b035\") " pod="kube-system/kube-proxy-zbc5g" Oct 2 20:12:17.222974 kubelet[2464]: I1002 20:12:17.222710 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-cgroup\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222974 kubelet[2464]: I1002 20:12:17.222771 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-lib-modules\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.222974 kubelet[2464]: I1002 20:12:17.222805 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-k8ftm\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-kube-api-access-k8ftm\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222840 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-bpf-maps\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222868 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-run\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222897 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cni-path\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222927 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-hostproc\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222956 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-net\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.223162 kubelet[2464]: I1002 20:12:17.222989 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6315197-c608-495e-8807-4fc8ed570916-cilium-config-path\") pod \"cilium-bxkrb\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " pod="kube-system/cilium-bxkrb" Oct 2 20:12:17.442799 env[1328]: time="2023-10-02T20:12:17.442357443Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zbc5g,Uid:25c5eacf-bdb7-4de4-a026-240b9364b035,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:17.453671 env[1328]: time="2023-10-02T20:12:17.453632296Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bxkrb,Uid:d6315197-c608-495e-8807-4fc8ed570916,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:17.517836 env[1328]: time="2023-10-02T20:12:17.517596794Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:17.517836 env[1328]: time="2023-10-02T20:12:17.517641794Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:17.517836 env[1328]: time="2023-10-02T20:12:17.517657394Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:17.518108 env[1328]: time="2023-10-02T20:12:17.517883595Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f41543d2406a8372edfeb6d8a8db78c713eb1fad5c5efa86bd2503f5c5a5dfef pid=2562 runtime=io.containerd.runc.v2 Oct 2 20:12:17.527293 env[1328]: time="2023-10-02T20:12:17.527103138Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:17.527293 env[1328]: time="2023-10-02T20:12:17.527146638Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:17.527293 env[1328]: time="2023-10-02T20:12:17.527162039Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:17.527643 env[1328]: time="2023-10-02T20:12:17.527597141Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452 pid=2576 runtime=io.containerd.runc.v2 Oct 2 20:12:17.538853 systemd[1]: Started cri-containerd-f41543d2406a8372edfeb6d8a8db78c713eb1fad5c5efa86bd2503f5c5a5dfef.scope. Oct 2 20:12:17.558796 systemd[1]: Started cri-containerd-315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452.scope. Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.587848 kernel: audit: type=1400 audit(1696277537.572:970): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.597759 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:17.597851 kernel: audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:17.597886 kernel: audit: backlog limit exceeded Oct 2 20:12:17.614614 kernel: audit: type=1400 audit(1696277537.572:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.614724 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.631586 kernel: audit: type=1400 audit(1696277537.572:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.573000 audit: BPF prog-id=107 op=LOAD Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2562 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313534336432343036613833373265646665623664386138646237 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2562 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313534336432343036613833373265646665623664386138646237 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit: BPF prog-id=108 op=LOAD Oct 2 20:12:17.586000 audit[2586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000288900 items=0 ppid=2562 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313534336432343036613833373265646665623664386138646237 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit: BPF prog-id=109 op=LOAD Oct 2 20:12:17.586000 audit[2586]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000288948 items=0 ppid=2562 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313534336432343036613833373265646665623664386138646237 Oct 2 20:12:17.586000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:12:17.586000 audit: BPF prog-id=108 op=UNLOAD Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { perfmon } for pid=2586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit[2586]: AVC avc: denied { bpf } for pid=2586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.586000 audit: BPF prog-id=110 op=LOAD Oct 2 20:12:17.586000 audit[2586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000288d58 items=0 ppid=2562 pid=2586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313534336432343036613833373265646665623664386138646237 Oct 2 20:12:17.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.644000 audit: BPF prog-id=111 op=LOAD Oct 2 20:12:17.646000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.646000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2576 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356233333162306535393436636235373161353132356530303663 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=2576 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356233333162306535393436636235373161353132356530303663 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit: BPF prog-id=112 op=LOAD Oct 2 20:12:17.647000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c000024370 items=0 ppid=2576 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356233333162306535393436636235373161353132356530303663 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit: BPF prog-id=113 op=LOAD Oct 2 20:12:17.647000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0000243b8 items=0 ppid=2576 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356233333162306535393436636235373161353132356530303663 Oct 2 20:12:17.647000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:12:17.647000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { perfmon } for pid=2598 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit[2598]: AVC avc: denied { bpf } for pid=2598 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.647000 audit: BPF prog-id=114 op=LOAD Oct 2 20:12:17.647000 audit[2598]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0000247c8 items=0 ppid=2576 pid=2598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331356233333162306535393436636235373161353132356530303663 Oct 2 20:12:17.657577 env[1328]: time="2023-10-02T20:12:17.657531446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-zbc5g,Uid:25c5eacf-bdb7-4de4-a026-240b9364b035,Namespace:kube-system,Attempt:0,} returns sandbox id \"f41543d2406a8372edfeb6d8a8db78c713eb1fad5c5efa86bd2503f5c5a5dfef\"" Oct 2 20:12:17.661096 env[1328]: time="2023-10-02T20:12:17.661056262Z" level=info msg="CreateContainer within sandbox \"f41543d2406a8372edfeb6d8a8db78c713eb1fad5c5efa86bd2503f5c5a5dfef\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:12:17.675067 env[1328]: time="2023-10-02T20:12:17.675025827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-bxkrb,Uid:d6315197-c608-495e-8807-4fc8ed570916,Namespace:kube-system,Attempt:0,} returns sandbox id \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\"" Oct 2 20:12:17.677375 env[1328]: time="2023-10-02T20:12:17.677337538Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:12:17.700332 env[1328]: time="2023-10-02T20:12:17.700253245Z" level=info msg="CreateContainer within sandbox \"f41543d2406a8372edfeb6d8a8db78c713eb1fad5c5efa86bd2503f5c5a5dfef\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7c8b7ddafc6e75c4d253368f03ac3bbc3f7d0083410646586043be75e0266e57\"" Oct 2 20:12:17.701467 env[1328]: time="2023-10-02T20:12:17.701439750Z" level=info msg="StartContainer for \"7c8b7ddafc6e75c4d253368f03ac3bbc3f7d0083410646586043be75e0266e57\"" Oct 2 20:12:17.727947 systemd[1]: Started cri-containerd-7c8b7ddafc6e75c4d253368f03ac3bbc3f7d0083410646586043be75e0266e57.scope. Oct 2 20:12:17.742000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.742000 audit[2644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2562 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763386237646461666336653735633464323533333638663033616333 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit: BPF prog-id=115 op=LOAD Oct 2 20:12:17.743000 audit[2644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002e7d70 items=0 ppid=2562 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763386237646461666336653735633464323533333638663033616333 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.743000 audit: BPF prog-id=116 op=LOAD Oct 2 20:12:17.743000 audit[2644]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002e7db8 items=0 ppid=2562 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763386237646461666336653735633464323533333638663033616333 Oct 2 20:12:17.744000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:12:17.744000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { perfmon } for pid=2644 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit[2644]: AVC avc: denied { bpf } for pid=2644 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.744000 audit: BPF prog-id=117 op=LOAD Oct 2 20:12:17.744000 audit[2644]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002e7e48 items=0 ppid=2562 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763386237646461666336653735633464323533333638663033616333 Oct 2 20:12:17.769899 env[1328]: time="2023-10-02T20:12:17.769855369Z" level=info msg="StartContainer for \"7c8b7ddafc6e75c4d253368f03ac3bbc3f7d0083410646586043be75e0266e57\" returns successfully" Oct 2 20:12:17.771583 kubelet[2464]: I1002 20:12:17.771342 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:12:17.785583 systemd[1]: Created slice kubepods-besteffort-pod6ca9be16_8764_422c_b76c_d11ebd21f18c.slice. Oct 2 20:12:17.833218 kubelet[2464]: I1002 20:12:17.833177 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6ca9be16-8764-422c-b76c-d11ebd21f18c-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-qhmpv\" (UID: \"6ca9be16-8764-422c-b76c-d11ebd21f18c\") " pod="kube-system/cilium-operator-f59cbd8c6-qhmpv" Oct 2 20:12:17.833789 kubelet[2464]: I1002 20:12:17.833773 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q88h5\" (UniqueName: \"kubernetes.io/projected/6ca9be16-8764-422c-b76c-d11ebd21f18c-kube-api-access-q88h5\") pod \"cilium-operator-f59cbd8c6-qhmpv\" (UID: \"6ca9be16-8764-422c-b76c-d11ebd21f18c\") " pod="kube-system/cilium-operator-f59cbd8c6-qhmpv" Oct 2 20:12:17.869000 audit[2694]: NETFILTER_CFG table=mangle:63 family=10 entries=1 op=nft_register_chain pid=2694 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:17.869000 audit[2694]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeea766f00 a2=0 a3=7ffeea766eec items=0 ppid=2655 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:12:17.870000 audit[2695]: NETFILTER_CFG table=mangle:64 family=2 entries=1 op=nft_register_chain pid=2695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.870000 audit[2695]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3a318a50 a2=0 a3=7ffd3a318a3c items=0 ppid=2655 pid=2695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:12:17.872000 audit[2696]: NETFILTER_CFG table=nat:65 family=10 entries=1 op=nft_register_chain pid=2696 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:17.872000 audit[2696]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccf994b90 a2=0 a3=7ffccf994b7c items=0 ppid=2655 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:12:17.879000 audit[2697]: NETFILTER_CFG table=filter:66 family=10 entries=1 op=nft_register_chain pid=2697 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:17.879000 audit[2697]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9b1c7620 a2=0 a3=7fff9b1c760c items=0 ppid=2655 pid=2697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.879000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:12:17.879000 audit[2698]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_chain pid=2698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.879000 audit[2698]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe063af930 a2=0 a3=7ffe063af91c items=0 ppid=2655 pid=2698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:12:17.881000 audit[2700]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2700 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.881000 audit[2700]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcb044be90 a2=0 a3=7ffcb044be7c items=0 ppid=2655 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.881000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:12:17.975000 audit[2702]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_chain pid=2702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.975000 audit[2702]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd77bb27d0 a2=0 a3=7ffd77bb27bc items=0 ppid=2655 pid=2702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:12:17.978000 audit[2704]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.978000 audit[2704]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd41a68020 a2=0 a3=7ffd41a6800c items=0 ppid=2655 pid=2704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:12:17.983000 audit[2707]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.983000 audit[2707]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd46a7ff90 a2=0 a3=7ffd46a7ff7c items=0 ppid=2655 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:12:17.984000 audit[2708]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_chain pid=2708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.984000 audit[2708]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3d8e93c0 a2=0 a3=7ffc3d8e93ac items=0 ppid=2655 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.984000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:12:17.986000 audit[2710]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=2710 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.986000 audit[2710]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff15c48640 a2=0 a3=7fff15c4862c items=0 ppid=2655 pid=2710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:12:17.987000 audit[2711]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_chain pid=2711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.987000 audit[2711]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdea028030 a2=0 a3=7ffdea02801c items=0 ppid=2655 pid=2711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.987000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:12:17.990000 audit[2713]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.990000 audit[2713]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff15bc91b0 a2=0 a3=7fff15bc919c items=0 ppid=2655 pid=2713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:12:17.993000 audit[2716]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2716 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.993000 audit[2716]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcc2bd01d0 a2=0 a3=7ffcc2bd01bc items=0 ppid=2655 pid=2716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:12:17.995000 audit[2717]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.995000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffbe1f5e70 a2=0 a3=7fffbe1f5e5c items=0 ppid=2655 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:12:17.997000 audit[2719]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.997000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff6d6d9e70 a2=0 a3=7fff6d6d9e5c items=0 ppid=2655 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:12:17.998000 audit[2720]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_chain pid=2720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:17.998000 audit[2720]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee48ae4a0 a2=0 a3=7ffee48ae48c items=0 ppid=2655 pid=2720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.998000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:12:18.001000 audit[2722]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2722 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.001000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd54f931d0 a2=0 a3=7ffd54f931bc items=0 ppid=2655 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.004000 audit[2725]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.004000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff2a87bbc0 a2=0 a3=7fff2a87bbac items=0 ppid=2655 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.007000 audit[2728]: NETFILTER_CFG table=filter:82 family=2 entries=1 op=nft_register_rule pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.007000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeab6fbff0 a2=0 a3=7ffeab6fbfdc items=0 ppid=2655 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.007000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:12:18.009000 audit[2729]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_chain pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.009000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe262cb4b0 a2=0 a3=7ffe262cb49c items=0 ppid=2655 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:12:18.011000 audit[2731]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.011000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffe5f27260 a2=0 a3=7fffe5f2724c items=0 ppid=2655 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.011000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.017000 audit[2734]: NETFILTER_CFG table=nat:85 family=2 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.017000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd9f08e930 a2=0 a3=7ffd9f08e91c items=0 ppid=2655 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.079000 audit[2738]: NETFILTER_CFG table=filter:86 family=2 entries=6 op=nft_register_rule pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:12:18.079000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffca8415460 a2=0 a3=7ffca841544c items=0 ppid=2655 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.079000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.092763 env[1328]: time="2023-10-02T20:12:18.092695364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-qhmpv,Uid:6ca9be16-8764-422c-b76c-d11ebd21f18c,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:18.127000 audit[2738]: NETFILTER_CFG table=nat:87 family=2 entries=17 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:12:18.127000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffca8415460 a2=0 a3=7ffca841544c items=0 ppid=2655 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.127000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.130000 audit[2746]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2746 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.130000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd3d5bc0c0 a2=0 a3=7ffd3d5bc0ac items=0 ppid=2655 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:12:18.134000 audit[2753]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2753 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.134000 audit[2753]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffee8db0590 a2=0 a3=7ffee8db057c items=0 ppid=2655 pid=2753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.134000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:12:18.137412 env[1328]: time="2023-10-02T20:12:18.137341468Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:18.137581 env[1328]: time="2023-10-02T20:12:18.137385668Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:18.137581 env[1328]: time="2023-10-02T20:12:18.137414368Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:18.137730 env[1328]: time="2023-10-02T20:12:18.137569969Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b pid=2752 runtime=io.containerd.runc.v2 Oct 2 20:12:18.141000 audit[2765]: NETFILTER_CFG table=filter:90 family=10 entries=2 op=nft_register_chain pid=2765 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.141000 audit[2765]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcff242f80 a2=0 a3=7ffcff242f6c items=0 ppid=2655 pid=2765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.141000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:12:18.142000 audit[2770]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.142000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd44e94400 a2=0 a3=7ffd44e943ec items=0 ppid=2655 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:12:18.146000 audit[2773]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.146000 audit[2773]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd0ad00430 a2=0 a3=7ffd0ad0041c items=0 ppid=2655 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:12:18.147000 audit[2774]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_chain pid=2774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.147000 audit[2774]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2ccab3d0 a2=0 a3=7ffe2ccab3bc items=0 ppid=2655 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:12:18.151000 audit[2779]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=2779 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.151000 audit[2779]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff61baa4d0 a2=0 a3=7fff61baa4bc items=0 ppid=2655 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:12:18.156000 audit[2782]: NETFILTER_CFG table=filter:95 family=10 entries=2 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.156000 audit[2782]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffc7ea7c270 a2=0 a3=7ffc7ea7c25c items=0 ppid=2655 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:12:18.155671 systemd[1]: Started cri-containerd-3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b.scope. Oct 2 20:12:18.157000 audit[2783]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.157000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd1e6199e0 a2=0 a3=7ffd1e6199cc items=0 ppid=2655 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:12:18.162000 audit[2785]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.162000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffdf1c0c20 a2=0 a3=7fffdf1c0c0c items=0 ppid=2655 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.162000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:12:18.165000 audit[2786]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.165000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7ec2a500 a2=0 a3=7ffc7ec2a4ec items=0 ppid=2655 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.165000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:12:18.169000 audit[2788]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.169000 audit[2788]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffc80db670 a2=0 a3=7fffc80db65c items=0 ppid=2655 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.174000 audit[2792]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.174000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed4307f70 a2=0 a3=7ffed4307f5c items=0 ppid=2655 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:12:18.179000 audit[2800]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.179000 audit[2800]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd1196b060 a2=0 a3=7ffd1196b04c items=0 ppid=2655 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:12:18.180000 audit[2801]: NETFILTER_CFG table=nat:102 family=10 entries=1 op=nft_register_chain pid=2801 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.180000 audit[2801]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe3edc3bf0 a2=0 a3=7ffe3edc3bdc items=0 ppid=2655 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.184000 audit: BPF prog-id=118 op=LOAD Oct 2 20:12:18.184000 audit[2803]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.184000 audit[2803]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe762604f0 a2=0 a3=7ffe762604dc items=0 ppid=2655 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2752 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362366562333163383561616336646138386631633236623832313963 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2752 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362366562333163383561616336646138386631633236623832313963 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.185000 audit: BPF prog-id=119 op=LOAD Oct 2 20:12:18.185000 audit[2763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ce300 items=0 ppid=2752 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362366562333163383561616336646138386631633236623832313963 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.186000 audit: BPF prog-id=120 op=LOAD Oct 2 20:12:18.186000 audit[2763]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ce348 items=0 ppid=2752 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362366562333163383561616336646138386631633236623832313963 Oct 2 20:12:18.187000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:12:18.187000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { perfmon } for pid=2763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit[2763]: AVC avc: denied { bpf } for pid=2763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.187000 audit: BPF prog-id=121 op=LOAD Oct 2 20:12:18.187000 audit[2763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ce758 items=0 ppid=2752 pid=2763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.187000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362366562333163383561616336646138386631633236623832313963 Oct 2 20:12:18.194000 audit[2806]: NETFILTER_CFG table=nat:104 family=10 entries=2 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.194000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd4e00d030 a2=0 a3=7ffd4e00d01c items=0 ppid=2655 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.194000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.205000 audit[2810]: NETFILTER_CFG table=filter:105 family=10 entries=3 op=nft_register_rule pid=2810 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:12:18.205000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffe22a02f00 a2=0 a3=7ffe22a02eec items=0 ppid=2655 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.205000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.206000 audit[2810]: NETFILTER_CFG table=nat:106 family=10 entries=10 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:12:18.206000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffe22a02f00 a2=0 a3=7ffe22a02eec items=0 ppid=2655 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.206000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.224062 env[1328]: time="2023-10-02T20:12:18.224020163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-qhmpv,Uid:6ca9be16-8764-422c-b76c-d11ebd21f18c,Namespace:kube-system,Attempt:0,} returns sandbox id \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\"" Oct 2 20:12:18.361154 kubelet[2464]: I1002 20:12:18.360812 2464 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-zbc5g" podStartSLOduration=1.360773087 pod.CreationTimestamp="2023-10-02 20:12:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:18.360514486 +0000 UTC m=+15.247619932" watchObservedRunningTime="2023-10-02 20:12:18.360773087 +0000 UTC m=+15.247878433" Oct 2 20:12:24.294251 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount508493336.mount: Deactivated successfully. Oct 2 20:12:27.030986 env[1328]: time="2023-10-02T20:12:27.030937236Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:27.039309 env[1328]: time="2023-10-02T20:12:27.039269568Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:27.045033 env[1328]: time="2023-10-02T20:12:27.044999990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:27.045510 env[1328]: time="2023-10-02T20:12:27.045478991Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:12:27.046928 env[1328]: time="2023-10-02T20:12:27.046883597Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:12:27.048858 env[1328]: time="2023-10-02T20:12:27.048829704Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:12:27.092232 env[1328]: time="2023-10-02T20:12:27.092186369Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" Oct 2 20:12:27.095024 env[1328]: time="2023-10-02T20:12:27.093699875Z" level=info msg="StartContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" Oct 2 20:12:27.120261 systemd[1]: Started cri-containerd-705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3.scope. Oct 2 20:12:27.132202 systemd[1]: cri-containerd-705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3.scope: Deactivated successfully. Oct 2 20:12:28.079205 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3-rootfs.mount: Deactivated successfully. Oct 2 20:12:29.123342 env[1328]: time="2023-10-02T20:12:29.123215915Z" level=error msg="get state for 705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" error="context deadline exceeded: unknown" Oct 2 20:12:29.123861 env[1328]: time="2023-10-02T20:12:29.123818717Z" level=warning msg="unknown status" status=0 Oct 2 20:12:30.838514 env[1328]: time="2023-10-02T20:12:30.838454650Z" level=info msg="shim disconnected" id=705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3 Oct 2 20:12:30.838514 env[1328]: time="2023-10-02T20:12:30.838506550Z" level=warning msg="cleaning up after shim disconnected" id=705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3 namespace=k8s.io Oct 2 20:12:30.838514 env[1328]: time="2023-10-02T20:12:30.838517650Z" level=info msg="cleaning up dead shim" Oct 2 20:12:30.846836 env[1328]: time="2023-10-02T20:12:30.846794180Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2843 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:30Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:30.847130 env[1328]: time="2023-10-02T20:12:30.847039481Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:12:30.847369 env[1328]: time="2023-10-02T20:12:30.847325782Z" level=error msg="Failed to pipe stderr of container \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" error="reading from a closed fifo" Oct 2 20:12:30.849892 env[1328]: time="2023-10-02T20:12:30.849792491Z" level=error msg="Failed to pipe stdout of container \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" error="reading from a closed fifo" Oct 2 20:12:30.858349 env[1328]: time="2023-10-02T20:12:30.858309922Z" level=error msg="StartContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:30.858595 kubelet[2464]: E1002 20:12:30.858567 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" Oct 2 20:12:30.858956 kubelet[2464]: E1002 20:12:30.858709 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:30.858956 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:30.858956 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:12:30.858956 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:30.859462 kubelet[2464]: E1002 20:12:30.858767 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:31.391769 env[1328]: time="2023-10-02T20:12:31.387992804Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:12:31.421596 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1523683885.mount: Deactivated successfully. Oct 2 20:12:31.428998 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3428931838.mount: Deactivated successfully. Oct 2 20:12:31.445818 env[1328]: time="2023-10-02T20:12:31.445774908Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" Oct 2 20:12:31.446235 env[1328]: time="2023-10-02T20:12:31.446207210Z" level=info msg="StartContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" Oct 2 20:12:31.469199 systemd[1]: Started cri-containerd-1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2.scope. Oct 2 20:12:31.480667 systemd[1]: cri-containerd-1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2.scope: Deactivated successfully. Oct 2 20:12:31.497494 env[1328]: time="2023-10-02T20:12:31.497441191Z" level=info msg="shim disconnected" id=1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2 Oct 2 20:12:31.497494 env[1328]: time="2023-10-02T20:12:31.497492991Z" level=warning msg="cleaning up after shim disconnected" id=1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2 namespace=k8s.io Oct 2 20:12:31.497786 env[1328]: time="2023-10-02T20:12:31.497503991Z" level=info msg="cleaning up dead shim" Oct 2 20:12:31.505360 env[1328]: time="2023-10-02T20:12:31.505311019Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2881 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:31.505702 env[1328]: time="2023-10-02T20:12:31.505637120Z" level=error msg="copy shim log" error="read /proc/self/fd/58: file already closed" Oct 2 20:12:31.507849 env[1328]: time="2023-10-02T20:12:31.507796428Z" level=error msg="Failed to pipe stderr of container \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" error="reading from a closed fifo" Oct 2 20:12:31.508035 env[1328]: time="2023-10-02T20:12:31.507993528Z" level=error msg="Failed to pipe stdout of container \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" error="reading from a closed fifo" Oct 2 20:12:31.514490 env[1328]: time="2023-10-02T20:12:31.514424851Z" level=error msg="StartContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:31.514644 kubelet[2464]: E1002 20:12:31.514622 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2" Oct 2 20:12:31.514782 kubelet[2464]: E1002 20:12:31.514748 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:31.514782 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:31.514782 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:12:31.514782 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:31.515020 kubelet[2464]: E1002 20:12:31.514800 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:32.390274 kubelet[2464]: I1002 20:12:32.389031 2464 scope.go:115] "RemoveContainer" containerID="705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" Oct 2 20:12:32.390274 kubelet[2464]: I1002 20:12:32.389791 2464 scope.go:115] "RemoveContainer" containerID="705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" Oct 2 20:12:32.399252 env[1328]: time="2023-10-02T20:12:32.399211555Z" level=info msg="RemoveContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" Oct 2 20:12:32.399975 env[1328]: time="2023-10-02T20:12:32.399661657Z" level=info msg="RemoveContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\"" Oct 2 20:12:32.400092 env[1328]: time="2023-10-02T20:12:32.400027858Z" level=error msg="RemoveContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\" failed" error="failed to set removing state for container \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\": container is already in removing state" Oct 2 20:12:32.400892 kubelet[2464]: E1002 20:12:32.400270 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\": container is already in removing state" containerID="705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" Oct 2 20:12:32.400892 kubelet[2464]: E1002 20:12:32.400319 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3": container is already in removing state; Skipping pod "cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)" Oct 2 20:12:32.400892 kubelet[2464]: E1002 20:12:32.400745 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:32.413297 env[1328]: time="2023-10-02T20:12:32.413261404Z" level=info msg="RemoveContainer for \"705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3\" returns successfully" Oct 2 20:12:32.419250 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2-rootfs.mount: Deactivated successfully. Oct 2 20:12:33.263760 env[1328]: time="2023-10-02T20:12:33.263637642Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:33.270820 env[1328]: time="2023-10-02T20:12:33.270785266Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:33.274990 env[1328]: time="2023-10-02T20:12:33.274956581Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:33.275439 env[1328]: time="2023-10-02T20:12:33.275410582Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:12:33.277981 env[1328]: time="2023-10-02T20:12:33.277414189Z" level=info msg="CreateContainer within sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:12:33.312328 env[1328]: time="2023-10-02T20:12:33.312285408Z" level=info msg="CreateContainer within sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\"" Oct 2 20:12:33.312708 env[1328]: time="2023-10-02T20:12:33.312680609Z" level=info msg="StartContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\"" Oct 2 20:12:33.336265 systemd[1]: Started cri-containerd-b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183.scope. Oct 2 20:12:33.354603 kernel: kauditd_printk_skb: 345 callbacks suppressed Oct 2 20:12:33.354706 kernel: audit: type=1400 audit(1696277553.348:1071): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383755 kernel: audit: type=1400 audit(1696277553.348:1072): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.401675 kubelet[2464]: E1002 20:12:33.401313 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:33.416750 kernel: audit: type=1400 audit(1696277553.348:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.416841 kernel: audit: type=1400 audit(1696277553.348:1074): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.416875 kernel: audit: type=1400 audit(1696277553.348:1075): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.430211 systemd[1]: run-containerd-runc-k8s.io-b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183-runc.751NiZ.mount: Deactivated successfully. Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.447763 kernel: audit: type=1400 audit(1696277553.348:1076): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.466276 env[1328]: time="2023-10-02T20:12:33.466126033Z" level=info msg="StartContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" returns successfully" Oct 2 20:12:33.466759 kernel: audit: type=1400 audit(1696277553.348:1077): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.495329 kernel: audit: type=1400 audit(1696277553.348:1078): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.495412 kernel: audit: type=1400 audit(1696277553.348:1079): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.495439 kernel: audit: type=1400 audit(1696277553.367:1080): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.367000 audit: BPF prog-id=122 op=LOAD Oct 2 20:12:33.367000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.367000 audit[2902]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2752 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:33.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656238383533666136303234643161343635333237356562666636 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2752 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:33.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656238383533666136303234643161343635333237356562666636 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.370000 audit: BPF prog-id=123 op=LOAD Oct 2 20:12:33.370000 audit[2902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002830c0 items=0 ppid=2752 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:33.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656238383533666136303234643161343635333237356562666636 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.382000 audit: BPF prog-id=124 op=LOAD Oct 2 20:12:33.382000 audit[2902]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000283108 items=0 ppid=2752 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:33.382000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656238383533666136303234643161343635333237356562666636 Oct 2 20:12:33.383000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:12:33.383000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { perfmon } for pid=2902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit[2902]: AVC avc: denied { bpf } for pid=2902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:33.383000 audit: BPF prog-id=125 op=LOAD Oct 2 20:12:33.383000 audit[2902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000283518 items=0 ppid=2752 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:33.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656238383533666136303234643161343635333237356562666636 Oct 2 20:12:33.480000 audit[2912]: AVC avc: denied { map_create } for pid=2912 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c539 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c539 tclass=bpf permissive=0 Oct 2 20:12:33.480000 audit[2912]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006177d0 a2=48 a3=0 items=0 ppid=2752 pid=2912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c40,c539 key=(null) Oct 2 20:12:33.480000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:12:33.842859 kubelet[2464]: W1002 20:12:33.842794 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3.scope WatchSource:0}: container "705f40ee4f97f740151fc82717db4757c32c2cb58ffd6d6ce5c8066e4f6d99e3" in namespace "k8s.io": not found Oct 2 20:12:34.426198 kubelet[2464]: I1002 20:12:34.426158 2464 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-qhmpv" podStartSLOduration=-9.223372019428663e+09 pod.CreationTimestamp="2023-10-02 20:12:17 +0000 UTC" firstStartedPulling="2023-10-02 20:12:18.225309069 +0000 UTC m=+15.112414415" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:34.42489388 +0000 UTC m=+31.311999226" watchObservedRunningTime="2023-10-02 20:12:34.426112684 +0000 UTC m=+31.313218130" Oct 2 20:12:36.951271 kubelet[2464]: W1002 20:12:36.951225 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2.scope WatchSource:0}: task 1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2 not found: not found Oct 2 20:12:48.290479 env[1328]: time="2023-10-02T20:12:48.290252610Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:12:48.318608 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1209491527.mount: Deactivated successfully. Oct 2 20:12:48.333561 env[1328]: time="2023-10-02T20:12:48.333517026Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" Oct 2 20:12:48.334089 env[1328]: time="2023-10-02T20:12:48.334055228Z" level=info msg="StartContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" Oct 2 20:12:48.359776 systemd[1]: Started cri-containerd-49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c.scope. Oct 2 20:12:48.370226 systemd[1]: cri-containerd-49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c.scope: Deactivated successfully. Oct 2 20:12:48.881405 env[1328]: time="2023-10-02T20:12:48.881346105Z" level=info msg="shim disconnected" id=49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c Oct 2 20:12:48.881405 env[1328]: time="2023-10-02T20:12:48.881404106Z" level=warning msg="cleaning up after shim disconnected" id=49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c namespace=k8s.io Oct 2 20:12:48.881405 env[1328]: time="2023-10-02T20:12:48.881415106Z" level=info msg="cleaning up dead shim" Oct 2 20:12:48.889440 env[1328]: time="2023-10-02T20:12:48.889393627Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2958 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:48.889703 env[1328]: time="2023-10-02T20:12:48.889643328Z" level=error msg="copy shim log" error="read /proc/self/fd/63: file already closed" Oct 2 20:12:48.889914 env[1328]: time="2023-10-02T20:12:48.889876128Z" level=error msg="Failed to pipe stdout of container \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" error="reading from a closed fifo" Oct 2 20:12:48.892856 env[1328]: time="2023-10-02T20:12:48.892804636Z" level=error msg="Failed to pipe stderr of container \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" error="reading from a closed fifo" Oct 2 20:12:48.898650 env[1328]: time="2023-10-02T20:12:48.898606352Z" level=error msg="StartContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:48.898880 kubelet[2464]: E1002 20:12:48.898857 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c" Oct 2 20:12:48.899484 kubelet[2464]: E1002 20:12:48.899461 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:48.899484 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:48.899484 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:12:48.899484 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:48.899725 kubelet[2464]: E1002 20:12:48.899516 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:49.313994 systemd[1]: run-containerd-runc-k8s.io-49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c-runc.MaEMzm.mount: Deactivated successfully. Oct 2 20:12:49.314163 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c-rootfs.mount: Deactivated successfully. Oct 2 20:12:49.432212 kubelet[2464]: I1002 20:12:49.432185 2464 scope.go:115] "RemoveContainer" containerID="1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2" Oct 2 20:12:49.432534 kubelet[2464]: I1002 20:12:49.432506 2464 scope.go:115] "RemoveContainer" containerID="1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2" Oct 2 20:12:49.434026 env[1328]: time="2023-10-02T20:12:49.433982682Z" level=info msg="RemoveContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" Oct 2 20:12:49.435369 env[1328]: time="2023-10-02T20:12:49.435018384Z" level=info msg="RemoveContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\"" Oct 2 20:12:49.437760 env[1328]: time="2023-10-02T20:12:49.435128485Z" level=error msg="RemoveContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\" failed" error="failed to set removing state for container \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\": container is already in removing state" Oct 2 20:12:49.437860 kubelet[2464]: E1002 20:12:49.436834 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\": container is already in removing state" containerID="1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2" Oct 2 20:12:49.437860 kubelet[2464]: E1002 20:12:49.436863 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2": container is already in removing state; Skipping pod "cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)" Oct 2 20:12:49.437860 kubelet[2464]: E1002 20:12:49.437171 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:12:49.447656 env[1328]: time="2023-10-02T20:12:49.447622418Z" level=info msg="RemoveContainer for \"1ca35455f5a6d18b3e25ef6ca80d6593b9c60b251e38394d1b90fd0e3fe87cd2\" returns successfully" Oct 2 20:12:51.987225 kubelet[2464]: W1002 20:12:51.987178 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c.scope WatchSource:0}: task 49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c not found: not found Oct 2 20:12:58.590000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.594838 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:12:58.594938 kernel: audit: type=1400 audit(1696277578.590:1090): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.590000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013e2db0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:58.633634 kernel: audit: type=1300 audit(1696277578.590:1090): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013e2db0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:58.633718 kernel: audit: type=1327 audit(1696277578.590:1090): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.590000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.651818 kernel: audit: type=1400 audit(1696277578.590:1091): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.590000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.590000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bac40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:58.689117 kernel: audit: type=1300 audit(1696277578.590:1091): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bac40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:12:58.689180 kernel: audit: type=1327 audit(1696277578.590:1091): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.590000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:59.443000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.443000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.477676 kernel: audit: type=1400 audit(1696277579.443:1093): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.477789 kernel: audit: type=1400 audit(1696277579.443:1092): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.477815 kernel: audit: type=1300 audit(1696277579.443:1093): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b4bdc20 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.443000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b4bdc20 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.516164 kernel: audit: type=1327 audit(1696277579.443:1093): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.443000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e43b820 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.443000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.443000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b46a7e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.461000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.461000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b46a930 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.461000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b46aa20 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00e48db00 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:12:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:01.288612 kubelet[2464]: E1002 20:13:01.288559 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:03.938190 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:13:03.938317 kernel: audit: type=1400 audit(1696277583.930:1098): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:03.930000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:03.930000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001319e60 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.973767 kernel: audit: type=1300 audit(1696277583.930:1098): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001319e60 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.977751 kernel: audit: type=1327 audit(1696277583.930:1098): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:03.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:03.930000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:04.009135 kernel: audit: type=1400 audit(1696277583.930:1099): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:04.009210 kernel: audit: type=1300 audit(1696277583.930:1099): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001319ea0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.930000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001319ea0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:04.031755 kernel: audit: type=1327 audit(1696277583.930:1099): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:03.930000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:04.065476 kernel: audit: type=1400 audit(1696277583.930:1100): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:04.065548 kernel: audit: type=1300 audit(1696277583.930:1100): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013bc060 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.930000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013bc060 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:04.104560 kernel: audit: type=1327 audit(1696277583.930:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:03.935000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:03.935000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013bc180 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:03.935000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:04.121753 kernel: audit: type=1400 audit(1696277583.935:1101): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:09.405759 update_engine[1317]: I1002 20:13:09.405707 1317 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:13:09.406275 update_engine[1317]: I1002 20:13:09.405781 1317 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:13:09.406275 update_engine[1317]: I1002 20:13:09.405967 1317 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:13:09.406578 update_engine[1317]: I1002 20:13:09.406555 1317 omaha_request_params.cc:62] Current group set to lts Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406783 1317 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406795 1317 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406813 1317 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406848 1317 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406915 1317 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406921 1317 omaha_request_action.cc:269] Request: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: Oct 2 20:13:09.407104 update_engine[1317]: I1002 20:13:09.406926 1317 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:13:09.407705 locksmithd[1402]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:13:09.408598 update_engine[1317]: I1002 20:13:09.408571 1317 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:13:09.408802 update_engine[1317]: I1002 20:13:09.408782 1317 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:13:10.452130 update_engine[1317]: I1002 20:13:10.452083 1317 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:13:10.452530 update_engine[1317]: I1002 20:13:10.452317 1317 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:13:10.452530 update_engine[1317]: I1002 20:13:10.452464 1317 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:13:10.536029 update_engine[1317]: I1002 20:13:10.535941 1317 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:13:10.537309 update_engine[1317]: I1002 20:13:10.537240 1317 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:13:10.537309 update_engine[1317]: I1002 20:13:10.537261 1317 omaha_request_action.cc:619] Omaha request response: Oct 2 20:13:10.537309 update_engine[1317]: Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633214 1317 omaha_request_action.cc:409] No update. Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633255 1317 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633261 1317 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633266 1317 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633270 1317 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:13:10.633264 update_engine[1317]: I1002 20:13:10.633275 1317 update_attempter.cc:302] Processing Done. Oct 2 20:13:10.633628 update_engine[1317]: I1002 20:13:10.633294 1317 update_attempter.cc:338] No update. Oct 2 20:13:10.633628 update_engine[1317]: I1002 20:13:10.633307 1317 update_check_scheduler.cc:74] Next update check in 45m23s Oct 2 20:13:10.633727 locksmithd[1402]: LastCheckedTime=1696277590 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:13:12.291073 env[1328]: time="2023-10-02T20:13:12.291021823Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:13:12.327111 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4250402581.mount: Deactivated successfully. Oct 2 20:13:12.338094 env[1328]: time="2023-10-02T20:13:12.338052521Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" Oct 2 20:13:12.338858 env[1328]: time="2023-10-02T20:13:12.338825722Z" level=info msg="StartContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" Oct 2 20:13:12.363154 systemd[1]: Started cri-containerd-8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004.scope. Oct 2 20:13:12.371092 systemd[1]: cri-containerd-8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004.scope: Deactivated successfully. Oct 2 20:13:12.371403 systemd[1]: Stopped cri-containerd-8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004.scope. Oct 2 20:13:12.436182 env[1328]: time="2023-10-02T20:13:12.436125625Z" level=info msg="shim disconnected" id=8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004 Oct 2 20:13:12.436182 env[1328]: time="2023-10-02T20:13:12.436181825Z" level=warning msg="cleaning up after shim disconnected" id=8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004 namespace=k8s.io Oct 2 20:13:12.436465 env[1328]: time="2023-10-02T20:13:12.436194125Z" level=info msg="cleaning up dead shim" Oct 2 20:13:12.446705 env[1328]: time="2023-10-02T20:13:12.446660846Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:13:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2997 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:13:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:13:12.447000 env[1328]: time="2023-10-02T20:13:12.446939247Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:13:12.448823 env[1328]: time="2023-10-02T20:13:12.448775851Z" level=error msg="Failed to pipe stdout of container \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" error="reading from a closed fifo" Oct 2 20:13:12.450830 env[1328]: time="2023-10-02T20:13:12.450783555Z" level=error msg="Failed to pipe stderr of container \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" error="reading from a closed fifo" Oct 2 20:13:12.454960 env[1328]: time="2023-10-02T20:13:12.454920864Z" level=error msg="StartContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:13:12.455161 kubelet[2464]: E1002 20:13:12.455137 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004" Oct 2 20:13:12.455509 kubelet[2464]: E1002 20:13:12.455267 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:13:12.455509 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:13:12.455509 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:13:12.455509 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:13:12.455947 kubelet[2464]: E1002 20:13:12.455314 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:12.487297 kubelet[2464]: I1002 20:13:12.487272 2464 scope.go:115] "RemoveContainer" containerID="49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c" Oct 2 20:13:12.487757 kubelet[2464]: I1002 20:13:12.487716 2464 scope.go:115] "RemoveContainer" containerID="49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c" Oct 2 20:13:12.491010 env[1328]: time="2023-10-02T20:13:12.489974436Z" level=info msg="RemoveContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" Oct 2 20:13:12.494765 env[1328]: time="2023-10-02T20:13:12.492164241Z" level=info msg="RemoveContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\"" Oct 2 20:13:12.494765 env[1328]: time="2023-10-02T20:13:12.492321641Z" level=error msg="RemoveContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\" failed" error="failed to set removing state for container \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\": container is already in removing state" Oct 2 20:13:12.494953 kubelet[2464]: E1002 20:13:12.492544 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\": container is already in removing state" containerID="49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c" Oct 2 20:13:12.494953 kubelet[2464]: I1002 20:13:12.492584 2464 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c} err="rpc error: code = Unknown desc = failed to set removing state for container \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\": container is already in removing state" Oct 2 20:13:12.512937 env[1328]: time="2023-10-02T20:13:12.512903684Z" level=info msg="RemoveContainer for \"49de51e5478f228b51cde2525261ec33383b2d37230b0b5f3c9d464f02a9234c\" returns successfully" Oct 2 20:13:12.513322 kubelet[2464]: E1002 20:13:12.513295 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:13.315443 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004-rootfs.mount: Deactivated successfully. Oct 2 20:13:15.542811 kubelet[2464]: W1002 20:13:15.542761 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004.scope WatchSource:0}: task 8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004 not found: not found Oct 2 20:13:27.288194 kubelet[2464]: E1002 20:13:27.288100 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:40.287751 kubelet[2464]: E1002 20:13:40.287703 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:53.290613 env[1328]: time="2023-10-02T20:13:53.290490636Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:13:53.319588 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3103021015.mount: Deactivated successfully. Oct 2 20:13:53.328042 env[1328]: time="2023-10-02T20:13:53.327996507Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" Oct 2 20:13:53.329679 env[1328]: time="2023-10-02T20:13:53.328924921Z" level=info msg="StartContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" Oct 2 20:13:53.356651 systemd[1]: Started cri-containerd-85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519.scope. Oct 2 20:13:53.367707 systemd[1]: cri-containerd-85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519.scope: Deactivated successfully. Oct 2 20:13:53.395807 env[1328]: time="2023-10-02T20:13:53.395727838Z" level=info msg="shim disconnected" id=85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519 Oct 2 20:13:53.395807 env[1328]: time="2023-10-02T20:13:53.395806839Z" level=warning msg="cleaning up after shim disconnected" id=85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519 namespace=k8s.io Oct 2 20:13:53.396066 env[1328]: time="2023-10-02T20:13:53.395817439Z" level=info msg="cleaning up dead shim" Oct 2 20:13:53.404185 env[1328]: time="2023-10-02T20:13:53.404136466Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:13:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3036 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:13:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:13:53.404548 env[1328]: time="2023-10-02T20:13:53.404486371Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:13:53.404851 env[1328]: time="2023-10-02T20:13:53.404803176Z" level=error msg="Failed to pipe stdout of container \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" error="reading from a closed fifo" Oct 2 20:13:53.405030 env[1328]: time="2023-10-02T20:13:53.404992379Z" level=error msg="Failed to pipe stderr of container \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" error="reading from a closed fifo" Oct 2 20:13:53.414826 env[1328]: time="2023-10-02T20:13:53.414785528Z" level=error msg="StartContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:13:53.414969 kubelet[2464]: E1002 20:13:53.414945 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519" Oct 2 20:13:53.415309 kubelet[2464]: E1002 20:13:53.415056 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:13:53.415309 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:13:53.415309 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:13:53.415309 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:13:53.415637 kubelet[2464]: E1002 20:13:53.415105 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:53.561778 kubelet[2464]: I1002 20:13:53.559299 2464 scope.go:115] "RemoveContainer" containerID="8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004" Oct 2 20:13:53.561778 kubelet[2464]: I1002 20:13:53.560086 2464 scope.go:115] "RemoveContainer" containerID="8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004" Oct 2 20:13:53.572973 env[1328]: time="2023-10-02T20:13:53.572933235Z" level=info msg="RemoveContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" Oct 2 20:13:53.573489 env[1328]: time="2023-10-02T20:13:53.573457143Z" level=info msg="RemoveContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\"" Oct 2 20:13:53.573748 env[1328]: time="2023-10-02T20:13:53.573690446Z" level=error msg="RemoveContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\" failed" error="failed to set removing state for container \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\": container is already in removing state" Oct 2 20:13:53.573892 kubelet[2464]: E1002 20:13:53.573868 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\": container is already in removing state" containerID="8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004" Oct 2 20:13:53.574008 kubelet[2464]: E1002 20:13:53.573911 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004": container is already in removing state; Skipping pod "cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)" Oct 2 20:13:53.574239 kubelet[2464]: E1002 20:13:53.574224 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:13:53.598927 env[1328]: time="2023-10-02T20:13:53.598886530Z" level=info msg="RemoveContainer for \"8300b78980346a93a3c30ab365c37d0f07507e063e5af647da1dde086e9ca004\" returns successfully" Oct 2 20:13:54.314380 systemd[1]: run-containerd-runc-k8s.io-85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519-runc.UT7GfT.mount: Deactivated successfully. Oct 2 20:13:54.314504 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519-rootfs.mount: Deactivated successfully. Oct 2 20:13:56.500352 kubelet[2464]: W1002 20:13:56.500305 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519.scope WatchSource:0}: task 85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519 not found: not found Oct 2 20:13:58.591000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.596952 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:13:58.599544 kernel: audit: type=1400 audit(1696277638.591:1102): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.591000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.635681 kernel: audit: type=1400 audit(1696277638.591:1103): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.635798 kernel: audit: type=1300 audit(1696277638.591:1103): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0027ba2c0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:58.591000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0027ba2c0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:58.680985 kernel: audit: type=1327 audit(1696277638.591:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.591000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.704994 kernel: audit: type=1300 audit(1696277638.591:1102): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002812f60 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:58.591000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002812f60 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:13:58.591000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.723914 kernel: audit: type=1327 audit(1696277638.591:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.484889 kernel: audit: type=1400 audit(1696277639.445:1104): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.485000 kernel: audit: type=1400 audit(1696277639.445:1105): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.485029 kernel: audit: type=1300 audit(1696277639.445:1105): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00af01a40 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00af01a40 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.526011 kernel: audit: type=1327 audit(1696277639.445:1105): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00af01ad0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0020681e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b065620 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b065650 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:59.463000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:59.463000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0020682e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:13:59.463000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:03.251578 kubelet[2464]: E1002 20:14:03.251539 2464 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:14:03.389783 kubelet[2464]: E1002 20:14:03.389749 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:03.930000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.937400 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:14:03.937512 kernel: audit: type=1400 audit(1696277643.930:1110): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.930000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027ba660 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:03.974406 kernel: audit: type=1300 audit(1696277643.930:1110): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027ba660 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:03.974490 kernel: audit: type=1327 audit(1696277643.930:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:03.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:03.992888 kernel: audit: type=1400 audit(1696277643.933:1111): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.933000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.933000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026d6ec0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:04.034871 kernel: audit: type=1300 audit(1696277643.933:1111): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026d6ec0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:04.034981 kernel: audit: type=1327 audit(1696277643.933:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:03.933000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:04.053995 kernel: audit: type=1400 audit(1696277643.934:1112): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.934000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.934000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027ba680 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:04.095219 kernel: audit: type=1300 audit(1696277643.934:1112): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027ba680 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:03.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:04.114633 kernel: audit: type=1327 audit(1696277643.934:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:03.936000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:03.936000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027ba6a0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:03.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:04.131761 kernel: audit: type=1400 audit(1696277643.936:1113): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:06.288881 kubelet[2464]: E1002 20:14:06.288846 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:14:08.391093 kubelet[2464]: E1002 20:14:08.391052 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:13.392434 kubelet[2464]: E1002 20:14:13.392401 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:18.393328 kubelet[2464]: E1002 20:14:18.393282 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:19.289554 kubelet[2464]: E1002 20:14:19.289516 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:14:23.394826 kubelet[2464]: E1002 20:14:23.394787 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:28.396433 kubelet[2464]: E1002 20:14:28.396400 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:31.288841 kubelet[2464]: E1002 20:14:31.288798 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:14:33.398220 kubelet[2464]: E1002 20:14:33.398154 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:38.399764 kubelet[2464]: E1002 20:14:38.399718 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:43.288564 kubelet[2464]: E1002 20:14:43.288522 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:14:43.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:58684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:43.298034 systemd[1]: Started sshd@7-10.200.8.18:22-10.200.12.6:58684.service. Oct 2 20:14:43.319962 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:14:43.320068 kernel: audit: type=1130 audit(1696277683.297:1114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:58684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:43.401367 kubelet[2464]: E1002 20:14:43.401335 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:43.917000 audit[3054]: USER_ACCT pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.937365 sshd[3054]: Accepted publickey for core from 10.200.12.6 port 58684 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:14:43.937761 kernel: audit: type=1101 audit(1696277683.917:1115): pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.937798 sshd[3054]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:14:43.936000 audit[3054]: CRED_ACQ pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.942848 systemd[1]: Started session-10.scope. Oct 2 20:14:43.943913 systemd-logind[1313]: New session 10 of user core. Oct 2 20:14:43.954765 kernel: audit: type=1103 audit(1696277683.936:1116): pid=3054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.954828 kernel: audit: type=1006 audit(1696277683.936:1117): pid=3054 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:14:43.936000 audit[3054]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff66a6bb90 a2=3 a3=0 items=0 ppid=1 pid=3054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:14:43.982754 kernel: audit: type=1300 audit(1696277683.936:1117): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff66a6bb90 a2=3 a3=0 items=0 ppid=1 pid=3054 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:14:43.936000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:14:43.989480 kernel: audit: type=1327 audit(1696277683.936:1117): proctitle=737368643A20636F7265205B707269765D Oct 2 20:14:43.989552 kernel: audit: type=1105 audit(1696277683.948:1118): pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.948000 audit[3054]: USER_START pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:43.950000 audit[3056]: CRED_ACQ pid=3056 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:44.024424 kernel: audit: type=1103 audit(1696277683.950:1119): pid=3056 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:44.445826 sshd[3054]: pam_unix(sshd:session): session closed for user core Oct 2 20:14:44.446000 audit[3054]: USER_END pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:44.449333 systemd[1]: sshd@7-10.200.8.18:22-10.200.12.6:58684.service: Deactivated successfully. Oct 2 20:14:44.450073 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:14:44.451492 systemd-logind[1313]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:14:44.452399 systemd-logind[1313]: Removed session 10. Oct 2 20:14:44.467830 kernel: audit: type=1106 audit(1696277684.446:1120): pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:44.447000 audit[3054]: CRED_DISP pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:44.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.18:22-10.200.12.6:58684 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:44.484768 kernel: audit: type=1104 audit(1696277684.447:1121): pid=3054 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:48.402975 kubelet[2464]: E1002 20:14:48.402930 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:53.404319 kubelet[2464]: E1002 20:14:53.404287 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:54.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:47054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:54.552177 systemd[1]: Started sshd@8-10.200.8.18:22-10.200.12.6:47054.service. Oct 2 20:14:54.557765 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:14:54.557835 kernel: audit: type=1130 audit(1696277694.552:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:47054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:55.172000 audit[3069]: USER_ACCT pid=3069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.173541 sshd[3069]: Accepted publickey for core from 10.200.12.6 port 47054 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:14:55.192764 kernel: audit: type=1101 audit(1696277695.172:1124): pid=3069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.192000 audit[3069]: CRED_ACQ pid=3069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.193530 sshd[3069]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:14:55.198544 systemd[1]: Started session-11.scope. Oct 2 20:14:55.199655 systemd-logind[1313]: New session 11 of user core. Oct 2 20:14:55.220089 kernel: audit: type=1103 audit(1696277695.192:1125): pid=3069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.220166 kernel: audit: type=1006 audit(1696277695.192:1126): pid=3069 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:14:55.220194 kernel: audit: type=1300 audit(1696277695.192:1126): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea9583130 a2=3 a3=0 items=0 ppid=1 pid=3069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:14:55.192000 audit[3069]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea9583130 a2=3 a3=0 items=0 ppid=1 pid=3069 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:14:55.192000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:14:55.238752 kernel: audit: type=1327 audit(1696277695.192:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 20:14:55.204000 audit[3069]: USER_START pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.263566 kernel: audit: type=1105 audit(1696277695.204:1127): pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.263839 kernel: audit: type=1103 audit(1696277695.206:1128): pid=3071 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.206000 audit[3071]: CRED_ACQ pid=3071 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.672530 sshd[3069]: pam_unix(sshd:session): session closed for user core Oct 2 20:14:55.673000 audit[3069]: USER_END pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.677385 systemd[1]: sshd@8-10.200.8.18:22-10.200.12.6:47054.service: Deactivated successfully. Oct 2 20:14:55.678110 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:14:55.679413 systemd-logind[1313]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:14:55.680284 systemd-logind[1313]: Removed session 11. Oct 2 20:14:55.673000 audit[3069]: CRED_DISP pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.694819 kernel: audit: type=1106 audit(1696277695.673:1129): pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.694854 kernel: audit: type=1104 audit(1696277695.673:1130): pid=3069 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:14:55.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.18:22-10.200.12.6:47054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:14:58.288065 kubelet[2464]: E1002 20:14:58.288016 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:14:58.405624 kubelet[2464]: E1002 20:14:58.405590 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:58.594000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.594000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f50b80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:58.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:58.595000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.595000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00115fe30 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:14:58.595000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00f523ae0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f4a87b0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f4a87e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f45be90 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:59.462000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.462000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f45bef0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.462000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:59.463000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:59.463000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f4b0400 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:14:59.463000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:03.406398 kubelet[2464]: E1002 20:15:03.406366 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:03.932000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:03.941205 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:15:03.941312 kernel: audit: type=1400 audit(1696277703.932:1140): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:03.932000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bac00 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:03.975778 kernel: audit: type=1300 audit(1696277703.932:1140): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bac00 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:03.975901 kernel: audit: type=1327 audit(1696277703.932:1140): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:03.932000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:03.934000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:03.934000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f51540 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:04.033077 kernel: audit: type=1400 audit(1696277703.934:1141): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:04.033181 kernel: audit: type=1300 audit(1696277703.934:1141): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f51540 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:04.033210 kernel: audit: type=1327 audit(1696277703.934:1141): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:03.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:03.935000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:04.066509 kernel: audit: type=1400 audit(1696277703.935:1142): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:03.935000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bad20 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:03.935000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:04.106830 kernel: audit: type=1300 audit(1696277703.935:1142): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bad20 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:04.106916 kernel: audit: type=1327 audit(1696277703.935:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:03.937000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:04.124081 kernel: audit: type=1400 audit(1696277703.937:1143): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:03.937000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bad40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:03.937000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:05.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.18:22-10.200.12.6:58000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:05.777488 systemd[1]: Started sshd@9-10.200.8.18:22-10.200.12.6:58000.service. Oct 2 20:15:06.389000 audit[3084]: USER_ACCT pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.391008 sshd[3084]: Accepted publickey for core from 10.200.12.6 port 58000 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:06.391000 audit[3084]: CRED_ACQ pid=3084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.391000 audit[3084]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff80733db0 a2=3 a3=0 items=0 ppid=1 pid=3084 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:06.391000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:06.392686 sshd[3084]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:06.398204 systemd[1]: Started session-12.scope. Oct 2 20:15:06.398639 systemd-logind[1313]: New session 12 of user core. Oct 2 20:15:06.402000 audit[3084]: USER_START pid=3084 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.403000 audit[3086]: CRED_ACQ pid=3086 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.880472 sshd[3084]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:06.881000 audit[3084]: USER_END pid=3084 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.881000 audit[3084]: CRED_DISP pid=3084 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:06.883328 systemd[1]: sshd@9-10.200.8.18:22-10.200.12.6:58000.service: Deactivated successfully. Oct 2 20:15:06.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.18:22-10.200.12.6:58000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:06.884585 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:15:06.884601 systemd-logind[1313]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:15:06.886013 systemd-logind[1313]: Removed session 12. Oct 2 20:15:08.407525 kubelet[2464]: E1002 20:15:08.407490 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:12.288410 kubelet[2464]: E1002 20:15:12.288358 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:15:13.408915 kubelet[2464]: E1002 20:15:13.408883 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:16.987149 systemd[1]: Started sshd@10-10.200.8.18:22-10.200.12.6:38400.service. Oct 2 20:15:17.010682 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:15:17.011029 kernel: audit: type=1130 audit(1696277716.985:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.18:22-10.200.12.6:38400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:16.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.18:22-10.200.12.6:38400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:17.609000 audit[3096]: USER_ACCT pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.612309 sshd[3096]: Accepted publickey for core from 10.200.12.6 port 38400 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:17.628000 audit[3096]: CRED_ACQ pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.630448 sshd[3096]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:17.635645 systemd[1]: Started session-13.scope. Oct 2 20:15:17.636545 systemd-logind[1313]: New session 13 of user core. Oct 2 20:15:17.646971 kernel: audit: type=1101 audit(1696277717.609:1154): pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.647063 kernel: audit: type=1103 audit(1696277717.628:1155): pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.647096 kernel: audit: type=1006 audit(1696277717.628:1156): pid=3096 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:15:17.628000 audit[3096]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff50ca5200 a2=3 a3=0 items=0 ppid=1 pid=3096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:17.676036 kernel: audit: type=1300 audit(1696277717.628:1156): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff50ca5200 a2=3 a3=0 items=0 ppid=1 pid=3096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:17.676137 kernel: audit: type=1327 audit(1696277717.628:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:17.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:17.682165 kernel: audit: type=1105 audit(1696277717.639:1157): pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.639000 audit[3096]: USER_START pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.641000 audit[3098]: CRED_ACQ pid=3098 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:17.701757 kernel: audit: type=1103 audit(1696277717.641:1158): pid=3098 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:18.385436 sshd[3096]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:18.385000 audit[3096]: USER_END pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:18.392014 systemd[1]: sshd@10-10.200.8.18:22-10.200.12.6:38400.service: Deactivated successfully. Oct 2 20:15:18.393040 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:15:18.394923 systemd-logind[1313]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:15:18.396050 systemd-logind[1313]: Removed session 13. Oct 2 20:15:18.385000 audit[3096]: CRED_DISP pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:18.410168 kubelet[2464]: E1002 20:15:18.410151 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:18.425801 kernel: audit: type=1106 audit(1696277718.385:1159): pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:18.425916 kernel: audit: type=1104 audit(1696277718.385:1160): pid=3096 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:18.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.18:22-10.200.12.6:38400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:23.412171 kubelet[2464]: E1002 20:15:23.412134 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:24.290399 env[1328]: time="2023-10-02T20:15:24.290355864Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:15:24.325857 env[1328]: time="2023-10-02T20:15:24.325806382Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" Oct 2 20:15:24.326463 env[1328]: time="2023-10-02T20:15:24.326400186Z" level=info msg="StartContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" Oct 2 20:15:24.348300 systemd[1]: Started cri-containerd-2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a.scope. Oct 2 20:15:24.359339 systemd[1]: cri-containerd-2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a.scope: Deactivated successfully. Oct 2 20:15:24.363320 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a-rootfs.mount: Deactivated successfully. Oct 2 20:15:24.377268 env[1328]: time="2023-10-02T20:15:24.377217898Z" level=info msg="shim disconnected" id=2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a Oct 2 20:15:24.377436 env[1328]: time="2023-10-02T20:15:24.377269199Z" level=warning msg="cleaning up after shim disconnected" id=2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a namespace=k8s.io Oct 2 20:15:24.377436 env[1328]: time="2023-10-02T20:15:24.377282499Z" level=info msg="cleaning up dead shim" Oct 2 20:15:24.385239 env[1328]: time="2023-10-02T20:15:24.385197047Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:15:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3138 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:15:24Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:15:24.385514 env[1328]: time="2023-10-02T20:15:24.385454249Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:15:24.386839 env[1328]: time="2023-10-02T20:15:24.386801857Z" level=error msg="Failed to pipe stdout of container \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" error="reading from a closed fifo" Oct 2 20:15:24.386949 env[1328]: time="2023-10-02T20:15:24.386798857Z" level=error msg="Failed to pipe stderr of container \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" error="reading from a closed fifo" Oct 2 20:15:24.391657 env[1328]: time="2023-10-02T20:15:24.391616487Z" level=error msg="StartContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:15:24.391905 kubelet[2464]: E1002 20:15:24.391883 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a" Oct 2 20:15:24.392033 kubelet[2464]: E1002 20:15:24.392012 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:15:24.392033 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:15:24.392033 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:15:24.392033 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:15:24.392233 kubelet[2464]: E1002 20:15:24.392059 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:15:24.737418 kubelet[2464]: I1002 20:15:24.737388 2464 scope.go:115] "RemoveContainer" containerID="85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519" Oct 2 20:15:24.738007 kubelet[2464]: I1002 20:15:24.737987 2464 scope.go:115] "RemoveContainer" containerID="85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519" Oct 2 20:15:24.739408 env[1328]: time="2023-10-02T20:15:24.739357624Z" level=info msg="RemoveContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" Oct 2 20:15:24.740710 env[1328]: time="2023-10-02T20:15:24.740678832Z" level=info msg="RemoveContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\"" Oct 2 20:15:24.740849 env[1328]: time="2023-10-02T20:15:24.740798033Z" level=error msg="RemoveContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\" failed" error="failed to set removing state for container \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\": container is already in removing state" Oct 2 20:15:24.740994 kubelet[2464]: E1002 20:15:24.740973 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\": container is already in removing state" containerID="85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519" Oct 2 20:15:24.741074 kubelet[2464]: E1002 20:15:24.741013 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519": container is already in removing state; Skipping pod "cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)" Oct 2 20:15:24.741454 kubelet[2464]: E1002 20:15:24.741420 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:15:24.749757 env[1328]: time="2023-10-02T20:15:24.748159078Z" level=info msg="RemoveContainer for \"85eeb451b0a920d7bb7a7b50ba7ce4e8495ef3c4efad648314405365bc836519\" returns successfully" Oct 2 20:15:27.484150 kubelet[2464]: W1002 20:15:27.484098 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a.scope WatchSource:0}: task 2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a not found: not found Oct 2 20:15:28.413249 kubelet[2464]: E1002 20:15:28.413213 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:28.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.18:22-10.200.12.6:41642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:28.501126 systemd[1]: Started sshd@11-10.200.8.18:22-10.200.12.6:41642.service. Oct 2 20:15:28.506594 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:28.506688 kernel: audit: type=1130 audit(1696277728.499:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.18:22-10.200.12.6:41642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:29.122000 audit[3153]: USER_ACCT pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.143311 sshd[3153]: Accepted publickey for core from 10.200.12.6 port 41642 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:29.143639 sshd[3153]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:29.143906 kernel: audit: type=1101 audit(1696277729.122:1163): pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.141000 audit[3153]: CRED_ACQ pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.150005 systemd[1]: Started session-14.scope. Oct 2 20:15:29.151089 systemd-logind[1313]: New session 14 of user core. Oct 2 20:15:29.162767 kernel: audit: type=1103 audit(1696277729.141:1164): pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.141000 audit[3153]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff493cd660 a2=3 a3=0 items=0 ppid=1 pid=3153 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:29.176774 kernel: audit: type=1006 audit(1696277729.141:1165): pid=3153 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:15:29.176819 kernel: audit: type=1300 audit(1696277729.141:1165): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff493cd660 a2=3 a3=0 items=0 ppid=1 pid=3153 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:29.194434 kernel: audit: type=1327 audit(1696277729.141:1165): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:29.141000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:29.155000 audit[3153]: USER_START pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.221492 kernel: audit: type=1105 audit(1696277729.155:1166): pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.221645 kernel: audit: type=1103 audit(1696277729.157:1167): pid=3158 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.157000 audit[3158]: CRED_ACQ pid=3158 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.691147 sshd[3153]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:29.690000 audit[3153]: USER_END pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.694174 systemd[1]: sshd@11-10.200.8.18:22-10.200.12.6:41642.service: Deactivated successfully. Oct 2 20:15:29.694911 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:15:29.696277 systemd-logind[1313]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:15:29.697167 systemd-logind[1313]: Removed session 14. Oct 2 20:15:29.690000 audit[3153]: CRED_DISP pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.731855 kernel: audit: type=1106 audit(1696277729.690:1168): pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.731940 kernel: audit: type=1104 audit(1696277729.690:1169): pid=3153 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:29.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.18:22-10.200.12.6:41642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:33.414755 kubelet[2464]: E1002 20:15:33.414706 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:38.416109 kubelet[2464]: E1002 20:15:38.416070 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:39.288539 kubelet[2464]: E1002 20:15:39.288496 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:15:39.911294 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:39.911428 kernel: audit: type=1130 audit(1696277739.886:1171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:34382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:39.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:34382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:39.888369 systemd[1]: Started sshd@12-10.200.8.18:22-10.200.12.6:34382.service. Oct 2 20:15:40.556000 audit[3172]: USER_ACCT pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.558962 sshd[3172]: Accepted publickey for core from 10.200.12.6 port 34382 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:40.575000 audit[3172]: CRED_ACQ pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.577665 sshd[3172]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:40.583026 systemd[1]: Started session-15.scope. Oct 2 20:15:40.584122 systemd-logind[1313]: New session 15 of user core. Oct 2 20:15:40.594360 kernel: audit: type=1101 audit(1696277740.556:1172): pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.594437 kernel: audit: type=1103 audit(1696277740.575:1173): pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.594472 kernel: audit: type=1006 audit(1696277740.575:1174): pid=3172 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:15:40.575000 audit[3172]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8f959280 a2=3 a3=0 items=0 ppid=1 pid=3172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:40.575000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:40.623914 kernel: audit: type=1300 audit(1696277740.575:1174): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8f959280 a2=3 a3=0 items=0 ppid=1 pid=3172 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:40.623974 kernel: audit: type=1327 audit(1696277740.575:1174): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:40.586000 audit[3172]: USER_START pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.629791 kernel: audit: type=1105 audit(1696277740.586:1175): pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.589000 audit[3174]: CRED_ACQ pid=3174 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:40.663022 kernel: audit: type=1103 audit(1696277740.589:1176): pid=3174 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:41.064327 sshd[3172]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:41.064000 audit[3172]: USER_END pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:41.068112 systemd[1]: sshd@12-10.200.8.18:22-10.200.12.6:34382.service: Deactivated successfully. Oct 2 20:15:41.069034 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:15:41.071111 systemd-logind[1313]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:15:41.072179 systemd-logind[1313]: Removed session 15. Oct 2 20:15:41.064000 audit[3172]: CRED_DISP pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:41.102273 kernel: audit: type=1106 audit(1696277741.064:1177): pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:41.102413 kernel: audit: type=1104 audit(1696277741.064:1178): pid=3172 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:41.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.18:22-10.200.12.6:34382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:43.417676 kubelet[2464]: E1002 20:15:43.417627 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:48.418583 kubelet[2464]: E1002 20:15:48.418548 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:51.170304 systemd[1]: Started sshd@13-10.200.8.18:22-10.200.12.6:37088.service. Oct 2 20:15:51.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:37088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:51.176931 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:51.177872 kernel: audit: type=1130 audit(1696277751.169:1180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:37088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:51.288601 kubelet[2464]: E1002 20:15:51.288557 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:15:51.870000 audit[3187]: USER_ACCT pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.893548 sshd[3187]: Accepted publickey for core from 10.200.12.6 port 37088 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:51.893913 kernel: audit: type=1101 audit(1696277751.870:1181): pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.894130 sshd[3187]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:51.891000 audit[3187]: CRED_ACQ pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.899228 systemd[1]: Started session-16.scope. Oct 2 20:15:51.900466 systemd-logind[1313]: New session 16 of user core. Oct 2 20:15:51.921292 kernel: audit: type=1103 audit(1696277751.891:1182): pid=3187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.921400 kernel: audit: type=1006 audit(1696277751.891:1183): pid=3187 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:15:51.921454 kernel: audit: type=1300 audit(1696277751.891:1183): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa8ce2950 a2=3 a3=0 items=0 ppid=1 pid=3187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:51.891000 audit[3187]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa8ce2950 a2=3 a3=0 items=0 ppid=1 pid=3187 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:51.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:51.945058 kernel: audit: type=1327 audit(1696277751.891:1183): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:51.945178 kernel: audit: type=1105 audit(1696277751.902:1184): pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.902000 audit[3187]: USER_START pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.902000 audit[3189]: CRED_ACQ pid=3189 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:51.978487 kernel: audit: type=1103 audit(1696277751.902:1185): pid=3189 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:52.381054 sshd[3187]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:52.381000 audit[3187]: USER_END pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:52.384898 systemd[1]: sshd@13-10.200.8.18:22-10.200.12.6:37088.service: Deactivated successfully. Oct 2 20:15:52.385583 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:15:52.386995 systemd-logind[1313]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:15:52.388280 systemd-logind[1313]: Removed session 16. Oct 2 20:15:52.381000 audit[3187]: CRED_DISP pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:52.421955 kernel: audit: type=1106 audit(1696277752.381:1186): pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:52.422096 kernel: audit: type=1104 audit(1696277752.381:1187): pid=3187 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:52.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.18:22-10.200.12.6:37088 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:53.420207 kubelet[2464]: E1002 20:15:53.420167 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:58.421399 kubelet[2464]: E1002 20:15:58.421367 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:58.595000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.601458 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:58.601584 kernel: audit: type=1400 audit(1696277758.595:1189): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.619879 kernel: audit: type=1400 audit(1696277758.595:1190): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.595000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.595000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002873f20 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:58.668883 kernel: audit: type=1300 audit(1696277758.595:1190): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002873f20 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:58.669307 kernel: audit: type=1327 audit(1696277758.595:1190): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:58.595000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:58.595000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025b7ad0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:58.715911 kernel: audit: type=1300 audit(1696277758.595:1189): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025b7ad0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:15:58.719093 kernel: audit: type=1327 audit(1696277758.595:1189): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:58.595000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.488139 kernel: audit: type=1400 audit(1696277759.445:1192): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.489224 kernel: audit: type=1400 audit(1696277759.445:1191): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.490088 kernel: audit: type=1300 audit(1696277759.445:1191): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a0b0b70 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a0b0b70 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.532145 kernel: audit: type=1327 audit(1696277759.445:1191): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.445000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c002555600 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.445000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c009ef73e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.445000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.460000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.460000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0025dc1e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.460000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.460000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a0b0d20 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:59.460000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:59.460000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a0b0d50 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:15:59.460000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:02.492201 systemd[1]: Started sshd@14-10.200.8.18:22-10.200.12.6:52068.service. Oct 2 20:16:02.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.18:22-10.200.12.6:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:03.111000 audit[3204]: USER_ACCT pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.112202 sshd[3204]: Accepted publickey for core from 10.200.12.6 port 52068 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:03.112000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.113818 sshd[3204]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:03.112000 audit[3204]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9eaf2a70 a2=3 a3=0 items=0 ppid=1 pid=3204 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:03.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:03.121517 systemd[1]: Started session-17.scope. Oct 2 20:16:03.121965 systemd-logind[1313]: New session 17 of user core. Oct 2 20:16:03.126000 audit[3204]: USER_START pid=3204 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.128000 audit[3206]: CRED_ACQ pid=3206 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.423470 kubelet[2464]: E1002 20:16:03.423356 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:03.606100 sshd[3204]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:03.606000 audit[3204]: USER_END pid=3204 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.609907 systemd[1]: sshd@14-10.200.8.18:22-10.200.12.6:52068.service: Deactivated successfully. Oct 2 20:16:03.610801 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:16:03.613373 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:16:03.613451 kernel: audit: type=1106 audit(1696277763.606:1203): pid=3204 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.613049 systemd-logind[1313]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:16:03.614060 systemd-logind[1313]: Removed session 17. Oct 2 20:16:03.606000 audit[3204]: CRED_DISP pid=3204 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.647901 kernel: audit: type=1104 audit(1696277763.606:1204): pid=3204 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:03.647974 kernel: audit: type=1131 audit(1696277763.606:1205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.18:22-10.200.12.6:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:03.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.18:22-10.200.12.6:52068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:03.934000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.934000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00152eb80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:03.973763 kernel: audit: type=1400 audit(1696277763.934:1206): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.973889 kernel: audit: type=1300 audit(1696277763.934:1206): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00152eb80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:03.973915 kernel: audit: type=1327 audit(1696277763.934:1206): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:03.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:03.935000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:04.008535 kernel: audit: type=1400 audit(1696277763.935:1207): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.935000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129cd80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:03.935000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:04.048471 kernel: audit: type=1300 audit(1696277763.935:1207): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129cd80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:04.048606 kernel: audit: type=1327 audit(1696277763.935:1207): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:04.048641 kernel: audit: type=1400 audit(1696277763.936:1208): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.936000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.936000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129cdc0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:03.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:03.938000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:03.938000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00152eda0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:03.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:05.288972 kubelet[2464]: E1002 20:16:05.288926 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:16:08.425061 kubelet[2464]: E1002 20:16:08.424997 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:13.426473 kubelet[2464]: E1002 20:16:13.426426 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:13.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.18:22-10.200.12.6:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:13.711892 systemd[1]: Started sshd@15-10.200.8.18:22-10.200.12.6:45646.service. Oct 2 20:16:13.717596 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 20:16:13.718512 kernel: audit: type=1130 audit(1696277773.711:1210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.18:22-10.200.12.6:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:14.337000 audit[3219]: USER_ACCT pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.338357 sshd[3219]: Accepted publickey for core from 10.200.12.6 port 45646 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:14.339957 sshd[3219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:14.358016 kernel: audit: type=1101 audit(1696277774.337:1211): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.337000 audit[3219]: CRED_ACQ pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.368085 systemd[1]: Started session-18.scope. Oct 2 20:16:14.368785 systemd-logind[1313]: New session 18 of user core. Oct 2 20:16:14.387249 kernel: audit: type=1103 audit(1696277774.337:1212): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.387343 kernel: audit: type=1006 audit(1696277774.337:1213): pid=3219 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:16:14.387370 kernel: audit: type=1300 audit(1696277774.337:1213): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2347c430 a2=3 a3=0 items=0 ppid=1 pid=3219 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:14.337000 audit[3219]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2347c430 a2=3 a3=0 items=0 ppid=1 pid=3219 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:14.337000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:14.405758 kernel: audit: type=1327 audit(1696277774.337:1213): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:14.373000 audit[3219]: USER_START pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.429941 kernel: audit: type=1105 audit(1696277774.373:1214): pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.430027 kernel: audit: type=1103 audit(1696277774.377:1215): pid=3221 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.377000 audit[3221]: CRED_ACQ pid=3221 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.849682 sshd[3219]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:14.850000 audit[3219]: USER_END pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.852973 systemd[1]: sshd@15-10.200.8.18:22-10.200.12.6:45646.service: Deactivated successfully. Oct 2 20:16:14.853874 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:16:14.855820 systemd-logind[1313]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:16:14.856688 systemd-logind[1313]: Removed session 18. Oct 2 20:16:14.850000 audit[3219]: CRED_DISP pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.871754 kernel: audit: type=1106 audit(1696277774.850:1216): pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.871796 kernel: audit: type=1104 audit(1696277774.850:1217): pid=3219 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:14.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.18:22-10.200.12.6:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:18.427208 kubelet[2464]: E1002 20:16:18.427179 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:19.288876 kubelet[2464]: E1002 20:16:19.288838 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:16:23.428726 kubelet[2464]: E1002 20:16:23.428680 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:24.954984 systemd[1]: Started sshd@16-10.200.8.18:22-10.200.12.6:43006.service. Oct 2 20:16:24.977760 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:16:24.977872 kernel: audit: type=1130 audit(1696277784.955:1219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.18:22-10.200.12.6:43006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:24.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.18:22-10.200.12.6:43006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:25.570000 audit[3234]: USER_ACCT pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.573007 sshd[3234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:25.591038 kernel: audit: type=1101 audit(1696277785.570:1220): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.591070 kernel: audit: type=1103 audit(1696277785.571:1221): pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.571000 audit[3234]: CRED_ACQ pid=3234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.591146 sshd[3234]: Accepted publickey for core from 10.200.12.6 port 43006 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:25.595856 systemd[1]: Started session-19.scope. Oct 2 20:16:25.596831 systemd-logind[1313]: New session 19 of user core. Oct 2 20:16:25.607757 kernel: audit: type=1006 audit(1696277785.571:1222): pid=3234 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:16:25.571000 audit[3234]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c66ea60 a2=3 a3=0 items=0 ppid=1 pid=3234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:25.617822 kernel: audit: type=1300 audit(1696277785.571:1222): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c66ea60 a2=3 a3=0 items=0 ppid=1 pid=3234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:25.571000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:25.641104 kernel: audit: type=1327 audit(1696277785.571:1222): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:25.641172 kernel: audit: type=1105 audit(1696277785.600:1223): pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.600000 audit[3234]: USER_START pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.602000 audit[3236]: CRED_ACQ pid=3236 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:25.660751 kernel: audit: type=1103 audit(1696277785.602:1224): pid=3236 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.068889 sshd[3234]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:26.069000 audit[3234]: USER_END pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.073492 systemd-logind[1313]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:16:26.075172 systemd[1]: sshd@16-10.200.8.18:22-10.200.12.6:43006.service: Deactivated successfully. Oct 2 20:16:26.076041 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:16:26.077628 systemd-logind[1313]: Removed session 19. Oct 2 20:16:26.070000 audit[3234]: CRED_DISP pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.105726 kernel: audit: type=1106 audit(1696277786.069:1225): pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.105825 kernel: audit: type=1104 audit(1696277786.070:1226): pid=3234 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.18:22-10.200.12.6:43006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:26.174510 systemd[1]: Started sshd@17-10.200.8.18:22-10.200.12.6:43022.service. Oct 2 20:16:26.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.18:22-10.200.12.6:43022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:26.793000 audit[3247]: USER_ACCT pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.794042 sshd[3247]: Accepted publickey for core from 10.200.12.6 port 43022 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:26.794000 audit[3247]: CRED_ACQ pid=3247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.794000 audit[3247]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e79e560 a2=3 a3=0 items=0 ppid=1 pid=3247 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:26.794000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:26.795707 sshd[3247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:26.801397 systemd[1]: Started session-20.scope. Oct 2 20:16:26.801888 systemd-logind[1313]: New session 20 of user core. Oct 2 20:16:26.805000 audit[3247]: USER_START pid=3247 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:26.807000 audit[3249]: CRED_ACQ pid=3249 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:28.054436 sshd[3247]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:28.055000 audit[3247]: USER_END pid=3247 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:28.055000 audit[3247]: CRED_DISP pid=3247 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:28.057608 systemd[1]: sshd@17-10.200.8.18:22-10.200.12.6:43022.service: Deactivated successfully. Oct 2 20:16:28.058457 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:16:28.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.18:22-10.200.12.6:43022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:28.059217 systemd-logind[1313]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:16:28.060048 systemd-logind[1313]: Removed session 20. Oct 2 20:16:28.306264 systemd[1]: Started sshd@18-10.200.8.18:22-10.200.12.6:41738.service. Oct 2 20:16:28.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.18:22-10.200.12.6:41738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:28.429911 kubelet[2464]: E1002 20:16:28.429879 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:29.109000 audit[3258]: USER_ACCT pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.110662 sshd[3258]: Accepted publickey for core from 10.200.12.6 port 41738 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:29.110000 audit[3258]: CRED_ACQ pid=3258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.111000 audit[3258]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9f54fa60 a2=3 a3=0 items=0 ppid=1 pid=3258 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:29.111000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:29.112260 sshd[3258]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:29.116804 systemd-logind[1313]: New session 21 of user core. Oct 2 20:16:29.117243 systemd[1]: Started session-21.scope. Oct 2 20:16:29.121000 audit[3258]: USER_START pid=3258 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.122000 audit[3260]: CRED_ACQ pid=3260 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.775068 sshd[3258]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:29.776000 audit[3258]: USER_END pid=3258 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.776000 audit[3258]: CRED_DISP pid=3258 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:29.778923 systemd[1]: sshd@18-10.200.8.18:22-10.200.12.6:41738.service: Deactivated successfully. Oct 2 20:16:29.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.18:22-10.200.12.6:41738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:29.779959 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:16:29.780634 systemd-logind[1313]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:16:29.781460 systemd-logind[1313]: Removed session 21. Oct 2 20:16:30.288245 kubelet[2464]: E1002 20:16:30.288204 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:16:33.431094 kubelet[2464]: E1002 20:16:33.431055 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:38.432191 kubelet[2464]: E1002 20:16:38.432150 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:40.182033 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:16:40.182171 kernel: audit: type=1130 audit(1696277800.158:1246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.18:22-10.200.12.6:43606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:40.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.18:22-10.200.12.6:43606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:40.158951 systemd[1]: Started sshd@19-10.200.8.18:22-10.200.12.6:43606.service. Oct 2 20:16:41.163000 audit[3270]: USER_ACCT pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.165055 sshd[3270]: Accepted publickey for core from 10.200.12.6 port 43606 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:41.183775 kernel: audit: type=1101 audit(1696277801.163:1247): pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.183000 audit[3270]: CRED_ACQ pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.184626 sshd[3270]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:41.189893 systemd[1]: Started session-22.scope. Oct 2 20:16:41.191095 systemd-logind[1313]: New session 22 of user core. Oct 2 20:16:41.201760 kernel: audit: type=1103 audit(1696277801.183:1248): pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.201839 kernel: audit: type=1006 audit(1696277801.183:1249): pid=3270 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:16:41.183000 audit[3270]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee6974110 a2=3 a3=0 items=0 ppid=1 pid=3270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:41.228825 kernel: audit: type=1300 audit(1696277801.183:1249): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee6974110 a2=3 a3=0 items=0 ppid=1 pid=3270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:41.228937 kernel: audit: type=1327 audit(1696277801.183:1249): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:41.183000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:41.195000 audit[3270]: USER_START pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.256377 kernel: audit: type=1105 audit(1696277801.195:1250): pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.256585 kernel: audit: type=1103 audit(1696277801.197:1251): pid=3272 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.197000 audit[3272]: CRED_ACQ pid=3272 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.725992 sshd[3270]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:41.726000 audit[3270]: USER_END pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.729136 systemd[1]: sshd@19-10.200.8.18:22-10.200.12.6:43606.service: Deactivated successfully. Oct 2 20:16:41.729888 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:16:41.731369 systemd-logind[1313]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:16:41.732318 systemd-logind[1313]: Removed session 22. Oct 2 20:16:41.727000 audit[3270]: CRED_DISP pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.762520 kernel: audit: type=1106 audit(1696277801.726:1252): pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.762609 kernel: audit: type=1104 audit(1696277801.727:1253): pid=3270 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:41.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.18:22-10.200.12.6:43606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:43.433181 kubelet[2464]: E1002 20:16:43.433144 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:45.288758 kubelet[2464]: E1002 20:16:45.288711 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:16:48.434626 kubelet[2464]: E1002 20:16:48.434582 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:51.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.18:22-10.200.12.6:60324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:51.832097 systemd[1]: Started sshd@20-10.200.8.18:22-10.200.12.6:60324.service. Oct 2 20:16:51.837558 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:16:51.837636 kernel: audit: type=1130 audit(1696277811.831:1255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.18:22-10.200.12.6:60324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:52.497766 kernel: audit: type=1101 audit(1696277812.474:1256): pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.474000 audit[3284]: USER_ACCT pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.498057 sshd[3284]: Accepted publickey for core from 10.200.12.6 port 60324 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:52.497000 audit[3284]: CRED_ACQ pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.498636 sshd[3284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:52.503957 systemd[1]: Started session-23.scope. Oct 2 20:16:52.505045 systemd-logind[1313]: New session 23 of user core. Oct 2 20:16:52.526041 kernel: audit: type=1103 audit(1696277812.497:1257): pid=3284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.526146 kernel: audit: type=1006 audit(1696277812.497:1258): pid=3284 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:16:52.526173 kernel: audit: type=1300 audit(1696277812.497:1258): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbe287f60 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:52.497000 audit[3284]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbe287f60 a2=3 a3=0 items=0 ppid=1 pid=3284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:52.545429 kernel: audit: type=1327 audit(1696277812.497:1258): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:52.497000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:52.509000 audit[3284]: USER_START pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.572977 kernel: audit: type=1105 audit(1696277812.509:1259): pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.573312 kernel: audit: type=1103 audit(1696277812.511:1260): pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.511000 audit[3286]: CRED_ACQ pid=3286 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.968663 sshd[3284]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:52.969000 audit[3284]: USER_END pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.971855 systemd-logind[1313]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:16:52.973134 systemd[1]: sshd@20-10.200.8.18:22-10.200.12.6:60324.service: Deactivated successfully. Oct 2 20:16:52.973861 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:16:52.975138 systemd-logind[1313]: Removed session 23. Oct 2 20:16:52.969000 audit[3284]: CRED_DISP pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:53.003915 kernel: audit: type=1106 audit(1696277812.969:1261): pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:53.004027 kernel: audit: type=1104 audit(1696277812.969:1262): pid=3284 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:52.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.18:22-10.200.12.6:60324 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:53.436184 kubelet[2464]: E1002 20:16:53.436149 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:58.437749 kubelet[2464]: E1002 20:16:58.437695 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:58.597000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.601845 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:16:58.601936 kernel: audit: type=1400 audit(1696277818.597:1264): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.597000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.637581 kernel: audit: type=1400 audit(1696277818.597:1265): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.637680 kernel: audit: type=1300 audit(1696277818.597:1265): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cbda0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:58.597000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cbda0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:58.660759 kernel: audit: type=1327 audit(1696277818.597:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:58.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:58.597000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012ba4e0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:58.701547 kernel: audit: type=1300 audit(1696277818.597:1264): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0012ba4e0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:16:58.701628 kernel: audit: type=1327 audit(1696277818.597:1264): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:58.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:59.288691 kubelet[2464]: E1002 20:16:59.288644 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:16:59.446000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.446000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a1d0cc0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.465758 kernel: audit: type=1400 audit(1696277819.446:1266): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.465815 kernel: audit: type=1300 audit(1696277819.446:1266): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a1d0cc0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.487273 kernel: audit: type=1327 audit(1696277819.446:1266): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.446000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.447000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.506809 kernel: audit: type=1400 audit(1696277819.447:1267): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.447000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0018713e0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.447000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.447000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a384cf0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.485000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.485000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c002ae61a0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.485000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.485000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a384d50 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:59.485000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:59.485000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a384d80 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:16:59.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:03.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.18:22-10.200.12.6:57560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:03.074715 systemd[1]: Started sshd@21-10.200.8.18:22-10.200.12.6:57560.service. Oct 2 20:17:03.439052 kubelet[2464]: E1002 20:17:03.438951 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:03.708000 audit[3296]: USER_ACCT pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.709400 sshd[3296]: Accepted publickey for core from 10.200.12.6 port 57560 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:03.713763 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:17:03.713864 kernel: audit: type=1101 audit(1696277823.708:1273): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.714417 sshd[3296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:03.720134 systemd[1]: Started session-24.scope. Oct 2 20:17:03.721499 systemd-logind[1313]: New session 24 of user core. Oct 2 20:17:03.743783 kernel: audit: type=1103 audit(1696277823.713:1274): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.713000 audit[3296]: CRED_ACQ pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.748749 kernel: audit: type=1006 audit(1696277823.713:1275): pid=3296 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:17:03.713000 audit[3296]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe65f85c70 a2=3 a3=0 items=0 ppid=1 pid=3296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:03.776137 kernel: audit: type=1300 audit(1696277823.713:1275): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe65f85c70 a2=3 a3=0 items=0 ppid=1 pid=3296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:03.776843 kernel: audit: type=1327 audit(1696277823.713:1275): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:03.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:03.725000 audit[3296]: USER_START pid=3296 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.801061 kernel: audit: type=1105 audit(1696277823.725:1276): pid=3296 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.801134 kernel: audit: type=1103 audit(1696277823.727:1277): pid=3300 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.727000 audit[3300]: CRED_ACQ pid=3300 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:03.934000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:03.934000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012ba700 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:03.973865 kernel: audit: type=1400 audit(1696277823.934:1278): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:03.973999 kernel: audit: type=1300 audit(1696277823.934:1278): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012ba700 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:03.974032 kernel: audit: type=1327 audit(1696277823.934:1278): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:03.934000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:03.950000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:03.950000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013bc060 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:03.950000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:03.951000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:03.951000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013bc080 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:03.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:03.952000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:03.952000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012ba820 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:03.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:04.209995 sshd[3296]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:04.211000 audit[3296]: USER_END pid=3296 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:04.211000 audit[3296]: CRED_DISP pid=3296 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:04.213577 systemd[1]: sshd@21-10.200.8.18:22-10.200.12.6:57560.service: Deactivated successfully. Oct 2 20:17:04.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.18:22-10.200.12.6:57560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:04.214760 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:17:04.215607 systemd-logind[1313]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:17:04.216585 systemd-logind[1313]: Removed session 24. Oct 2 20:17:08.441079 kubelet[2464]: E1002 20:17:08.441043 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:13.289036 kubelet[2464]: E1002 20:17:13.288989 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:17:13.442360 kubelet[2464]: E1002 20:17:13.442327 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:14.316839 systemd[1]: Started sshd@22-10.200.8.18:22-10.200.12.6:38968.service. Oct 2 20:17:14.346929 kernel: kauditd_printk_skb: 12 callbacks suppressed Oct 2 20:17:14.347059 kernel: audit: type=1130 audit(1696277834.316:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.18:22-10.200.12.6:38968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:14.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.18:22-10.200.12.6:38968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:14.949000 audit[3310]: USER_ACCT pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:14.950246 sshd[3310]: Accepted publickey for core from 10.200.12.6 port 38968 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:14.952000 sshd[3310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:14.950000 audit[3310]: CRED_ACQ pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:14.974362 systemd[1]: Started session-25.scope. Oct 2 20:17:14.975333 systemd-logind[1313]: New session 25 of user core. Oct 2 20:17:14.985944 kernel: audit: type=1101 audit(1696277834.949:1286): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:14.986039 kernel: audit: type=1103 audit(1696277834.950:1287): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:14.986076 kernel: audit: type=1006 audit(1696277834.950:1288): pid=3310 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:17:14.950000 audit[3310]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfb875b30 a2=3 a3=0 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:14.996776 kernel: audit: type=1300 audit(1696277834.950:1288): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfb875b30 a2=3 a3=0 items=0 ppid=1 pid=3310 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:14.950000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:15.014897 kernel: audit: type=1327 audit(1696277834.950:1288): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:14.980000 audit[3310]: USER_START pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.020760 kernel: audit: type=1105 audit(1696277834.980:1289): pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:14.981000 audit[3312]: CRED_ACQ pid=3312 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.053172 kernel: audit: type=1103 audit(1696277834.981:1290): pid=3312 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.447561 sshd[3310]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:15.448000 audit[3310]: USER_END pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.450750 systemd[1]: sshd@22-10.200.8.18:22-10.200.12.6:38968.service: Deactivated successfully. Oct 2 20:17:15.451475 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:17:15.453015 systemd-logind[1313]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:17:15.454001 systemd-logind[1313]: Removed session 25. Oct 2 20:17:15.448000 audit[3310]: CRED_DISP pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.484084 kernel: audit: type=1106 audit(1696277835.448:1291): pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.484170 kernel: audit: type=1104 audit(1696277835.448:1292): pid=3310 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:15.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.18:22-10.200.12.6:38968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:18.443426 kubelet[2464]: E1002 20:17:18.443384 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:23.444927 kubelet[2464]: E1002 20:17:23.444893 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:25.555007 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:25.555129 kernel: audit: type=1130 audit(1696277845.553:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.18:22-10.200.12.6:55482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:25.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.18:22-10.200.12.6:55482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:25.554512 systemd[1]: Started sshd@23-10.200.8.18:22-10.200.12.6:55482.service. Oct 2 20:17:26.196000 audit[3326]: USER_ACCT pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.217500 sshd[3326]: Accepted publickey for core from 10.200.12.6 port 55482 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:26.217869 kernel: audit: type=1101 audit(1696277846.196:1295): pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.216000 audit[3326]: CRED_ACQ pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.218062 sshd[3326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:26.223409 systemd[1]: Started session-26.scope. Oct 2 20:17:26.224526 systemd-logind[1313]: New session 26 of user core. Oct 2 20:17:26.245660 kernel: audit: type=1103 audit(1696277846.216:1296): pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.245779 kernel: audit: type=1006 audit(1696277846.216:1297): pid=3326 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:17:26.245818 kernel: audit: type=1300 audit(1696277846.216:1297): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe39d3eae0 a2=3 a3=0 items=0 ppid=1 pid=3326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:26.216000 audit[3326]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe39d3eae0 a2=3 a3=0 items=0 ppid=1 pid=3326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:26.263808 kernel: audit: type=1327 audit(1696277846.216:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:26.216000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:26.228000 audit[3326]: USER_START pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.287969 kernel: audit: type=1105 audit(1696277846.228:1298): pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.288055 kernel: audit: type=1103 audit(1696277846.230:1299): pid=3328 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.230000 audit[3328]: CRED_ACQ pid=3328 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.698030 sshd[3326]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:26.698000 audit[3326]: USER_END pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.701691 systemd[1]: sshd@23-10.200.8.18:22-10.200.12.6:55482.service: Deactivated successfully. Oct 2 20:17:26.702586 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:17:26.704336 systemd-logind[1313]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:17:26.705383 systemd-logind[1313]: Removed session 26. Oct 2 20:17:26.718754 kernel: audit: type=1106 audit(1696277846.698:1300): pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.718841 kernel: audit: type=1104 audit(1696277846.699:1301): pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.699000 audit[3326]: CRED_DISP pid=3326 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:26.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.18:22-10.200.12.6:55482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:27.288253 kubelet[2464]: E1002 20:17:27.288206 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:17:28.445841 kubelet[2464]: E1002 20:17:28.445810 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:33.447127 kubelet[2464]: E1002 20:17:33.447082 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:36.825985 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:36.826153 kernel: audit: type=1130 audit(1696277856.803:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.18:22-10.200.12.6:38356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:36.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.18:22-10.200.12.6:38356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:36.804262 systemd[1]: Started sshd@24-10.200.8.18:22-10.200.12.6:38356.service. Oct 2 20:17:37.428000 audit[3338]: USER_ACCT pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.449019 sshd[3338]: Accepted publickey for core from 10.200.12.6 port 38356 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:37.450120 kernel: audit: type=1101 audit(1696277857.428:1304): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.449000 audit[3338]: CRED_ACQ pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.450248 sshd[3338]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:37.455389 systemd[1]: Started session-27.scope. Oct 2 20:17:37.456620 systemd-logind[1313]: New session 27 of user core. Oct 2 20:17:37.477755 kernel: audit: type=1103 audit(1696277857.449:1305): pid=3338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.477873 kernel: audit: type=1006 audit(1696277857.449:1306): pid=3338 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:17:37.449000 audit[3338]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e1e2df0 a2=3 a3=0 items=0 ppid=1 pid=3338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:37.449000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:37.502325 kernel: audit: type=1300 audit(1696277857.449:1306): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6e1e2df0 a2=3 a3=0 items=0 ppid=1 pid=3338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:37.502421 kernel: audit: type=1327 audit(1696277857.449:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:37.502452 kernel: audit: type=1105 audit(1696277857.459:1307): pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.459000 audit[3338]: USER_START pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.521425 kernel: audit: type=1103 audit(1696277857.459:1308): pid=3340 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.459000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.926460 sshd[3338]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:37.927000 audit[3338]: USER_END pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.929919 systemd-logind[1313]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:17:37.931586 systemd[1]: sshd@24-10.200.8.18:22-10.200.12.6:38356.service: Deactivated successfully. Oct 2 20:17:37.932455 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:17:37.934291 systemd-logind[1313]: Removed session 27. Oct 2 20:17:37.927000 audit[3338]: CRED_DISP pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.966477 kernel: audit: type=1106 audit(1696277857.927:1309): pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.966564 kernel: audit: type=1104 audit(1696277857.927:1310): pid=3338 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:37.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.18:22-10.200.12.6:38356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:38.448553 kubelet[2464]: E1002 20:17:38.448519 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:41.288443 kubelet[2464]: E1002 20:17:41.288190 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:17:43.449303 kubelet[2464]: E1002 20:17:43.449272 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:48.054515 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:48.054654 kernel: audit: type=1130 audit(1696277868.031:1312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.18:22-10.200.12.6:38692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:48.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.18:22-10.200.12.6:38692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:48.032036 systemd[1]: Started sshd@25-10.200.8.18:22-10.200.12.6:38692.service. Oct 2 20:17:48.450290 kubelet[2464]: E1002 20:17:48.450250 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:48.927000 audit[3353]: USER_ACCT pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.929453 sshd[3353]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:48.947328 sshd[3353]: Accepted publickey for core from 10.200.12.6 port 38692 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:48.947851 kernel: audit: type=1101 audit(1696277868.927:1313): pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.952771 systemd[1]: Started session-28.scope. Oct 2 20:17:48.952992 systemd-logind[1313]: New session 28 of user core. Oct 2 20:17:48.928000 audit[3353]: CRED_ACQ pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.989856 kernel: audit: type=1103 audit(1696277868.928:1314): pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.989941 kernel: audit: type=1006 audit(1696277868.928:1315): pid=3353 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:17:48.928000 audit[3353]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdc8a33a0 a2=3 a3=0 items=0 ppid=1 pid=3353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:49.007163 kernel: audit: type=1300 audit(1696277868.928:1315): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffdc8a33a0 a2=3 a3=0 items=0 ppid=1 pid=3353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:49.008962 kernel: audit: type=1327 audit(1696277868.928:1315): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:48.928000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:49.014544 kernel: audit: type=1105 audit(1696277868.957:1316): pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.957000 audit[3353]: USER_START pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:48.959000 audit[3355]: CRED_ACQ pid=3355 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.047497 kernel: audit: type=1103 audit(1696277868.959:1317): pid=3355 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.442289 sshd[3353]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:49.443000 audit[3353]: USER_END pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.451945 systemd[1]: sshd@25-10.200.8.18:22-10.200.12.6:38692.service: Deactivated successfully. Oct 2 20:17:49.452600 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:17:49.454303 systemd-logind[1313]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:17:49.455478 systemd-logind[1313]: Removed session 28. Oct 2 20:17:49.443000 audit[3353]: CRED_DISP pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.486679 kernel: audit: type=1106 audit(1696277869.443:1318): pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.486769 kernel: audit: type=1104 audit(1696277869.443:1319): pid=3353 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:49.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.18:22-10.200.12.6:38692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:53.451167 kubelet[2464]: E1002 20:17:53.451130 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:54.288576 kubelet[2464]: E1002 20:17:54.288516 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:17:58.452188 kubelet[2464]: E1002 20:17:58.452151 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:58.598000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.603878 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:58.603967 kernel: audit: type=1400 audit(1696277878.598:1322): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.598000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.641495 kernel: audit: type=1400 audit(1696277878.598:1321): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.641582 kernel: audit: type=1300 audit(1696277878.598:1322): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129cd40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:58.598000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129cd40 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:58.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:58.682877 kernel: audit: type=1327 audit(1696277878.598:1322): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:58.682970 kernel: audit: type=1300 audit(1696277878.598:1321): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018bc450 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:58.598000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018bc450 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:17:58.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:58.723355 kernel: audit: type=1327 audit(1696277878.598:1321): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:59.447000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.447000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.484968 kernel: audit: type=1400 audit(1696277879.447:1323): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.485064 kernel: audit: type=1400 audit(1696277879.447:1324): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.485089 kernel: audit: type=1300 audit(1696277879.447:1323): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006813830 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.447000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006813830 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.522968 kernel: audit: type=1327 audit(1696277879.447:1323): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.448000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.448000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006813920 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.447000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c001873620 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.447000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.486000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.486000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c008883620 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.486000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.486000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c006813b90 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.486000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:59.486000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001b880a0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:17:59.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:59.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.18:22-10.200.12.6:59830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:59.550287 systemd[1]: Started sshd@26-10.200.8.18:22-10.200.12.6:59830.service. Oct 2 20:18:00.320000 audit[3366]: USER_ACCT pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.321986 sshd[3366]: Accepted publickey for core from 10.200.12.6 port 59830 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:00.322000 audit[3366]: CRED_ACQ pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.322000 audit[3366]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc147cafa0 a2=3 a3=0 items=0 ppid=1 pid=3366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:00.322000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:00.323631 sshd[3366]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:00.328568 systemd[1]: Started session-29.scope. Oct 2 20:18:00.329031 systemd-logind[1313]: New session 29 of user core. Oct 2 20:18:00.332000 audit[3366]: USER_START pid=3366 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.334000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.824180 sshd[3366]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:00.824000 audit[3366]: USER_END pid=3366 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.825000 audit[3366]: CRED_DISP pid=3366 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:00.827715 systemd[1]: sshd@26-10.200.8.18:22-10.200.12.6:59830.service: Deactivated successfully. Oct 2 20:18:00.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.18:22-10.200.12.6:59830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:00.828933 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:18:00.829980 systemd-logind[1313]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:18:00.831039 systemd-logind[1313]: Removed session 29. Oct 2 20:18:03.453295 kubelet[2464]: E1002 20:18:03.453261 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:03.935000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.940425 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:18:03.940583 kernel: audit: type=1400 audit(1696277883.935:1338): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.935000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129d3a0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:03.980016 kernel: audit: type=1300 audit(1696277883.935:1338): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129d3a0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:03.980142 kernel: audit: type=1327 audit(1696277883.935:1338): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.935000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.998839 kernel: audit: type=1400 audit(1696277883.951:1339): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.951000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.951000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020dfee0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:04.038001 kernel: audit: type=1300 audit(1696277883.951:1339): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020dfee0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:04.038135 kernel: audit: type=1327 audit(1696277883.951:1339): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.951000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:04.071472 kernel: audit: type=1400 audit(1696277883.951:1340): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.951000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129d3e0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:04.093755 kernel: audit: type=1300 audit(1696277883.951:1340): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00129d3e0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:04.093894 kernel: audit: type=1327 audit(1696277883.951:1340): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:03.953000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:04.127942 kernel: audit: type=1400 audit(1696277883.953:1341): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:03.953000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020dff00 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:03.953000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:06.289924 env[1328]: time="2023-10-02T20:18:06.289874689Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 20:18:06.333428 env[1328]: time="2023-10-02T20:18:06.333374707Z" level=info msg="CreateContainer within sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\"" Oct 2 20:18:06.334137 env[1328]: time="2023-10-02T20:18:06.334090518Z" level=info msg="StartContainer for \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\"" Oct 2 20:18:06.361482 systemd[1]: Started cri-containerd-3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c.scope. Oct 2 20:18:06.374899 systemd[1]: cri-containerd-3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c.scope: Deactivated successfully. Oct 2 20:18:06.391015 env[1328]: time="2023-10-02T20:18:06.390961456Z" level=info msg="shim disconnected" id=3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c Oct 2 20:18:06.391015 env[1328]: time="2023-10-02T20:18:06.391015457Z" level=warning msg="cleaning up after shim disconnected" id=3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c namespace=k8s.io Oct 2 20:18:06.391306 env[1328]: time="2023-10-02T20:18:06.391026057Z" level=info msg="cleaning up dead shim" Oct 2 20:18:06.399127 env[1328]: time="2023-10-02T20:18:06.399088290Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3403 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:06Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:06.399388 env[1328]: time="2023-10-02T20:18:06.399332794Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:18:06.400692 env[1328]: time="2023-10-02T20:18:06.400641216Z" level=error msg="Failed to pipe stdout of container \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\"" error="reading from a closed fifo" Oct 2 20:18:06.400788 env[1328]: time="2023-10-02T20:18:06.400749017Z" level=error msg="Failed to pipe stderr of container \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\"" error="reading from a closed fifo" Oct 2 20:18:06.404864 env[1328]: time="2023-10-02T20:18:06.404815785Z" level=error msg="StartContainer for \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:06.405027 kubelet[2464]: E1002 20:18:06.405003 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c" Oct 2 20:18:06.405370 kubelet[2464]: E1002 20:18:06.405136 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:06.405370 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:06.405370 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:18:06.405370 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-k8ftm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:06.405523 kubelet[2464]: E1002 20:18:06.405182 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:18:07.051440 kubelet[2464]: I1002 20:18:07.051330 2464 scope.go:115] "RemoveContainer" containerID="2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a" Oct 2 20:18:07.051698 kubelet[2464]: I1002 20:18:07.051674 2464 scope.go:115] "RemoveContainer" containerID="2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a" Oct 2 20:18:07.053697 env[1328]: time="2023-10-02T20:18:07.053563976Z" level=info msg="RemoveContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" Oct 2 20:18:07.054087 env[1328]: time="2023-10-02T20:18:07.054054684Z" level=info msg="RemoveContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\"" Oct 2 20:18:07.054342 env[1328]: time="2023-10-02T20:18:07.054308589Z" level=error msg="RemoveContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\" failed" error="failed to set removing state for container \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\": container is already in removing state" Oct 2 20:18:07.055261 kubelet[2464]: E1002 20:18:07.054595 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\": container is already in removing state" containerID="2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a" Oct 2 20:18:07.055261 kubelet[2464]: E1002 20:18:07.054630 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a": container is already in removing state; Skipping pod "cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)" Oct 2 20:18:07.055261 kubelet[2464]: E1002 20:18:07.055102 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-bxkrb_kube-system(d6315197-c608-495e-8807-4fc8ed570916)\"" pod="kube-system/cilium-bxkrb" podUID=d6315197-c608-495e-8807-4fc8ed570916 Oct 2 20:18:07.063685 env[1328]: time="2023-10-02T20:18:07.063642542Z" level=info msg="RemoveContainer for \"2b9433407de97840258e92bc95f306754f7d1afdd5c9c5b4a470159fcfed603a\" returns successfully" Oct 2 20:18:07.317790 systemd[1]: run-containerd-runc-k8s.io-3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c-runc.BpxPdS.mount: Deactivated successfully. Oct 2 20:18:07.317943 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c-rootfs.mount: Deactivated successfully. Oct 2 20:18:08.455131 kubelet[2464]: E1002 20:18:08.455099 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:09.495207 kubelet[2464]: W1002 20:18:09.495165 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice/cri-containerd-3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c.scope WatchSource:0}: task 3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c not found: not found Oct 2 20:18:11.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.18:22-10.200.12.6:60936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:11.127507 systemd[1]: Started sshd@27-10.200.8.18:22-10.200.12.6:60936.service. Oct 2 20:18:11.132841 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:18:11.132941 kernel: audit: type=1130 audit(1696277891.126:1342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.18:22-10.200.12.6:60936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:12.393000 audit[3417]: USER_ACCT pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.394370 sshd[3417]: Accepted publickey for core from 10.200.12.6 port 60936 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:12.414299 kernel: audit: type=1101 audit(1696277892.393:1343): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.414400 kernel: audit: type=1103 audit(1696277892.413:1344): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.413000 audit[3417]: CRED_ACQ pid=3417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.414175 sshd[3417]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:12.419441 systemd[1]: Started session-30.scope. Oct 2 20:18:12.420452 systemd-logind[1313]: New session 30 of user core. Oct 2 20:18:12.430759 kernel: audit: type=1006 audit(1696277892.413:1345): pid=3417 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:18:12.413000 audit[3417]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e339230 a2=3 a3=0 items=0 ppid=1 pid=3417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:12.441812 kernel: audit: type=1300 audit(1696277892.413:1345): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e339230 a2=3 a3=0 items=0 ppid=1 pid=3417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:12.413000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:12.459758 kernel: audit: type=1327 audit(1696277892.413:1345): proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:12.423000 audit[3417]: USER_START pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.484062 kernel: audit: type=1105 audit(1696277892.423:1346): pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.484132 kernel: audit: type=1103 audit(1696277892.426:1347): pid=3419 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:12.426000 audit[3419]: CRED_ACQ pid=3419 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.193422 sshd[3417]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:13.194000 audit[3417]: USER_END pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.196592 systemd[1]: sshd@27-10.200.8.18:22-10.200.12.6:60936.service: Deactivated successfully. Oct 2 20:18:13.197341 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:18:13.198708 systemd-logind[1313]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:18:13.199592 systemd-logind[1313]: Removed session 30. Oct 2 20:18:13.194000 audit[3417]: CRED_DISP pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.229805 kernel: audit: type=1106 audit(1696277893.194:1348): pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.229891 kernel: audit: type=1104 audit(1696277893.194:1349): pid=3417 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.18:22-10.200.12.6:60936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:13.297305 systemd[1]: Started sshd@28-10.200.8.18:22-10.200.12.6:60946.service. Oct 2 20:18:13.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.18:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:13.459964 kubelet[2464]: E1002 20:18:13.456446 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:13.928000 audit[3429]: USER_ACCT pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.929596 sshd[3429]: Accepted publickey for core from 10.200.12.6 port 60946 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:13.929000 audit[3429]: CRED_ACQ pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.929000 audit[3429]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff2051510 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:13.929000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:13.931193 sshd[3429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:13.936208 systemd[1]: Started session-31.scope. Oct 2 20:18:13.936753 systemd-logind[1313]: New session 31 of user core. Oct 2 20:18:13.939000 audit[3429]: USER_START pid=3429 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:13.941000 audit[3431]: CRED_ACQ pid=3431 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:15.566916 env[1328]: time="2023-10-02T20:18:15.566872084Z" level=info msg="StopPodSandbox for \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\"" Oct 2 20:18:15.567546 env[1328]: time="2023-10-02T20:18:15.567507094Z" level=info msg="Container to stop \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:18:15.569906 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452-shm.mount: Deactivated successfully. Oct 2 20:18:15.577000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:18:15.578824 systemd[1]: cri-containerd-315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452.scope: Deactivated successfully. Oct 2 20:18:15.581000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:18:15.585799 env[1328]: time="2023-10-02T20:18:15.585061070Z" level=info msg="StopContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" with timeout 30 (s)" Oct 2 20:18:15.585799 env[1328]: time="2023-10-02T20:18:15.585468976Z" level=info msg="Stop container \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" with signal terminated" Oct 2 20:18:15.614944 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452-rootfs.mount: Deactivated successfully. Oct 2 20:18:15.616000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:18:15.617514 systemd[1]: cri-containerd-b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183.scope: Deactivated successfully. Oct 2 20:18:15.622000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:18:15.635005 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183-rootfs.mount: Deactivated successfully. Oct 2 20:18:15.696816 env[1328]: time="2023-10-02T20:18:15.696759823Z" level=info msg="shim disconnected" id=b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183 Oct 2 20:18:15.696816 env[1328]: time="2023-10-02T20:18:15.696824024Z" level=warning msg="cleaning up after shim disconnected" id=b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183 namespace=k8s.io Oct 2 20:18:15.697133 env[1328]: time="2023-10-02T20:18:15.696836324Z" level=info msg="cleaning up dead shim" Oct 2 20:18:15.697133 env[1328]: time="2023-10-02T20:18:15.696780123Z" level=info msg="shim disconnected" id=315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452 Oct 2 20:18:15.697133 env[1328]: time="2023-10-02T20:18:15.697007727Z" level=warning msg="cleaning up after shim disconnected" id=315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452 namespace=k8s.io Oct 2 20:18:15.697133 env[1328]: time="2023-10-02T20:18:15.697022927Z" level=info msg="cleaning up dead shim" Oct 2 20:18:15.708072 env[1328]: time="2023-10-02T20:18:15.708023100Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3477 runtime=io.containerd.runc.v2\n" Oct 2 20:18:15.708400 env[1328]: time="2023-10-02T20:18:15.708361705Z" level=info msg="TearDown network for sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" successfully" Oct 2 20:18:15.708482 env[1328]: time="2023-10-02T20:18:15.708399406Z" level=info msg="StopPodSandbox for \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" returns successfully" Oct 2 20:18:15.712814 env[1328]: time="2023-10-02T20:18:15.712785274Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3478 runtime=io.containerd.runc.v2\n" Oct 2 20:18:15.719148 env[1328]: time="2023-10-02T20:18:15.717932455Z" level=info msg="StopContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" returns successfully" Oct 2 20:18:15.723840 env[1328]: time="2023-10-02T20:18:15.723631445Z" level=info msg="StopPodSandbox for \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\"" Oct 2 20:18:15.723840 env[1328]: time="2023-10-02T20:18:15.723712146Z" level=info msg="Container to stop \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:18:15.727906 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b-shm.mount: Deactivated successfully. Oct 2 20:18:15.739856 systemd[1]: cri-containerd-3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b.scope: Deactivated successfully. Oct 2 20:18:15.738000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:18:15.742000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:18:15.763949 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b-rootfs.mount: Deactivated successfully. Oct 2 20:18:15.781061 env[1328]: time="2023-10-02T20:18:15.781015245Z" level=info msg="shim disconnected" id=3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b Oct 2 20:18:15.781637 env[1328]: time="2023-10-02T20:18:15.781610355Z" level=warning msg="cleaning up after shim disconnected" id=3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b namespace=k8s.io Oct 2 20:18:15.781763 env[1328]: time="2023-10-02T20:18:15.781730856Z" level=info msg="cleaning up dead shim" Oct 2 20:18:15.789227 env[1328]: time="2023-10-02T20:18:15.789196374Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3523 runtime=io.containerd.runc.v2\n" Oct 2 20:18:15.789504 env[1328]: time="2023-10-02T20:18:15.789473378Z" level=info msg="TearDown network for sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" successfully" Oct 2 20:18:15.789579 env[1328]: time="2023-10-02T20:18:15.789504879Z" level=info msg="StopPodSandbox for \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" returns successfully" Oct 2 20:18:15.877942 kubelet[2464]: I1002 20:18:15.877892 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-hubble-tls\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.877942 kubelet[2464]: I1002 20:18:15.877948 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-xtables-lock\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.877989 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6ca9be16-8764-422c-b76c-d11ebd21f18c-cilium-config-path\") pod \"6ca9be16-8764-422c-b76c-d11ebd21f18c\" (UID: \"6ca9be16-8764-422c-b76c-d11ebd21f18c\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.878019 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cni-path\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.878052 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-kernel\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.878086 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-lib-modules\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.878121 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-hostproc\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878530 kubelet[2464]: I1002 20:18:15.878155 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-q88h5\" (UniqueName: \"kubernetes.io/projected/6ca9be16-8764-422c-b76c-d11ebd21f18c-kube-api-access-q88h5\") pod \"6ca9be16-8764-422c-b76c-d11ebd21f18c\" (UID: \"6ca9be16-8764-422c-b76c-d11ebd21f18c\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878190 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d6315197-c608-495e-8807-4fc8ed570916-clustermesh-secrets\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878221 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-run\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878257 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-k8ftm\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-kube-api-access-k8ftm\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878287 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-bpf-maps\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878320 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-net\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.878892 kubelet[2464]: I1002 20:18:15.878348 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-etc-cni-netd\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.879229 kubelet[2464]: I1002 20:18:15.878377 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-cgroup\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.879229 kubelet[2464]: I1002 20:18:15.878410 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6315197-c608-495e-8807-4fc8ed570916-cilium-config-path\") pod \"d6315197-c608-495e-8807-4fc8ed570916\" (UID: \"d6315197-c608-495e-8807-4fc8ed570916\") " Oct 2 20:18:15.879229 kubelet[2464]: W1002 20:18:15.878661 2464 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d6315197-c608-495e-8807-4fc8ed570916/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:18:15.882588 kubelet[2464]: I1002 20:18:15.881714 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d6315197-c608-495e-8807-4fc8ed570916-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:18:15.882588 kubelet[2464]: I1002 20:18:15.882050 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882588 kubelet[2464]: I1002 20:18:15.882327 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882588 kubelet[2464]: I1002 20:18:15.882393 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882588 kubelet[2464]: I1002 20:18:15.882418 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882990 kubelet[2464]: I1002 20:18:15.882442 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882990 kubelet[2464]: I1002 20:18:15.882469 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cni-path" (OuterVolumeSpecName: "cni-path") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882990 kubelet[2464]: I1002 20:18:15.882491 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.882990 kubelet[2464]: W1002 20:18:15.882716 2464 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/6ca9be16-8764-422c-b76c-d11ebd21f18c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:18:15.886166 kubelet[2464]: I1002 20:18:15.886126 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/6ca9be16-8764-422c-b76c-d11ebd21f18c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "6ca9be16-8764-422c-b76c-d11ebd21f18c" (UID: "6ca9be16-8764-422c-b76c-d11ebd21f18c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:18:15.886283 kubelet[2464]: I1002 20:18:15.886186 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.886283 kubelet[2464]: I1002 20:18:15.886215 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.886283 kubelet[2464]: I1002 20:18:15.886244 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-hostproc" (OuterVolumeSpecName: "hostproc") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:15.886941 kubelet[2464]: I1002 20:18:15.886912 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6ca9be16-8764-422c-b76c-d11ebd21f18c-kube-api-access-q88h5" (OuterVolumeSpecName: "kube-api-access-q88h5") pod "6ca9be16-8764-422c-b76c-d11ebd21f18c" (UID: "6ca9be16-8764-422c-b76c-d11ebd21f18c"). InnerVolumeSpecName "kube-api-access-q88h5". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:15.889411 kubelet[2464]: I1002 20:18:15.889387 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:15.889883 kubelet[2464]: I1002 20:18:15.889858 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d6315197-c608-495e-8807-4fc8ed570916-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:18:15.891231 kubelet[2464]: I1002 20:18:15.891203 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-kube-api-access-k8ftm" (OuterVolumeSpecName: "kube-api-access-k8ftm") pod "d6315197-c608-495e-8807-4fc8ed570916" (UID: "d6315197-c608-495e-8807-4fc8ed570916"). InnerVolumeSpecName "kube-api-access-k8ftm". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:15.979137 kubelet[2464]: I1002 20:18:15.979109 2464 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979137 kubelet[2464]: I1002 20:18:15.979139 2464 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cni-path\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979153 2464 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-lib-modules\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979168 2464 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d6315197-c608-495e-8807-4fc8ed570916-clustermesh-secrets\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979180 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-run\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979192 2464 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-hostproc\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979208 2464 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-q88h5\" (UniqueName: \"kubernetes.io/projected/6ca9be16-8764-422c-b76c-d11ebd21f18c-kube-api-access-q88h5\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979221 2464 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-k8ftm\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-kube-api-access-k8ftm\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979236 2464 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-bpf-maps\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979338 kubelet[2464]: I1002 20:18:15.979250 2464 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-host-proc-sys-net\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979265 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d6315197-c608-495e-8807-4fc8ed570916-cilium-config-path\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979281 2464 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-etc-cni-netd\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979294 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-cilium-cgroup\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979310 2464 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d6315197-c608-495e-8807-4fc8ed570916-hubble-tls\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979324 2464 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d6315197-c608-495e-8807-4fc8ed570916-xtables-lock\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:15.979552 kubelet[2464]: I1002 20:18:15.979338 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/6ca9be16-8764-422c-b76c-d11ebd21f18c-cilium-config-path\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:18:16.069155 kubelet[2464]: I1002 20:18:16.069125 2464 scope.go:115] "RemoveContainer" containerID="b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183" Oct 2 20:18:16.073333 systemd[1]: Removed slice kubepods-besteffort-pod6ca9be16_8764_422c_b76c_d11ebd21f18c.slice. Oct 2 20:18:16.074658 env[1328]: time="2023-10-02T20:18:16.074619847Z" level=info msg="RemoveContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\"" Oct 2 20:18:16.078603 systemd[1]: Removed slice kubepods-burstable-podd6315197_c608_495e_8807_4fc8ed570916.slice. Oct 2 20:18:16.086011 env[1328]: time="2023-10-02T20:18:16.085979225Z" level=info msg="RemoveContainer for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" returns successfully" Oct 2 20:18:16.087046 kubelet[2464]: I1002 20:18:16.086366 2464 scope.go:115] "RemoveContainer" containerID="b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183" Oct 2 20:18:16.087046 kubelet[2464]: E1002 20:18:16.086709 2464 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\": not found" containerID="b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183" Oct 2 20:18:16.087046 kubelet[2464]: I1002 20:18:16.086829 2464 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183} err="failed to get container status \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\": rpc error: code = NotFound desc = an error occurred when try to find container \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\": not found" Oct 2 20:18:16.087046 kubelet[2464]: I1002 20:18:16.086845 2464 scope.go:115] "RemoveContainer" containerID="3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c" Oct 2 20:18:16.087378 env[1328]: time="2023-10-02T20:18:16.086534633Z" level=error msg="ContainerStatus for \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"b4eb8853fa6024d1a4653275ebff6d7badaf289144eeb22b84a107fc059d2183\": not found" Oct 2 20:18:16.087841 env[1328]: time="2023-10-02T20:18:16.087783453Z" level=info msg="RemoveContainer for \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\"" Oct 2 20:18:16.098838 env[1328]: time="2023-10-02T20:18:16.098757724Z" level=info msg="RemoveContainer for \"3b8d6f05ebc96f6d9b6193c7791d139b3fda5511bb4dcc9c1731f387c5ab7f2c\" returns successfully" Oct 2 20:18:16.570572 systemd[1]: var-lib-kubelet-pods-6ca9be16\x2d8764\x2d422c\x2db76c\x2dd11ebd21f18c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dq88h5.mount: Deactivated successfully. Oct 2 20:18:16.571023 systemd[1]: var-lib-kubelet-pods-d6315197\x2dc608\x2d495e\x2d8807\x2d4fc8ed570916-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dk8ftm.mount: Deactivated successfully. Oct 2 20:18:16.571408 systemd[1]: var-lib-kubelet-pods-d6315197\x2dc608\x2d495e\x2d8807\x2d4fc8ed570916-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:18:16.571522 systemd[1]: var-lib-kubelet-pods-d6315197\x2dc608\x2d495e\x2d8807\x2d4fc8ed570916-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:18:17.291420 kubelet[2464]: I1002 20:18:17.291375 2464 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=6ca9be16-8764-422c-b76c-d11ebd21f18c path="/var/lib/kubelet/pods/6ca9be16-8764-422c-b76c-d11ebd21f18c/volumes" Oct 2 20:18:17.292095 kubelet[2464]: I1002 20:18:17.292073 2464 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=d6315197-c608-495e-8807-4fc8ed570916 path="/var/lib/kubelet/pods/d6315197-c608-495e-8807-4fc8ed570916/volumes" Oct 2 20:18:17.631831 sshd[3429]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:17.641709 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:18:17.641817 kernel: audit: type=1106 audit(1696277897.631:1363): pid=3429 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.631000 audit[3429]: USER_END pid=3429 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.638430 systemd[1]: sshd@28-10.200.8.18:22-10.200.12.6:60946.service: Deactivated successfully. Oct 2 20:18:17.641234 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:18:17.642722 systemd-logind[1313]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:18:17.643776 systemd-logind[1313]: Removed session 31. Oct 2 20:18:17.631000 audit[3429]: CRED_DISP pid=3429 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.682607 kernel: audit: type=1104 audit(1696277897.631:1364): pid=3429 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.682930 kernel: audit: type=1131 audit(1696277897.636:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.18:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:17.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.18:22-10.200.12.6:60946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:17.843896 systemd[1]: Started sshd@29-10.200.8.18:22-10.200.12.6:44100.service. Oct 2 20:18:17.861951 kernel: audit: type=1130 audit(1696277897.842:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.18:22-10.200.12.6:44100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:17.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.18:22-10.200.12.6:44100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:18.457798 kubelet[2464]: E1002 20:18:18.457764 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:18.617000 audit[3542]: USER_ACCT pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.638522 sshd[3542]: Accepted publickey for core from 10.200.12.6 port 44100 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:18.638888 kernel: audit: type=1101 audit(1696277898.617:1367): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.638941 sshd[3542]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:18.637000 audit[3542]: CRED_ACQ pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.644010 systemd[1]: Started session-32.scope. Oct 2 20:18:18.645251 systemd-logind[1313]: New session 32 of user core. Oct 2 20:18:18.655819 kernel: audit: type=1103 audit(1696277898.637:1368): pid=3542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.655886 kernel: audit: type=1006 audit(1696277898.637:1369): pid=3542 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:18:18.637000 audit[3542]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc633007a0 a2=3 a3=0 items=0 ppid=1 pid=3542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:18.666759 kernel: audit: type=1300 audit(1696277898.637:1369): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc633007a0 a2=3 a3=0 items=0 ppid=1 pid=3542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:18.637000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:18.689488 kernel: audit: type=1327 audit(1696277898.637:1369): proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:18.689551 kernel: audit: type=1105 audit(1696277898.648:1370): pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.648000 audit[3542]: USER_START pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:18.650000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:19.447467 kubelet[2464]: I1002 20:18:19.447420 2464 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:18:19.447810 kubelet[2464]: E1002 20:18:19.447787 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448025 kubelet[2464]: E1002 20:18:19.448010 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448143 kubelet[2464]: E1002 20:18:19.448131 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448246 kubelet[2464]: E1002 20:18:19.448236 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="6ca9be16-8764-422c-b76c-d11ebd21f18c" containerName="cilium-operator" Oct 2 20:18:19.448339 kubelet[2464]: E1002 20:18:19.448329 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448426 kubelet[2464]: E1002 20:18:19.448417 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448511 kubelet[2464]: E1002 20:18:19.448503 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448624 kubelet[2464]: I1002 20:18:19.448612 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448708 kubelet[2464]: I1002 20:18:19.448699 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448826 kubelet[2464]: I1002 20:18:19.448814 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.448928 kubelet[2464]: I1002 20:18:19.448919 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="6ca9be16-8764-422c-b76c-d11ebd21f18c" containerName="cilium-operator" Oct 2 20:18:19.449006 kubelet[2464]: I1002 20:18:19.448998 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.449108 kubelet[2464]: E1002 20:18:19.449098 2464 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.449226 kubelet[2464]: I1002 20:18:19.449216 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.449309 kubelet[2464]: I1002 20:18:19.449302 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.449388 kubelet[2464]: I1002 20:18:19.449380 2464 memory_manager.go:346] "RemoveStaleState removing state" podUID="d6315197-c608-495e-8807-4fc8ed570916" containerName="mount-cgroup" Oct 2 20:18:19.456725 systemd[1]: Created slice kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice. Oct 2 20:18:19.467637 kubelet[2464]: W1002 20:18:19.467608 2464 reflector.go:424] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.467977 kubelet[2464]: E1002 20:18:19.467642 2464 reflector.go:140] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.467977 kubelet[2464]: W1002 20:18:19.467850 2464 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.467977 kubelet[2464]: E1002 20:18:19.467879 2464 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.468122 kubelet[2464]: W1002 20:18:19.468011 2464 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.468122 kubelet[2464]: E1002 20:18:19.468030 2464 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.476985 kubelet[2464]: W1002 20:18:19.476953 2464 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.476985 kubelet[2464]: E1002 20:18:19.476989 2464 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ci-3510.3.0-a-7019f225b0" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7019f225b0' and this object Oct 2 20:18:19.499063 kubelet[2464]: I1002 20:18:19.499030 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-etc-cni-netd\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499215 kubelet[2464]: I1002 20:18:19.499111 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-kernel\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499215 kubelet[2464]: I1002 20:18:19.499143 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-hubble-tls\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499215 kubelet[2464]: I1002 20:18:19.499172 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-net\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499215 kubelet[2464]: I1002 20:18:19.499207 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-run\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499236 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-xtables-lock\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499292 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499320 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499354 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-hostproc\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499380 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-bpf-maps\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499461 kubelet[2464]: I1002 20:18:19.499409 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-cgroup\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499710 kubelet[2464]: I1002 20:18:19.499437 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cni-path\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499710 kubelet[2464]: I1002 20:18:19.499464 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-lib-modules\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499710 kubelet[2464]: I1002 20:18:19.499493 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:19.499710 kubelet[2464]: I1002 20:18:19.499523 2464 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vwmwm\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-kube-api-access-vwmwm\") pod \"cilium-4922d\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " pod="kube-system/cilium-4922d" Oct 2 20:18:20.601066 kubelet[2464]: E1002 20:18:20.600983 2464 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:20.601784 kubelet[2464]: E1002 20:18:20.601198 2464 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets podName:966c630a-546f-40fe-9449-7cdee2103e5b nodeName:}" failed. No retries permitted until 2023-10-02 20:18:21.101137506 +0000 UTC m=+377.988242952 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets") pod "cilium-4922d" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:20.601942 kubelet[2464]: E1002 20:18:20.601893 2464 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:20.602021 kubelet[2464]: E1002 20:18:20.601961 2464 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets podName:966c630a-546f-40fe-9449-7cdee2103e5b nodeName:}" failed. No retries permitted until 2023-10-02 20:18:21.101939918 +0000 UTC m=+377.989045264 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets") pod "cilium-4922d" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:20.602021 kubelet[2464]: E1002 20:18:20.601986 2464 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:18:20.602186 kubelet[2464]: E1002 20:18:20.602036 2464 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path podName:966c630a-546f-40fe-9449-7cdee2103e5b nodeName:}" failed. No retries permitted until 2023-10-02 20:18:21.102022619 +0000 UTC m=+377.989128065 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path") pod "cilium-4922d" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b") : failed to sync configmap cache: timed out waiting for the condition Oct 2 20:18:21.268686 env[1328]: time="2023-10-02T20:18:21.268628382Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4922d,Uid:966c630a-546f-40fe-9449-7cdee2103e5b,Namespace:kube-system,Attempt:0,}" Oct 2 20:18:21.325060 env[1328]: time="2023-10-02T20:18:21.324986638Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:18:21.325288 env[1328]: time="2023-10-02T20:18:21.325029139Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:18:21.325288 env[1328]: time="2023-10-02T20:18:21.325050039Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:18:21.325288 env[1328]: time="2023-10-02T20:18:21.325211341Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718 pid=3564 runtime=io.containerd.runc.v2 Oct 2 20:18:21.344370 systemd[1]: Started cri-containerd-d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718.scope. Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit: BPF prog-id=126 op=LOAD Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3564 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:21.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432306361646135333662323761373064373062323366613061393332 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3564 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:21.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432306361646135333662323761373064373062323366613061393332 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit: BPF prog-id=127 op=LOAD Oct 2 20:18:21.357000 audit[3573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001854a0 items=0 ppid=3564 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:21.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432306361646135333662323761373064373062323366613061393332 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.357000 audit: BPF prog-id=128 op=LOAD Oct 2 20:18:21.357000 audit[3573]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001854e8 items=0 ppid=3564 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:21.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432306361646135333662323761373064373062323366613061393332 Oct 2 20:18:21.357000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:18:21.357000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { perfmon } for pid=3573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit[3573]: AVC avc: denied { bpf } for pid=3573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:21.358000 audit: BPF prog-id=129 op=LOAD Oct 2 20:18:21.358000 audit[3573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001858f8 items=0 ppid=3564 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:21.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432306361646135333662323761373064373062323366613061393332 Oct 2 20:18:21.373327 env[1328]: time="2023-10-02T20:18:21.373289672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-4922d,Uid:966c630a-546f-40fe-9449-7cdee2103e5b,Namespace:kube-system,Attempt:0,} returns sandbox id \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\"" Oct 2 20:18:21.377439 env[1328]: time="2023-10-02T20:18:21.377177231Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:18:21.416520 env[1328]: time="2023-10-02T20:18:21.416413227Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" Oct 2 20:18:21.418030 env[1328]: time="2023-10-02T20:18:21.417096738Z" level=info msg="StartContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" Oct 2 20:18:21.436250 systemd[1]: Started cri-containerd-0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827.scope. Oct 2 20:18:21.447343 systemd[1]: cri-containerd-0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827.scope: Deactivated successfully. Oct 2 20:18:21.536610 env[1328]: time="2023-10-02T20:18:21.536467652Z" level=info msg="shim disconnected" id=0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827 Oct 2 20:18:21.536610 env[1328]: time="2023-10-02T20:18:21.536527153Z" level=warning msg="cleaning up after shim disconnected" id=0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827 namespace=k8s.io Oct 2 20:18:21.536610 env[1328]: time="2023-10-02T20:18:21.536542453Z" level=info msg="cleaning up dead shim" Oct 2 20:18:21.546820 env[1328]: time="2023-10-02T20:18:21.546774808Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3625 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:21Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:21.547089 env[1328]: time="2023-10-02T20:18:21.547027712Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:18:21.550816 env[1328]: time="2023-10-02T20:18:21.550775569Z" level=error msg="Failed to pipe stdout of container \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" error="reading from a closed fifo" Oct 2 20:18:21.553943 env[1328]: time="2023-10-02T20:18:21.553898617Z" level=error msg="Failed to pipe stderr of container \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" error="reading from a closed fifo" Oct 2 20:18:21.558243 env[1328]: time="2023-10-02T20:18:21.558196082Z" level=error msg="StartContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:21.558481 kubelet[2464]: E1002 20:18:21.558455 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827" Oct 2 20:18:21.558612 kubelet[2464]: E1002 20:18:21.558589 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:21.558612 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:21.558612 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:18:21.558612 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-vwmwm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:21.558870 kubelet[2464]: E1002 20:18:21.558638 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:22.091991 env[1328]: time="2023-10-02T20:18:22.091936086Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:18:22.115841 systemd[1]: run-containerd-runc-k8s.io-d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718-runc.KjTaf2.mount: Deactivated successfully. Oct 2 20:18:22.125705 env[1328]: time="2023-10-02T20:18:22.125667195Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" Oct 2 20:18:22.126804 env[1328]: time="2023-10-02T20:18:22.126770512Z" level=info msg="StartContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" Oct 2 20:18:22.152085 systemd[1]: run-containerd-runc-k8s.io-805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60-runc.tA7Rbr.mount: Deactivated successfully. Oct 2 20:18:22.156161 systemd[1]: Started cri-containerd-805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60.scope. Oct 2 20:18:22.166997 systemd[1]: cri-containerd-805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60.scope: Deactivated successfully. Oct 2 20:18:22.184315 env[1328]: time="2023-10-02T20:18:22.184257781Z" level=info msg="shim disconnected" id=805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60 Oct 2 20:18:22.184538 env[1328]: time="2023-10-02T20:18:22.184317382Z" level=warning msg="cleaning up after shim disconnected" id=805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60 namespace=k8s.io Oct 2 20:18:22.184538 env[1328]: time="2023-10-02T20:18:22.184331482Z" level=info msg="cleaning up dead shim" Oct 2 20:18:22.192352 env[1328]: time="2023-10-02T20:18:22.192264002Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:22Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3662 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:22Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:22.192614 env[1328]: time="2023-10-02T20:18:22.192556406Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:18:22.192868 env[1328]: time="2023-10-02T20:18:22.192823410Z" level=error msg="Failed to pipe stdout of container \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" error="reading from a closed fifo" Oct 2 20:18:22.193829 env[1328]: time="2023-10-02T20:18:22.193791325Z" level=error msg="Failed to pipe stderr of container \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" error="reading from a closed fifo" Oct 2 20:18:22.198237 env[1328]: time="2023-10-02T20:18:22.198186792Z" level=error msg="StartContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:22.198503 kubelet[2464]: E1002 20:18:22.198464 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60" Oct 2 20:18:22.198995 kubelet[2464]: E1002 20:18:22.198616 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:22.198995 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:22.198995 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:18:22.198995 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-vwmwm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:22.199219 kubelet[2464]: E1002 20:18:22.198679 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:23.091841 kubelet[2464]: I1002 20:18:23.091795 2464 scope.go:115] "RemoveContainer" containerID="0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827" Oct 2 20:18:23.092288 kubelet[2464]: I1002 20:18:23.092264 2464 scope.go:115] "RemoveContainer" containerID="0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827" Oct 2 20:18:23.094079 env[1328]: time="2023-10-02T20:18:23.094035625Z" level=info msg="RemoveContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" Oct 2 20:18:23.095049 env[1328]: time="2023-10-02T20:18:23.095016440Z" level=info msg="RemoveContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\"" Oct 2 20:18:23.095328 env[1328]: time="2023-10-02T20:18:23.095291744Z" level=error msg="RemoveContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\" failed" error="failed to set removing state for container \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\": container is already in removing state" Oct 2 20:18:23.095628 kubelet[2464]: E1002 20:18:23.095610 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\": container is already in removing state" containerID="0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827" Oct 2 20:18:23.095800 kubelet[2464]: E1002 20:18:23.095774 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827": container is already in removing state; Skipping pod "cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)" Oct 2 20:18:23.096336 kubelet[2464]: E1002 20:18:23.096316 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:23.105309 env[1328]: time="2023-10-02T20:18:23.105278694Z" level=info msg="RemoveContainer for \"0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827\" returns successfully" Oct 2 20:18:23.115725 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60-rootfs.mount: Deactivated successfully. Oct 2 20:18:23.459373 kubelet[2464]: E1002 20:18:23.459271 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:24.095013 kubelet[2464]: E1002 20:18:24.094982 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:24.643703 kubelet[2464]: W1002 20:18:24.643651 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice/cri-containerd-0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827.scope WatchSource:0}: container "0b4db458261c7b9c7be5e3f801f372825a66c7325eb03f4e0bd83e1e72b00827" in namespace "k8s.io": not found Oct 2 20:18:27.750009 kubelet[2464]: W1002 20:18:27.749960 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice/cri-containerd-805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60.scope WatchSource:0}: task 805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60 not found: not found Oct 2 20:18:28.460866 kubelet[2464]: E1002 20:18:28.460828 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:33.462045 kubelet[2464]: E1002 20:18:33.462005 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:35.291785 env[1328]: time="2023-10-02T20:18:35.291717638Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:18:35.329139 env[1328]: time="2023-10-02T20:18:35.329090366Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" Oct 2 20:18:35.330003 env[1328]: time="2023-10-02T20:18:35.329969979Z" level=info msg="StartContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" Oct 2 20:18:35.360597 systemd[1]: run-containerd-runc-k8s.io-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016-runc.XYmrnT.mount: Deactivated successfully. Oct 2 20:18:35.366194 systemd[1]: Started cri-containerd-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016.scope. Oct 2 20:18:35.374809 systemd[1]: cri-containerd-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016.scope: Deactivated successfully. Oct 2 20:18:35.375111 systemd[1]: Stopped cri-containerd-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016.scope. Oct 2 20:18:35.407543 env[1328]: time="2023-10-02T20:18:35.407469973Z" level=info msg="shim disconnected" id=a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016 Oct 2 20:18:35.407886 env[1328]: time="2023-10-02T20:18:35.407854778Z" level=warning msg="cleaning up after shim disconnected" id=a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016 namespace=k8s.io Oct 2 20:18:35.407995 env[1328]: time="2023-10-02T20:18:35.407980280Z" level=info msg="cleaning up dead shim" Oct 2 20:18:35.422172 env[1328]: time="2023-10-02T20:18:35.422126880Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3699 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:35.422582 env[1328]: time="2023-10-02T20:18:35.422500885Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:18:35.422820 env[1328]: time="2023-10-02T20:18:35.422781789Z" level=error msg="Failed to pipe stdout of container \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" error="reading from a closed fifo" Oct 2 20:18:35.424819 env[1328]: time="2023-10-02T20:18:35.424780217Z" level=error msg="Failed to pipe stderr of container \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" error="reading from a closed fifo" Oct 2 20:18:35.432520 env[1328]: time="2023-10-02T20:18:35.432479126Z" level=error msg="StartContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:35.432768 kubelet[2464]: E1002 20:18:35.432727 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016" Oct 2 20:18:35.433140 kubelet[2464]: E1002 20:18:35.432877 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:35.433140 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:35.433140 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:18:35.433140 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-vwmwm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:35.433365 kubelet[2464]: E1002 20:18:35.432926 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:36.124971 kubelet[2464]: I1002 20:18:36.124939 2464 scope.go:115] "RemoveContainer" containerID="805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60" Oct 2 20:18:36.125312 kubelet[2464]: I1002 20:18:36.125287 2464 scope.go:115] "RemoveContainer" containerID="805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60" Oct 2 20:18:36.126721 env[1328]: time="2023-10-02T20:18:36.126670519Z" level=info msg="RemoveContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" Oct 2 20:18:36.127054 env[1328]: time="2023-10-02T20:18:36.127021124Z" level=info msg="RemoveContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\"" Oct 2 20:18:36.127144 env[1328]: time="2023-10-02T20:18:36.127103125Z" level=error msg="RemoveContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\" failed" error="failed to set removing state for container \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\": container is already in removing state" Oct 2 20:18:36.127257 kubelet[2464]: E1002 20:18:36.127239 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\": container is already in removing state" containerID="805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60" Oct 2 20:18:36.127340 kubelet[2464]: E1002 20:18:36.127275 2464 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60": container is already in removing state; Skipping pod "cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)" Oct 2 20:18:36.127957 kubelet[2464]: E1002 20:18:36.127617 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:36.137003 env[1328]: time="2023-10-02T20:18:36.136961064Z" level=info msg="RemoveContainer for \"805dc0f5d87f1795884280de93de27806b29412bd1933b26d5510501aa08ae60\" returns successfully" Oct 2 20:18:36.315144 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016-rootfs.mount: Deactivated successfully. Oct 2 20:18:38.463030 kubelet[2464]: E1002 20:18:38.462993 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:38.514133 kubelet[2464]: W1002 20:18:38.514057 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice/cri-containerd-a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016.scope WatchSource:0}: task a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016 not found: not found Oct 2 20:18:43.464047 kubelet[2464]: E1002 20:18:43.464011 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:48.288850 kubelet[2464]: E1002 20:18:48.288473 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:48.465901 kubelet[2464]: E1002 20:18:48.465865 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:53.466725 kubelet[2464]: E1002 20:18:53.466692 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:58.468571 kubelet[2464]: E1002 20:18:58.468532 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:58.599000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.604206 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:18:58.604331 kernel: audit: type=1400 audit(1696277938.599:1390): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.599000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123a8c0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:58.623759 kernel: audit: type=1300 audit(1696277938.599:1390): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123a8c0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:58.599000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.663466 kernel: audit: type=1327 audit(1696277938.599:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.663607 kernel: audit: type=1400 audit(1696277938.599:1391): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.599000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.599000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00171e300 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:58.703090 kernel: audit: type=1300 audit(1696277938.599:1391): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00171e300 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:18:58.703231 kernel: audit: type=1327 audit(1696277938.599:1391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.599000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:59.291504 env[1328]: time="2023-10-02T20:18:59.291408575Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:18:59.344092 env[1328]: time="2023-10-02T20:18:59.344033334Z" level=info msg="CreateContainer within sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\"" Oct 2 20:18:59.345999 env[1328]: time="2023-10-02T20:18:59.344845045Z" level=info msg="StartContainer for \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\"" Oct 2 20:18:59.374938 systemd[1]: run-containerd-runc-k8s.io-b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be-runc.PSvj1g.mount: Deactivated successfully. Oct 2 20:18:59.376824 systemd[1]: Started cri-containerd-b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be.scope. Oct 2 20:18:59.388960 systemd[1]: cri-containerd-b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be.scope: Deactivated successfully. Oct 2 20:18:59.422884 env[1328]: time="2023-10-02T20:18:59.422826022Z" level=info msg="shim disconnected" id=b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be Oct 2 20:18:59.422884 env[1328]: time="2023-10-02T20:18:59.422884422Z" level=warning msg="cleaning up after shim disconnected" id=b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be namespace=k8s.io Oct 2 20:18:59.422884 env[1328]: time="2023-10-02T20:18:59.422895723Z" level=info msg="cleaning up dead shim" Oct 2 20:18:59.434338 env[1328]: time="2023-10-02T20:18:59.434286965Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3741 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:59Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:59.437708 env[1328]: time="2023-10-02T20:18:59.435096376Z" level=error msg="Failed to pipe stderr of container \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\"" error="reading from a closed fifo" Oct 2 20:18:59.437708 env[1328]: time="2023-10-02T20:18:59.434700571Z" level=error msg="copy shim log" error="read /proc/self/fd/40: file already closed" Oct 2 20:18:59.438023 env[1328]: time="2023-10-02T20:18:59.437980412Z" level=error msg="Failed to pipe stdout of container \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\"" error="reading from a closed fifo" Oct 2 20:18:59.442663 env[1328]: time="2023-10-02T20:18:59.442623470Z" level=error msg="StartContainer for \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:59.443076 kubelet[2464]: E1002 20:18:59.442911 2464 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be" Oct 2 20:18:59.443076 kubelet[2464]: E1002 20:18:59.443013 2464 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:59.443076 kubelet[2464]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:59.443076 kubelet[2464]: rm /hostbin/cilium-mount Oct 2 20:18:59.443511 kubelet[2464]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-vwmwm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:59.443789 kubelet[2464]: E1002 20:18:59.443053 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:18:59.448000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.448000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.485812 kernel: audit: type=1400 audit(1696277939.448:1392): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.485929 kernel: audit: type=1400 audit(1696277939.448:1393): avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7144 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.486014 kernel: audit: type=1300 audit(1696277939.448:1393): arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00acb2b10 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.448000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00acb2b10 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.524790 kernel: audit: type=1327 audit(1696277939.448:1393): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.448000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00acb2ae0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.468000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.468000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c003f249c0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.468000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.487000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.487000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c003f34480 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.487000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.487000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.487000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00adb4930 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.487000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:59.487000 audit[2288]: AVC avc: denied { watch } for pid=2288 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7153 scontext=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:59.487000 audit[2288]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00adb49c0 a2=fc6 a3=0 items=0 ppid=2162 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c14,c747 key=(null) Oct 2 20:18:59.487000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:00.170779 kubelet[2464]: I1002 20:19:00.170721 2464 scope.go:115] "RemoveContainer" containerID="a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016" Oct 2 20:19:00.171304 kubelet[2464]: I1002 20:19:00.171241 2464 scope.go:115] "RemoveContainer" containerID="a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016" Oct 2 20:19:00.173070 env[1328]: time="2023-10-02T20:19:00.173026412Z" level=info msg="RemoveContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" Oct 2 20:19:00.173573 env[1328]: time="2023-10-02T20:19:00.173535118Z" level=info msg="RemoveContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\"" Oct 2 20:19:00.174133 env[1328]: time="2023-10-02T20:19:00.174055324Z" level=error msg="RemoveContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\" failed" error="failed to set removing state for container \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\": container is already in removing state" Oct 2 20:19:00.174310 kubelet[2464]: E1002 20:19:00.174258 2464 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\": container is already in removing state" containerID="a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016" Oct 2 20:19:00.174399 kubelet[2464]: I1002 20:19:00.174334 2464 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016} err="rpc error: code = Unknown desc = failed to set removing state for container \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\": container is already in removing state" Oct 2 20:19:00.184352 env[1328]: time="2023-10-02T20:19:00.184311352Z" level=info msg="RemoveContainer for \"a2361d6fa236cfd2dd5addaf2d53852a92f766744ff83e5a6e47ba9c2796e016\" returns successfully" Oct 2 20:19:00.184912 kubelet[2464]: E1002 20:19:00.184886 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:19:00.321621 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be-rootfs.mount: Deactivated successfully. Oct 2 20:19:02.528865 kubelet[2464]: W1002 20:19:02.528806 2464 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice/cri-containerd-b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be.scope WatchSource:0}: task b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be not found: not found Oct 2 20:19:03.277004 env[1328]: time="2023-10-02T20:19:03.276959691Z" level=info msg="StopPodSandbox for \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\"" Oct 2 20:19:03.277526 env[1328]: time="2023-10-02T20:19:03.277069792Z" level=info msg="TearDown network for sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" successfully" Oct 2 20:19:03.277526 env[1328]: time="2023-10-02T20:19:03.277117393Z" level=info msg="StopPodSandbox for \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" returns successfully" Oct 2 20:19:03.277877 env[1328]: time="2023-10-02T20:19:03.277533998Z" level=info msg="RemovePodSandbox for \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\"" Oct 2 20:19:03.277877 env[1328]: time="2023-10-02T20:19:03.277570298Z" level=info msg="Forcibly stopping sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\"" Oct 2 20:19:03.277987 env[1328]: time="2023-10-02T20:19:03.277864902Z" level=info msg="TearDown network for sandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" successfully" Oct 2 20:19:03.292194 env[1328]: time="2023-10-02T20:19:03.292153078Z" level=info msg="RemovePodSandbox \"315b331b0e5946cb571a5125e006c163a21818a86d19a1adb2e3dce897218452\" returns successfully" Oct 2 20:19:03.292610 env[1328]: time="2023-10-02T20:19:03.292581983Z" level=info msg="StopPodSandbox for \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\"" Oct 2 20:19:03.292713 env[1328]: time="2023-10-02T20:19:03.292659084Z" level=info msg="TearDown network for sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" successfully" Oct 2 20:19:03.292713 env[1328]: time="2023-10-02T20:19:03.292698584Z" level=info msg="StopPodSandbox for \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" returns successfully" Oct 2 20:19:03.293034 env[1328]: time="2023-10-02T20:19:03.293011788Z" level=info msg="RemovePodSandbox for \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\"" Oct 2 20:19:03.293175 env[1328]: time="2023-10-02T20:19:03.293138590Z" level=info msg="Forcibly stopping sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\"" Oct 2 20:19:03.293247 env[1328]: time="2023-10-02T20:19:03.293213091Z" level=info msg="TearDown network for sandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" successfully" Oct 2 20:19:03.303176 env[1328]: time="2023-10-02T20:19:03.303133113Z" level=info msg="RemovePodSandbox \"3b6eb31c85aac6da88f1c26b8219c64b41689275da1fdcf7ee4e8413ccea009b\" returns successfully" Oct 2 20:19:03.469889 kubelet[2464]: E1002 20:19:03.469860 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:03.936000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.941268 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:19:03.941377 kernel: audit: type=1400 audit(1696277943.936:1398): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.936000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123ba80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:03.979912 kernel: audit: type=1300 audit(1696277943.936:1398): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123ba80 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:03.980056 kernel: audit: type=1327 audit(1696277943.936:1398): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:03.936000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:03.998091 kernel: audit: type=1400 audit(1696277943.957:1399): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.957000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.957000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123baa0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:04.013899 kernel: audit: type=1300 audit(1696277943.957:1399): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123baa0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:03.957000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:04.055414 kernel: audit: type=1327 audit(1696277943.957:1399): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:04.056462 kernel: audit: type=1400 audit(1696277943.958:1400): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.958000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.958000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123bbc0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:04.100701 kernel: audit: type=1300 audit(1696277943.958:1400): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123bbc0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:04.100897 kernel: audit: type=1327 audit(1696277943.958:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:03.958000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:03.958000 audit[2334]: AVC avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:04.142852 kernel: audit: type=1400 audit(1696277943.958:1401): avc: denied { watch } for pid=2334 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:03.958000 audit[2334]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00123bbe0 a2=fc6 a3=0 items=0 ppid=2203 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:03.958000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:08.471297 kubelet[2464]: E1002 20:19:08.471254 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:11.288578 kubelet[2464]: E1002 20:19:11.288532 2464 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-4922d_kube-system(966c630a-546f-40fe-9449-7cdee2103e5b)\"" pod="kube-system/cilium-4922d" podUID=966c630a-546f-40fe-9449-7cdee2103e5b Oct 2 20:19:13.472263 kubelet[2464]: E1002 20:19:13.472229 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:18.473680 kubelet[2464]: E1002 20:19:18.473645 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:20.676385 env[1328]: time="2023-10-02T20:19:20.676334247Z" level=info msg="StopPodSandbox for \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\"" Oct 2 20:19:20.677219 env[1328]: time="2023-10-02T20:19:20.676422248Z" level=info msg="Container to stop \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:19:20.679025 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718-shm.mount: Deactivated successfully. Oct 2 20:19:20.701584 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:19:20.701719 kernel: audit: type=1334 audit(1696277960.687:1402): prog-id=126 op=UNLOAD Oct 2 20:19:20.687000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:19:20.688286 systemd[1]: cri-containerd-d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718.scope: Deactivated successfully. Oct 2 20:19:20.702000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:19:20.710758 kernel: audit: type=1334 audit(1696277960.702:1403): prog-id=129 op=UNLOAD Oct 2 20:19:20.738094 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718-rootfs.mount: Deactivated successfully. Oct 2 20:19:20.805445 env[1328]: time="2023-10-02T20:19:20.805394714Z" level=info msg="shim disconnected" id=d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718 Oct 2 20:19:20.805729 env[1328]: time="2023-10-02T20:19:20.805707117Z" level=warning msg="cleaning up after shim disconnected" id=d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718 namespace=k8s.io Oct 2 20:19:20.805856 env[1328]: time="2023-10-02T20:19:20.805838519Z" level=info msg="cleaning up dead shim" Oct 2 20:19:20.813899 env[1328]: time="2023-10-02T20:19:20.813861210Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3778 runtime=io.containerd.runc.v2\n" Oct 2 20:19:20.814189 env[1328]: time="2023-10-02T20:19:20.814155413Z" level=info msg="TearDown network for sandbox \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" successfully" Oct 2 20:19:20.814269 env[1328]: time="2023-10-02T20:19:20.814187414Z" level=info msg="StopPodSandbox for \"d20cada536b27a70d70b23fa0a93298fe4e864cf0474f48c7f0167348c695718\" returns successfully" Oct 2 20:19:20.839133 sshd[3542]: pam_unix(sshd:session): session closed for user core Oct 2 20:19:20.839000 audit[3542]: USER_END pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:20.841954 systemd[1]: sshd@29-10.200.8.18:22-10.200.12.6:44100.service: Deactivated successfully. Oct 2 20:19:20.842796 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:19:20.844201 systemd-logind[1313]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:19:20.845244 systemd-logind[1313]: Removed session 32. Oct 2 20:19:20.839000 audit[3542]: CRED_DISP pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:20.880677 kernel: audit: type=1106 audit(1696277960.839:1404): pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:20.881195 kernel: audit: type=1104 audit(1696277960.839:1405): pid=3542 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:20.881239 kernel: audit: type=1131 audit(1696277960.841:1406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.18:22-10.200.12.6:44100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:19:20.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.18:22-10.200.12.6:44100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962396 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-cgroup\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962446 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-hostproc\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962470 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-bpf-maps\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962491 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-lib-modules\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962513 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-run\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.963483 kubelet[2464]: I1002 20:19:20.962536 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-etc-cni-netd\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962570 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-hubble-tls\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962601 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962631 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962658 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cni-path\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962684 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-kernel\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964193 kubelet[2464]: I1002 20:19:20.962712 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964455 kubelet[2464]: I1002 20:19:20.962757 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-net\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964455 kubelet[2464]: I1002 20:19:20.962783 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-xtables-lock\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.964455 kubelet[2464]: I1002 20:19:20.962815 2464 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vwmwm\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-kube-api-access-vwmwm\") pod \"966c630a-546f-40fe-9449-7cdee2103e5b\" (UID: \"966c630a-546f-40fe-9449-7cdee2103e5b\") " Oct 2 20:19:20.965993 kubelet[2464]: W1002 20:19:20.964853 2464 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/966c630a-546f-40fe-9449-7cdee2103e5b/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:19:20.974211 kubelet[2464]: I1002 20:19:20.970676 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:19:20.974211 kubelet[2464]: I1002 20:19:20.970748 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cni-path" (OuterVolumeSpecName: "cni-path") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.974211 kubelet[2464]: I1002 20:19:20.970775 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.967984 systemd[1]: var-lib-kubelet-pods-966c630a\x2d546f\x2d40fe\x2d9449\x2d7cdee2103e5b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvwmwm.mount: Deactivated successfully. Oct 2 20:19:20.973036 systemd[1]: var-lib-kubelet-pods-966c630a\x2d546f\x2d40fe\x2d9449\x2d7cdee2103e5b-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:19:20.974687 kubelet[2464]: I1002 20:19:20.974658 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.974863 kubelet[2464]: I1002 20:19:20.974846 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-hostproc" (OuterVolumeSpecName: "hostproc") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.974985 kubelet[2464]: I1002 20:19:20.974969 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.975096 kubelet[2464]: I1002 20:19:20.975082 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.975210 kubelet[2464]: I1002 20:19:20.975196 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.975319 kubelet[2464]: I1002 20:19:20.975305 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.975591 kubelet[2464]: I1002 20:19:20.975566 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-kube-api-access-vwmwm" (OuterVolumeSpecName: "kube-api-access-vwmwm") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "kube-api-access-vwmwm". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:19:20.977297 systemd[1]: var-lib-kubelet-pods-966c630a\x2d546f\x2d40fe\x2d9449\x2d7cdee2103e5b-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:19:20.978410 kubelet[2464]: I1002 20:19:20.978385 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:19:20.978502 kubelet[2464]: I1002 20:19:20.978427 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.978502 kubelet[2464]: I1002 20:19:20.978451 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:20.978624 kubelet[2464]: I1002 20:19:20.978604 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:19:20.980682 kubelet[2464]: I1002 20:19:20.980658 2464 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "966c630a-546f-40fe-9449-7cdee2103e5b" (UID: "966c630a-546f-40fe-9449-7cdee2103e5b"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:19:21.064028 kubelet[2464]: I1002 20:19:21.063977 2464 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-clustermesh-secrets\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064028 kubelet[2464]: I1002 20:19:21.064019 2464 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-net\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064028 kubelet[2464]: I1002 20:19:21.064038 2464 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-xtables-lock\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064057 2464 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-vwmwm\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-kube-api-access-vwmwm\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064072 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-cgroup\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064086 2464 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-lib-modules\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064099 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-run\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064116 2464 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-hostproc\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064130 2464 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-bpf-maps\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064144 2464 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/966c630a-546f-40fe-9449-7cdee2103e5b-hubble-tls\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064334 kubelet[2464]: I1002 20:19:21.064157 2464 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-etc-cni-netd\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064568 kubelet[2464]: I1002 20:19:21.064172 2464 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-cni-path\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064568 kubelet[2464]: I1002 20:19:21.064189 2464 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/966c630a-546f-40fe-9449-7cdee2103e5b-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064568 kubelet[2464]: I1002 20:19:21.064205 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-config-path\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.064568 kubelet[2464]: I1002 20:19:21.064221 2464 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/966c630a-546f-40fe-9449-7cdee2103e5b-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-7019f225b0\" DevicePath \"\"" Oct 2 20:19:21.207702 kubelet[2464]: I1002 20:19:21.207661 2464 scope.go:115] "RemoveContainer" containerID="b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be" Oct 2 20:19:21.213300 systemd[1]: Removed slice kubepods-burstable-pod966c630a_546f_40fe_9449_7cdee2103e5b.slice. Oct 2 20:19:21.216021 env[1328]: time="2023-10-02T20:19:21.213280038Z" level=info msg="RemoveContainer for \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\"" Oct 2 20:19:21.225281 env[1328]: time="2023-10-02T20:19:21.225029571Z" level=info msg="RemoveContainer for \"b5bdc14d699dd7bd8729a54933c342d103674a6621953c95a391679e572a06be\" returns successfully" Oct 2 20:19:21.291956 kubelet[2464]: I1002 20:19:21.291921 2464 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=966c630a-546f-40fe-9449-7cdee2103e5b path="/var/lib/kubelet/pods/966c630a-546f-40fe-9449-7cdee2103e5b/volumes" Oct 2 20:19:21.679071 systemd[1]: var-lib-kubelet-pods-966c630a\x2d546f\x2d40fe\x2d9449\x2d7cdee2103e5b-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:19:23.474840 kubelet[2464]: E1002 20:19:23.474813 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:28.476208 kubelet[2464]: E1002 20:19:28.476166 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:33.476851 kubelet[2464]: E1002 20:19:33.476817 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:35.486069 systemd[1]: cri-containerd-dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0.scope: Deactivated successfully. Oct 2 20:19:35.486429 systemd[1]: cri-containerd-dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0.scope: Consumed 5.467s CPU time. Oct 2 20:19:35.488000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:19:35.488000 audit: BPF prog-id=100 op=UNLOAD Oct 2 20:19:35.501912 kernel: audit: type=1334 audit(1696277975.488:1407): prog-id=81 op=UNLOAD Oct 2 20:19:35.501972 kernel: audit: type=1334 audit(1696277975.488:1408): prog-id=100 op=UNLOAD Oct 2 20:19:35.517613 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0-rootfs.mount: Deactivated successfully. Oct 2 20:19:35.572015 env[1328]: time="2023-10-02T20:19:35.571966943Z" level=info msg="shim disconnected" id=dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0 Oct 2 20:19:35.572015 env[1328]: time="2023-10-02T20:19:35.572015344Z" level=warning msg="cleaning up after shim disconnected" id=dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0 namespace=k8s.io Oct 2 20:19:35.572524 env[1328]: time="2023-10-02T20:19:35.572026344Z" level=info msg="cleaning up dead shim" Oct 2 20:19:35.579830 env[1328]: time="2023-10-02T20:19:35.579795926Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3808 runtime=io.containerd.runc.v2\n" Oct 2 20:19:35.741938 systemd[1]: cri-containerd-607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b.scope: Deactivated successfully. Oct 2 20:19:35.742243 systemd[1]: cri-containerd-607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b.scope: Consumed 2.485s CPU time. Oct 2 20:19:35.743000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:19:35.748890 kubelet[2464]: E1002 20:19:35.748563 2464 controller.go:189] failed to update lease, error: rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.18:35216->10.200.8.10:2379: read: connection timed out Oct 2 20:19:35.743000 audit: BPF prog-id=91 op=UNLOAD Oct 2 20:19:35.757361 kernel: audit: type=1334 audit(1696277975.743:1409): prog-id=85 op=UNLOAD Oct 2 20:19:35.757452 kernel: audit: type=1334 audit(1696277975.743:1410): prog-id=91 op=UNLOAD Oct 2 20:19:35.771215 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b-rootfs.mount: Deactivated successfully. Oct 2 20:19:35.801358 env[1328]: time="2023-10-02T20:19:35.801308084Z" level=info msg="shim disconnected" id=607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b Oct 2 20:19:35.801574 env[1328]: time="2023-10-02T20:19:35.801361484Z" level=warning msg="cleaning up after shim disconnected" id=607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b namespace=k8s.io Oct 2 20:19:35.801574 env[1328]: time="2023-10-02T20:19:35.801373384Z" level=info msg="cleaning up dead shim" Oct 2 20:19:35.809401 env[1328]: time="2023-10-02T20:19:35.809366469Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3834 runtime=io.containerd.runc.v2\n" Oct 2 20:19:36.241503 kubelet[2464]: I1002 20:19:36.241463 2464 scope.go:115] "RemoveContainer" containerID="dafd2f7ca318431f75b0de004dcb87ba33b3d4d8906840d4850fd00188b3e2e0" Oct 2 20:19:36.244298 env[1328]: time="2023-10-02T20:19:36.244258086Z" level=info msg="CreateContainer within sandbox \"12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:19:36.244897 kubelet[2464]: I1002 20:19:36.244874 2464 scope.go:115] "RemoveContainer" containerID="607d7df84fe8ab82a859d3e9ec1895230e8dac717321437b961a0a6eddaf163b" Oct 2 20:19:36.246285 env[1328]: time="2023-10-02T20:19:36.246253808Z" level=info msg="CreateContainer within sandbox \"a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:19:36.279068 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1366885273.mount: Deactivated successfully. Oct 2 20:19:36.306597 env[1328]: time="2023-10-02T20:19:36.306558047Z" level=info msg="CreateContainer within sandbox \"12a3828f0730b16e95c059d8799cfd1b4d034d0016c06b9c8c695eee9856ee92\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"61f1f802cf0f26c4368f28d45ad85090d5e92dfbaf5aa4297be0b47adea461b1\"" Oct 2 20:19:36.307051 env[1328]: time="2023-10-02T20:19:36.307024752Z" level=info msg="StartContainer for \"61f1f802cf0f26c4368f28d45ad85090d5e92dfbaf5aa4297be0b47adea461b1\"" Oct 2 20:19:36.310690 env[1328]: time="2023-10-02T20:19:36.310644990Z" level=info msg="CreateContainer within sandbox \"a0632533a41a33577f30414bae3e4d037ebffbffbc4db41aee840f2e61cd7a9c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"3e0bddabfb077a9c7e998c5481896e4f6891c3d375f8d4461f7179ef759e79c1\"" Oct 2 20:19:36.311145 env[1328]: time="2023-10-02T20:19:36.311117795Z" level=info msg="StartContainer for \"3e0bddabfb077a9c7e998c5481896e4f6891c3d375f8d4461f7179ef759e79c1\"" Oct 2 20:19:36.328096 systemd[1]: Started cri-containerd-61f1f802cf0f26c4368f28d45ad85090d5e92dfbaf5aa4297be0b47adea461b1.scope. Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.359844 kernel: audit: type=1400 audit(1696277976.343:1411): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.364332 systemd[1]: Started cri-containerd-3e0bddabfb077a9c7e998c5481896e4f6891c3d375f8d4461f7179ef759e79c1.scope. Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.399625 kernel: audit: type=1400 audit(1696277976.343:1412): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.399703 kernel: audit: type=1400 audit(1696277976.343:1413): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.399753 kernel: audit: type=1400 audit(1696277976.343:1414): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.427067 kernel: audit: type=1400 audit(1696277976.343:1415): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.428791 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit: BPF prog-id=130 op=LOAD Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2203 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631663166383032636630663236633433363866323864343561643835 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2203 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631663166383032636630663236633433363866323864343561643835 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit: BPF prog-id=131 op=LOAD Oct 2 20:19:36.358000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c0880 items=0 ppid=2203 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631663166383032636630663236633433363866323864343561643835 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit: BPF prog-id=132 op=LOAD Oct 2 20:19:36.358000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c08c8 items=0 ppid=2203 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631663166383032636630663236633433363866323864343561643835 Oct 2 20:19:36.358000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:19:36.358000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { perfmon } for pid=3854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit[3854]: AVC avc: denied { bpf } for pid=3854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.358000 audit: BPF prog-id=133 op=LOAD Oct 2 20:19:36.358000 audit[3854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c0cd8 items=0 ppid=2203 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631663166383032636630663236633433363866323864343561643835 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.431000 audit: BPF prog-id=134 op=LOAD Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2149 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365306264646162666230373761396337653939386335343831383936 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2149 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365306264646162666230373761396337653939386335343831383936 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit: BPF prog-id=135 op=LOAD Oct 2 20:19:36.432000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000354080 items=0 ppid=2149 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365306264646162666230373761396337653939386335343831383936 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit: BPF prog-id=136 op=LOAD Oct 2 20:19:36.432000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003540c8 items=0 ppid=2149 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365306264646162666230373761396337653939386335343831383936 Oct 2 20:19:36.432000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:19:36.432000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:36.432000 audit: BPF prog-id=137 op=LOAD Oct 2 20:19:36.432000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003544d8 items=0 ppid=2149 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:36.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365306264646162666230373761396337653939386335343831383936 Oct 2 20:19:36.470546 env[1328]: time="2023-10-02T20:19:36.470498784Z" level=info msg="StartContainer for \"61f1f802cf0f26c4368f28d45ad85090d5e92dfbaf5aa4297be0b47adea461b1\" returns successfully" Oct 2 20:19:36.484541 env[1328]: time="2023-10-02T20:19:36.484494132Z" level=info msg="StartContainer for \"3e0bddabfb077a9c7e998c5481896e4f6891c3d375f8d4461f7179ef759e79c1\" returns successfully" Oct 2 20:19:36.520324 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount658625941.mount: Deactivated successfully. Oct 2 20:19:37.402000 audit[3877]: AVC avc: denied { watch } for pid=3877 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7148 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:37.402000 audit[3877]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003d4d50 a2=fc6 a3=0 items=0 ppid=2203 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:37.402000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:37.403000 audit[3877]: AVC avc: denied { watch } for pid=3877 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6874 scontext=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:37.403000 audit[3877]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000058460 a2=fc6 a3=0 items=0 ppid=2203 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c117,c320 key=(null) Oct 2 20:19:37.403000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:38.478082 kubelet[2464]: E1002 20:19:38.478030 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:39.516073 kubelet[2464]: E1002 20:19:39.515940 2464 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-7019f225b0.178a63d35c376137", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-7019f225b0", UID:"496f51627045b051f5cb93e82d12f2fd", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7019f225b0"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 19, 29, 94795575, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 19, 29, 94795575, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.18:35008->10.200.8.10:2379: read: connection timed out' (will not retry!) Oct 2 20:19:43.478847 kubelet[2464]: E1002 20:19:43.478800 2464 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:45.749524 kubelet[2464]: E1002 20:19:45.749475 2464 controller.go:189] failed to update lease, error: Put "https://10.200.8.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7019f225b0?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)