Oct 2 20:09:46.039701 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:09:46.039731 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:46.039745 kernel: BIOS-provided physical RAM map: Oct 2 20:09:46.039756 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 20:09:46.039765 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 20:09:46.039855 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 20:09:46.039871 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 20:09:46.039882 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 20:09:46.039892 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 20:09:46.039903 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 20:09:46.039913 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 20:09:46.039924 kernel: printk: bootconsole [earlyser0] enabled Oct 2 20:09:46.039934 kernel: NX (Execute Disable) protection: active Oct 2 20:09:46.039945 kernel: efi: EFI v2.70 by Microsoft Oct 2 20:09:46.039961 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 20:09:46.039973 kernel: random: crng init done Oct 2 20:09:46.039985 kernel: SMBIOS 3.1.0 present. Oct 2 20:09:46.039997 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 20:09:46.040008 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 20:09:46.040020 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 20:09:46.040031 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 20:09:46.040042 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 20:09:46.040055 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 20:09:46.040067 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 20:09:46.040079 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 20:09:46.040091 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 20:09:46.040103 kernel: tsc: Detected 2593.908 MHz processor Oct 2 20:09:46.040115 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:09:46.040127 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:09:46.040139 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 20:09:46.040151 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:09:46.040163 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 20:09:46.040176 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 20:09:46.040188 kernel: Using GB pages for direct mapping Oct 2 20:09:46.040200 kernel: Secure boot disabled Oct 2 20:09:46.040212 kernel: ACPI: Early table checksum verification disabled Oct 2 20:09:46.040224 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 20:09:46.040235 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040246 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040259 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:09:46.040277 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 20:09:46.040290 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040303 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040315 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040328 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040340 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040355 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040368 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:09:46.040380 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 20:09:46.040393 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 20:09:46.040406 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 20:09:46.040418 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 20:09:46.040431 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 20:09:46.040444 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 20:09:46.040462 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 20:09:46.040475 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 20:09:46.040487 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 20:09:46.040501 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 20:09:46.040513 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:09:46.040526 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:09:46.040538 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 20:09:46.040551 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 20:09:46.040564 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 20:09:46.040579 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 20:09:46.040592 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 20:09:46.040605 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 20:09:46.040617 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 20:09:46.040630 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 20:09:46.040643 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 20:09:46.040656 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 20:09:46.040668 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 20:09:46.040681 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 20:09:46.040696 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 20:09:46.040708 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 20:09:46.040721 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 20:09:46.040734 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 20:09:46.040747 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 20:09:46.040760 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 20:09:46.042125 kernel: Zone ranges: Oct 2 20:09:46.042144 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:09:46.042158 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 20:09:46.042175 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:09:46.042188 kernel: Movable zone start for each node Oct 2 20:09:46.042201 kernel: Early memory node ranges Oct 2 20:09:46.042213 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 20:09:46.042226 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 20:09:46.042239 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 20:09:46.042251 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:09:46.042264 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 20:09:46.042277 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:09:46.042293 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 20:09:46.042305 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 20:09:46.042318 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 20:09:46.042331 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 20:09:46.042343 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:09:46.042356 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:09:46.042369 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:09:46.042382 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 20:09:46.042394 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:09:46.042409 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 20:09:46.042422 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 20:09:46.042435 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:09:46.042448 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:09:46.042461 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:09:46.042474 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:09:46.042486 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:09:46.042498 kernel: Hyper-V: PV spinlocks enabled Oct 2 20:09:46.042511 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:09:46.042526 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 20:09:46.042539 kernel: Policy zone: Normal Oct 2 20:09:46.042553 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:46.042566 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:09:46.042579 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 20:09:46.042592 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:09:46.042605 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:09:46.042618 kernel: Memory: 8081204K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 305996K reserved, 0K cma-reserved) Oct 2 20:09:46.042633 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:09:46.042646 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:09:46.042667 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:09:46.042682 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:09:46.042697 kernel: rcu: RCU event tracing is enabled. Oct 2 20:09:46.042711 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:09:46.042725 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:09:46.042738 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:09:46.042751 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:09:46.042765 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:09:46.042787 kernel: Using NULL legacy PIC Oct 2 20:09:46.042800 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 20:09:46.042812 kernel: Console: colour dummy device 80x25 Oct 2 20:09:46.042824 kernel: printk: console [tty1] enabled Oct 2 20:09:46.042836 kernel: printk: console [ttyS0] enabled Oct 2 20:09:46.042847 kernel: printk: bootconsole [earlyser0] disabled Oct 2 20:09:46.042860 kernel: ACPI: Core revision 20210730 Oct 2 20:09:46.042872 kernel: Failed to register legacy timer interrupt Oct 2 20:09:46.042879 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:09:46.042889 kernel: Hyper-V: Using IPI hypercalls Oct 2 20:09:46.042898 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593908) Oct 2 20:09:46.042907 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:09:46.042916 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:09:46.042926 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:09:46.042933 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:09:46.042940 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:09:46.042952 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:09:46.042959 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:09:46.042970 kernel: RETBleed: Vulnerable Oct 2 20:09:46.042977 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:09:46.042984 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:09:46.042998 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:09:46.043006 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:09:46.043015 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:09:46.043023 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:09:46.043030 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:09:46.043042 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:09:46.043050 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:09:46.043060 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:09:46.043067 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:09:46.043075 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 20:09:46.043085 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 20:09:46.043092 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 20:09:46.043102 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 20:09:46.043109 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:09:46.043117 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:09:46.043127 kernel: LSM: Security Framework initializing Oct 2 20:09:46.043134 kernel: SELinux: Initializing. Oct 2 20:09:46.043146 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:09:46.043153 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:09:46.043162 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:09:46.043171 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:09:46.043181 kernel: signal: max sigframe size: 3632 Oct 2 20:09:46.043189 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:09:46.043196 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:09:46.043207 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:09:46.043214 kernel: x86: Booting SMP configuration: Oct 2 20:09:46.043225 kernel: .... node #0, CPUs: #1 Oct 2 20:09:46.043234 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 20:09:46.043244 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:09:46.043252 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:09:46.043262 kernel: smpboot: Max logical packages: 1 Oct 2 20:09:46.043270 kernel: smpboot: Total of 2 processors activated (10375.63 BogoMIPS) Oct 2 20:09:46.043277 kernel: devtmpfs: initialized Oct 2 20:09:46.043287 kernel: x86/mm: Memory block size: 128MB Oct 2 20:09:46.043295 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 20:09:46.043307 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:09:46.043314 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:09:46.043321 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:09:46.043331 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:09:46.043339 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:09:46.043349 kernel: audit: type=2000 audit(1696277385.024:1): state=initialized audit_enabled=0 res=1 Oct 2 20:09:46.043356 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:09:46.043364 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:09:46.043374 kernel: cpuidle: using governor menu Oct 2 20:09:46.043385 kernel: ACPI: bus type PCI registered Oct 2 20:09:46.043393 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:09:46.043400 kernel: dca service started, version 1.12.1 Oct 2 20:09:46.043410 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:09:46.043418 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:09:46.043429 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:09:46.043436 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:09:46.043444 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:09:46.043454 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:09:46.043464 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:09:46.043474 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:09:46.043481 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:09:46.043489 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:09:46.043498 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:09:46.043507 kernel: ACPI: Interpreter enabled Oct 2 20:09:46.043515 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:09:46.043522 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:09:46.043531 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:09:46.043542 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 20:09:46.043553 kernel: iommu: Default domain type: Translated Oct 2 20:09:46.043560 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:09:46.043567 kernel: vgaarb: loaded Oct 2 20:09:46.043577 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:09:46.043585 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> Oct 2 20:09:46.043595 kernel: PTP clock support registered Oct 2 20:09:46.043602 kernel: Registered efivars operations Oct 2 20:09:46.043609 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:09:46.043619 kernel: PCI: System does not support PCI Oct 2 20:09:46.043630 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 20:09:46.043638 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:09:46.043646 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:09:46.043655 kernel: pnp: PnP ACPI init Oct 2 20:09:46.043663 kernel: pnp: PnP ACPI: found 3 devices Oct 2 20:09:46.043672 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:09:46.043681 kernel: NET: Registered PF_INET protocol family Oct 2 20:09:46.043688 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:09:46.043701 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 20:09:46.043708 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:09:46.043719 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:09:46.043726 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 20:09:46.043733 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 20:09:46.043743 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:09:46.043751 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:09:46.043761 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:09:46.043780 kernel: NET: Registered PF_XDP protocol family Oct 2 20:09:46.043790 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:09:46.043801 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 20:09:46.043808 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 20:09:46.043815 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:09:46.043826 kernel: Initialise system trusted keyrings Oct 2 20:09:46.043833 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 20:09:46.043844 kernel: Key type asymmetric registered Oct 2 20:09:46.043851 kernel: Asymmetric key parser 'x509' registered Oct 2 20:09:46.043858 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:09:46.043870 kernel: io scheduler mq-deadline registered Oct 2 20:09:46.043878 kernel: io scheduler kyber registered Oct 2 20:09:46.043887 kernel: io scheduler bfq registered Oct 2 20:09:46.043895 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:09:46.043902 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:09:46.043912 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:09:46.043921 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 20:09:46.043930 kernel: i8042: PNP: No PS/2 controller found. Oct 2 20:09:46.044055 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 20:09:46.044143 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T20:09:45 UTC (1696277385) Oct 2 20:09:46.044225 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 20:09:46.044235 kernel: fail to initialize ptp_kvm Oct 2 20:09:46.044244 kernel: intel_pstate: CPU model not supported Oct 2 20:09:46.044252 kernel: efifb: probing for efifb Oct 2 20:09:46.044262 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:09:46.044270 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:09:46.044277 kernel: efifb: scrolling: redraw Oct 2 20:09:46.044290 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:09:46.044298 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:09:46.044308 kernel: fb0: EFI VGA frame buffer device Oct 2 20:09:46.044315 kernel: pstore: Registered efi as persistent store backend Oct 2 20:09:46.044324 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:09:46.044333 kernel: Segment Routing with IPv6 Oct 2 20:09:46.044342 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:09:46.044351 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:09:46.044358 kernel: Key type dns_resolver registered Oct 2 20:09:46.044369 kernel: IPI shorthand broadcast: enabled Oct 2 20:09:46.044377 kernel: sched_clock: Marking stable (797782100, 23495800)->(1029222300, -207944400) Oct 2 20:09:46.044387 kernel: registered taskstats version 1 Oct 2 20:09:46.044395 kernel: Loading compiled-in X.509 certificates Oct 2 20:09:46.044402 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:09:46.044414 kernel: Key type .fscrypt registered Oct 2 20:09:46.044421 kernel: Key type fscrypt-provisioning registered Oct 2 20:09:46.044432 kernel: pstore: Using crash dump compression: deflate Oct 2 20:09:46.044440 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:09:46.044448 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:09:46.044458 kernel: ima: No architecture policies found Oct 2 20:09:46.044466 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:09:46.044476 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:09:46.044483 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:09:46.044491 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:09:46.044501 kernel: Run /init as init process Oct 2 20:09:46.044509 kernel: with arguments: Oct 2 20:09:46.044518 kernel: /init Oct 2 20:09:46.044527 kernel: with environment: Oct 2 20:09:46.044540 kernel: HOME=/ Oct 2 20:09:46.044549 kernel: TERM=linux Oct 2 20:09:46.044557 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:09:46.044568 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:09:46.044578 systemd[1]: Detected virtualization microsoft. Oct 2 20:09:46.044589 systemd[1]: Detected architecture x86-64. Oct 2 20:09:46.044600 systemd[1]: Running in initrd. Oct 2 20:09:46.044609 systemd[1]: No hostname configured, using default hostname. Oct 2 20:09:46.044617 systemd[1]: Hostname set to <localhost>. Oct 2 20:09:46.044627 systemd[1]: Initializing machine ID from random generator. Oct 2 20:09:46.044636 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:09:46.044647 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:09:46.044654 systemd[1]: Reached target cryptsetup.target. Oct 2 20:09:46.044662 systemd[1]: Reached target paths.target. Oct 2 20:09:46.044672 systemd[1]: Reached target slices.target. Oct 2 20:09:46.044683 systemd[1]: Reached target swap.target. Oct 2 20:09:46.044692 systemd[1]: Reached target timers.target. Oct 2 20:09:46.044700 systemd[1]: Listening on iscsid.socket. Oct 2 20:09:46.044710 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:09:46.044718 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:09:46.044730 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:09:46.044737 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:09:46.044748 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:09:46.044758 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:09:46.044774 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:09:46.044782 systemd[1]: Reached target sockets.target. Oct 2 20:09:46.044792 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:09:46.044801 systemd[1]: Finished network-cleanup.service. Oct 2 20:09:46.044811 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:09:46.044819 systemd[1]: Starting systemd-journald.service... Oct 2 20:09:46.044827 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:09:46.044839 systemd[1]: Starting systemd-resolved.service... Oct 2 20:09:46.044847 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:09:46.044857 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:09:46.044865 kernel: audit: type=1130 audit(1696277386.042:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.044878 systemd-journald[183]: Journal started Oct 2 20:09:46.044923 systemd-journald[183]: Runtime Journal (/run/log/journal/9a6326e4ed8a4cc19c5459686ae50b1a) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:09:46.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.025804 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 20:09:46.065802 systemd[1]: Started systemd-journald.service. Oct 2 20:09:46.078781 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:09:46.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.097703 kernel: Bridge firewalling registered Oct 2 20:09:46.097730 kernel: audit: type=1130 audit(1696277386.083:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.097835 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 20:09:46.100573 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:09:46.105269 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:09:46.112934 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:09:46.118924 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:09:46.127109 systemd-resolved[185]: Positive Trust Anchors: Oct 2 20:09:46.127122 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:09:46.127172 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:09:46.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.151228 kernel: audit: type=1130 audit(1696277386.104:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.160139 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 20:09:46.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.163635 systemd[1]: Started systemd-resolved.service. Oct 2 20:09:46.180081 kernel: SCSI subsystem initialized Oct 2 20:09:46.180101 kernel: audit: type=1130 audit(1696277386.107:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.183560 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:09:46.188261 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:09:46.193199 systemd[1]: Reached target nss-lookup.target. Oct 2 20:09:46.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.208775 kernel: audit: type=1130 audit(1696277386.183:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.208994 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:09:46.226076 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:09:46.226105 kernel: audit: type=1130 audit(1696277386.188:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.230872 dracut-cmdline[200]: dracut-dracut-053 Oct 2 20:09:46.259884 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:09:46.259909 kernel: audit: type=1130 audit(1696277386.193:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.259927 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:09:46.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.259992 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:09:46.279514 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 20:09:46.281342 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:09:46.288298 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:09:46.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.308788 kernel: audit: type=1130 audit(1696277386.287:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.309963 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:09:46.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.326789 kernel: audit: type=1130 audit(1696277386.312:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.351785 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:09:46.365784 kernel: iscsi: registered transport (tcp) Oct 2 20:09:46.390688 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:09:46.390732 kernel: QLogic iSCSI HBA Driver Oct 2 20:09:46.426925 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:09:46.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.430345 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:09:46.482798 kernel: raid6: avx512x4 gen() 18708 MB/s Oct 2 20:09:46.506812 kernel: raid6: avx512x4 xor() 8781 MB/s Oct 2 20:09:46.526795 kernel: raid6: avx512x2 gen() 18722 MB/s Oct 2 20:09:46.546785 kernel: raid6: avx512x2 xor() 29311 MB/s Oct 2 20:09:46.566787 kernel: raid6: avx512x1 gen() 18708 MB/s Oct 2 20:09:46.586781 kernel: raid6: avx512x1 xor() 27054 MB/s Oct 2 20:09:46.606781 kernel: raid6: avx2x4 gen() 18707 MB/s Oct 2 20:09:46.626781 kernel: raid6: avx2x4 xor() 8150 MB/s Oct 2 20:09:46.646779 kernel: raid6: avx2x2 gen() 18761 MB/s Oct 2 20:09:46.667782 kernel: raid6: avx2x2 xor() 21805 MB/s Oct 2 20:09:46.687778 kernel: raid6: avx2x1 gen() 14270 MB/s Oct 2 20:09:46.707779 kernel: raid6: avx2x1 xor() 19247 MB/s Oct 2 20:09:46.727779 kernel: raid6: sse2x4 gen() 11685 MB/s Oct 2 20:09:46.747777 kernel: raid6: sse2x4 xor() 7365 MB/s Oct 2 20:09:46.767777 kernel: raid6: sse2x2 gen() 12925 MB/s Oct 2 20:09:46.787779 kernel: raid6: sse2x2 xor() 7680 MB/s Oct 2 20:09:46.807777 kernel: raid6: sse2x1 gen() 11670 MB/s Oct 2 20:09:46.829921 kernel: raid6: sse2x1 xor() 5934 MB/s Oct 2 20:09:46.829951 kernel: raid6: using algorithm avx2x2 gen() 18761 MB/s Oct 2 20:09:46.829964 kernel: raid6: .... xor() 21805 MB/s, rmw enabled Oct 2 20:09:46.834178 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:09:46.853792 kernel: xor: automatically using best checksumming function avx Oct 2 20:09:46.949791 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:09:46.957350 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:09:46.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.961000 audit: BPF prog-id=7 op=LOAD Oct 2 20:09:46.961000 audit: BPF prog-id=8 op=LOAD Oct 2 20:09:46.962740 systemd[1]: Starting systemd-udevd.service... Oct 2 20:09:46.977038 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 20:09:46.981602 systemd[1]: Started systemd-udevd.service. Oct 2 20:09:46.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:46.993397 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:09:47.008725 dracut-pre-trigger[404]: rd.md=0: removing MD RAID activation Oct 2 20:09:47.035513 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:09:47.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.041004 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:09:47.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:47.075227 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:09:47.121789 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:09:47.154923 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:09:47.154992 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 20:09:47.155005 kernel: AES CTR mode by8 optimization enabled Oct 2 20:09:47.170788 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:09:47.187821 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:09:47.192790 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:09:47.197783 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:09:47.207796 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:09:47.213884 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:09:47.219094 kernel: scsi host1: storvsc_host_t Oct 2 20:09:47.219277 kernel: scsi host0: storvsc_host_t Oct 2 20:09:47.226107 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:09:47.226141 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:09:47.237567 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:09:47.244792 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:09:47.268933 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:09:47.269125 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:09:47.278270 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:09:47.278503 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:09:47.278797 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:09:47.282795 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:09:47.282952 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:09:47.283059 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:09:47.294793 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:09:47.299786 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:09:47.418361 kernel: hv_netvsc 000d3ab3-22ff-000d-3ab3-22ff000d3ab3 eth0: VF slot 1 added Oct 2 20:09:47.429115 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:09:47.434779 kernel: hv_pci af0940ed-dea3-427f-bb4d-9cf33e0efb17: PCI VMBus probing: Using version 0x10004 Oct 2 20:09:47.446719 kernel: hv_pci af0940ed-dea3-427f-bb4d-9cf33e0efb17: PCI host bridge to bus dea3:00 Oct 2 20:09:47.446889 kernel: pci_bus dea3:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 20:09:47.447012 kernel: pci_bus dea3:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:09:47.457264 kernel: pci dea3:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 20:09:47.466716 kernel: pci dea3:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:09:47.483181 kernel: pci dea3:00:02.0: enabling Extended Tags Oct 2 20:09:47.496971 kernel: pci dea3:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at dea3:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 20:09:47.523389 kernel: pci_bus dea3:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:09:47.523598 kernel: pci dea3:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:09:47.625793 kernel: mlx5_core dea3:00:02.0: firmware version: 14.30.1224 Oct 2 20:09:47.711241 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:09:47.767787 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (447) Oct 2 20:09:47.782899 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:09:47.799838 kernel: mlx5_core dea3:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 20:09:47.837538 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:09:47.871052 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:09:47.874668 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:09:47.876480 systemd[1]: Starting disk-uuid.service... Oct 2 20:09:47.966996 kernel: mlx5_core dea3:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 20:09:47.967255 kernel: mlx5_core dea3:00:02.0: mlx5e_tc_post_act_init:40:(pid 481): firmware level support is missing Oct 2 20:09:47.978433 kernel: hv_netvsc 000d3ab3-22ff-000d-3ab3-22ff000d3ab3 eth0: VF registering: eth1 Oct 2 20:09:47.983794 kernel: mlx5_core dea3:00:02.0 eth1: joined to eth0 Oct 2 20:09:48.011410 kernel: mlx5_core dea3:00:02.0 enP56995s1: renamed from eth1 Oct 2 20:09:48.905801 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:09:48.907172 disk-uuid[551]: The operation has completed successfully. Oct 2 20:09:48.974709 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:09:48.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:48.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:48.974847 systemd[1]: Finished disk-uuid.service. Oct 2 20:09:48.987146 systemd[1]: Starting verity-setup.service... Oct 2 20:09:49.019792 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:09:49.215085 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:09:49.221319 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:09:49.225748 systemd[1]: Finished verity-setup.service. Oct 2 20:09:49.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.306059 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:09:49.304914 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:09:49.307076 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:09:49.307805 systemd[1]: Starting ignition-setup.service... Oct 2 20:09:49.317924 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:09:49.337262 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:49.337306 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:49.337325 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:49.385668 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:09:49.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.390000 audit: BPF prog-id=9 op=LOAD Oct 2 20:09:49.391663 systemd[1]: Starting systemd-networkd.service... Oct 2 20:09:49.397276 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:09:49.415674 systemd-networkd[826]: lo: Link UP Oct 2 20:09:49.415810 systemd-networkd[826]: lo: Gained carrier Oct 2 20:09:49.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.416638 systemd-networkd[826]: Enumeration completed Oct 2 20:09:49.416915 systemd[1]: Started systemd-networkd.service. Oct 2 20:09:49.419924 systemd-networkd[826]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:09:49.420716 systemd[1]: Reached target network.target. Oct 2 20:09:49.426967 systemd[1]: Starting iscsiuio.service... Oct 2 20:09:49.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.435591 systemd[1]: Started iscsiuio.service. Oct 2 20:09:49.440628 systemd[1]: Starting iscsid.service... Oct 2 20:09:49.445682 iscsid[831]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:09:49.445682 iscsid[831]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 20:09:49.445682 iscsid[831]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.<reversed domain name>[:identifier]. Oct 2 20:09:49.445682 iscsid[831]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:09:49.445682 iscsid[831]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:09:49.445682 iscsid[831]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:09:49.445682 iscsid[831]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:09:49.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.447635 systemd[1]: Started iscsid.service. Oct 2 20:09:49.462313 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:09:49.492725 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:09:49.502263 kernel: mlx5_core dea3:00:02.0 enP56995s1: Link up Oct 2 20:09:49.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.499717 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:09:49.502260 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:09:49.504609 systemd[1]: Reached target remote-fs.target. Oct 2 20:09:49.507661 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:09:49.520998 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:09:49.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.573785 kernel: hv_netvsc 000d3ab3-22ff-000d-3ab3-22ff000d3ab3 eth0: Data path switched to VF: enP56995s1 Oct 2 20:09:49.578958 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:09:49.574299 systemd-networkd[826]: enP56995s1: Link UP Oct 2 20:09:49.574395 systemd-networkd[826]: eth0: Link UP Oct 2 20:09:49.581234 systemd-networkd[826]: eth0: Gained carrier Oct 2 20:09:49.585505 systemd[1]: Finished ignition-setup.service. Oct 2 20:09:49.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.590722 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:09:49.594964 systemd-networkd[826]: enP56995s1: Gained carrier Oct 2 20:09:49.622854 systemd-networkd[826]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:09:50.838978 systemd-networkd[826]: eth0: Gained IPv6LL Oct 2 20:09:52.796261 ignition[846]: Ignition 2.14.0 Oct 2 20:09:52.796275 ignition[846]: Stage: fetch-offline Oct 2 20:09:52.796361 ignition[846]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:52.796413 ignition[846]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:52.931330 ignition[846]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:52.935357 ignition[846]: parsed url from cmdline: "" Oct 2 20:09:52.935366 ignition[846]: no config URL provided Oct 2 20:09:52.935377 ignition[846]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:09:52.935397 ignition[846]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:09:52.935406 ignition[846]: failed to fetch config: resource requires networking Oct 2 20:09:52.945051 ignition[846]: Ignition finished successfully Oct 2 20:09:52.951251 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:09:52.976974 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:09:52.977014 kernel: audit: type=1130 audit(1696277392.953:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:52.954855 systemd[1]: Starting ignition-fetch.service... Oct 2 20:09:52.977568 ignition[852]: Ignition 2.14.0 Oct 2 20:09:52.977575 ignition[852]: Stage: fetch Oct 2 20:09:52.977711 ignition[852]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:52.977738 ignition[852]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:52.982510 ignition[852]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:52.982702 ignition[852]: parsed url from cmdline: "" Oct 2 20:09:52.982706 ignition[852]: no config URL provided Oct 2 20:09:52.982712 ignition[852]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:09:52.982721 ignition[852]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:09:52.982756 ignition[852]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:09:53.004656 ignition[852]: GET result: OK Oct 2 20:09:53.004673 ignition[852]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 20:09:53.144813 ignition[852]: opening config device: "/dev/sr0" Oct 2 20:09:53.145235 ignition[852]: getting drive status for "/dev/sr0" Oct 2 20:09:53.145286 ignition[852]: drive status: OK Oct 2 20:09:53.145325 ignition[852]: mounting config device Oct 2 20:09:53.145337 ignition[852]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure3503061717" Oct 2 20:09:53.174240 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 20:09:53.173359 ignition[852]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure3503061717" Oct 2 20:09:53.173369 ignition[852]: checking for config drive Oct 2 20:09:53.176163 systemd[1]: tmp-ignition\x2dazure3503061717.mount: Deactivated successfully. Oct 2 20:09:53.175373 ignition[852]: reading config Oct 2 20:09:53.175824 ignition[852]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure3503061717" Oct 2 20:09:53.180534 ignition[852]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure3503061717" Oct 2 20:09:53.180566 ignition[852]: config has been read from custom data Oct 2 20:09:53.180635 ignition[852]: parsing config with SHA512: ab0246da235cc4b72cbd95005d6e97cc81705a0c63d45cf73e0d64915a9d97d1eb6e735debf3fc644c67da969f94b85d8ea2467280d70dd98d562d873aebdd7e Oct 2 20:09:53.204719 unknown[852]: fetched base config from "system" Oct 2 20:09:53.204734 unknown[852]: fetched base config from "system" Oct 2 20:09:53.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.205292 ignition[852]: fetch: fetch complete Oct 2 20:09:53.204743 unknown[852]: fetched user config from "azure" Oct 2 20:09:53.227851 kernel: audit: type=1130 audit(1696277393.211:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.205298 ignition[852]: fetch: fetch passed Oct 2 20:09:53.209135 systemd[1]: Finished ignition-fetch.service. Oct 2 20:09:53.205335 ignition[852]: Ignition finished successfully Oct 2 20:09:53.212961 systemd[1]: Starting ignition-kargs.service... Oct 2 20:09:53.246652 ignition[861]: Ignition 2.14.0 Oct 2 20:09:53.246662 ignition[861]: Stage: kargs Oct 2 20:09:53.246814 ignition[861]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:53.246848 ignition[861]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:53.257108 ignition[861]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:53.261213 ignition[861]: kargs: kargs passed Oct 2 20:09:53.261275 ignition[861]: Ignition finished successfully Oct 2 20:09:53.263477 systemd[1]: Finished ignition-kargs.service. Oct 2 20:09:53.284741 kernel: audit: type=1130 audit(1696277393.264:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.266431 systemd[1]: Starting ignition-disks.service... Oct 2 20:09:53.276003 ignition[867]: Ignition 2.14.0 Oct 2 20:09:53.276008 ignition[867]: Stage: disks Oct 2 20:09:53.276103 ignition[867]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:53.276128 ignition[867]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:53.279738 ignition[867]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:53.297658 ignition[867]: disks: disks passed Oct 2 20:09:53.297719 ignition[867]: Ignition finished successfully Oct 2 20:09:53.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.299622 systemd[1]: Finished ignition-disks.service. Oct 2 20:09:53.322810 kernel: audit: type=1130 audit(1696277393.301:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.302202 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:09:53.318636 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:09:53.322796 systemd[1]: Reached target local-fs.target. Oct 2 20:09:53.324822 systemd[1]: Reached target sysinit.target. Oct 2 20:09:53.326823 systemd[1]: Reached target basic.target. Oct 2 20:09:53.333205 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:09:53.386309 systemd-fsck[875]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 20:09:53.393469 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:09:53.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.408983 systemd[1]: Mounting sysroot.mount... Oct 2 20:09:53.413554 kernel: audit: type=1130 audit(1696277393.395:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:53.428788 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:09:53.429621 systemd[1]: Mounted sysroot.mount. Oct 2 20:09:53.433494 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:09:53.467620 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:09:53.473090 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:09:53.478332 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:09:53.478366 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:09:53.488437 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:09:53.518628 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:09:53.521925 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:09:53.539791 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (885) Oct 2 20:09:53.539825 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:53.544871 initrd-setup-root[890]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:09:53.554998 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:53.555022 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:53.558480 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:09:53.604443 initrd-setup-root[916]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:09:53.630820 initrd-setup-root[924]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:09:53.638089 initrd-setup-root[932]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:09:54.024290 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:09:54.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.029592 systemd[1]: Starting ignition-mount.service... Oct 2 20:09:54.041251 kernel: audit: type=1130 audit(1696277394.028:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.044647 systemd[1]: Starting sysroot-boot.service... Oct 2 20:09:54.067954 systemd[1]: Finished sysroot-boot.service. Oct 2 20:09:54.085846 kernel: audit: type=1130 audit(1696277394.070:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.077176 systemd[1]: Finished ignition-mount.service. Oct 2 20:09:54.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.103619 ignition[951]: INFO : Ignition 2.14.0 Oct 2 20:09:54.103619 ignition[951]: INFO : Stage: mount Oct 2 20:09:54.103619 ignition[951]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:54.103619 ignition[951]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:54.103619 ignition[951]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:54.103619 ignition[951]: INFO : mount: mount passed Oct 2 20:09:54.103619 ignition[951]: INFO : Ignition finished successfully Oct 2 20:09:54.123966 kernel: audit: type=1130 audit(1696277394.088:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.174896 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:09:54.175004 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:09:54.808311 coreos-metadata[884]: Oct 02 20:09:54.808 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:09:54.823986 coreos-metadata[884]: Oct 02 20:09:54.823 INFO Fetch successful Oct 2 20:09:54.859170 coreos-metadata[884]: Oct 02 20:09:54.859 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:09:54.870934 coreos-metadata[884]: Oct 02 20:09:54.870 INFO Fetch successful Oct 2 20:09:54.891231 coreos-metadata[884]: Oct 02 20:09:54.891 INFO wrote hostname ci-3510.3.0-a-7abbcb6e32 to /sysroot/etc/hostname Oct 2 20:09:54.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.893343 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:09:54.916191 kernel: audit: type=1130 audit(1696277394.897:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.899567 systemd[1]: Starting ignition-files.service... Oct 2 20:09:54.919372 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:09:54.938497 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (963) Oct 2 20:09:54.938532 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:09:54.938546 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:09:54.947143 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:09:54.952186 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:09:54.965156 ignition[982]: INFO : Ignition 2.14.0 Oct 2 20:09:54.965156 ignition[982]: INFO : Stage: files Oct 2 20:09:54.969023 ignition[982]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:09:54.969023 ignition[982]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:09:54.981803 ignition[982]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:09:54.998827 ignition[982]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:09:55.002149 ignition[982]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:09:55.002149 ignition[982]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:09:55.029457 ignition[982]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:09:55.033255 ignition[982]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:09:55.043863 unknown[982]: wrote ssh authorized keys file for user: core Oct 2 20:09:55.046838 ignition[982]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:09:55.050813 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:09:55.056291 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 20:09:55.530493 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:09:56.641602 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 20:09:56.649848 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:09:56.649848 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:09:56.649848 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:09:57.005171 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:09:57.400953 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 20:09:57.409489 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:09:57.409489 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:09:57.419023 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:09:57.559926 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:09:59.576180 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 20:09:59.586085 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:09:59.586085 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:09:59.586085 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:09:59.713274 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:10:03.724220 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 20:10:03.733819 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:10:03.733819 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:10:03.733819 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:10:03.852898 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:10:05.927005 ignition[982]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 20:10:05.939096 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:10:05.939096 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:10:05.939096 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:10:05.939096 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:10:05.939096 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:10:06.046932 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:10:06.134511 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:10:06.139539 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:10:06.139539 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:10:06.139539 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:10:06.155653 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:10:06.155653 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:10:06.166611 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:10:06.176815 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem25157958" Oct 2 20:10:06.176815 ignition[982]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem25157958": device or resource busy Oct 2 20:10:06.176815 ignition[982]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem25157958", trying btrfs: device or resource busy Oct 2 20:10:06.176815 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem25157958" Oct 2 20:10:06.201876 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (986) Oct 2 20:10:06.197947 systemd[1]: mnt-oem25157958.mount: Deactivated successfully. Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem25157958" Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem25157958" Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem25157958" Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:10:06.205532 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:10:06.248659 kernel: audit: type=1130 audit(1696277406.222:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.214758 systemd[1]: mnt-oem1959414819.mount: Deactivated successfully. Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1959414819" Oct 2 20:10:06.253670 ignition[982]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1959414819": device or resource busy Oct 2 20:10:06.253670 ignition[982]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1959414819", trying btrfs: device or resource busy Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1959414819" Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1959414819" Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem1959414819" Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem1959414819" Oct 2 20:10:06.253670 ignition[982]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(14): [started] processing unit "nvidia.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(14): [finished] processing unit "nvidia.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(15): [started] processing unit "waagent.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(15): [finished] processing unit "waagent.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:10:06.253670 ignition[982]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 20:10:06.217145 systemd[1]: Finished ignition-files.service. Oct 2 20:10:06.356966 kernel: audit: type=1130 audit(1696277406.296:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.357008 kernel: audit: type=1131 audit(1696277406.296:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1b): [started] setting preset to enabled for "waagent.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1b): [finished] setting preset to enabled for "waagent.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:10:06.357111 ignition[982]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:10:06.357111 ignition[982]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:10:06.357111 ignition[982]: INFO : files: files passed Oct 2 20:10:06.357111 ignition[982]: INFO : Ignition finished successfully Oct 2 20:10:06.464111 kernel: audit: type=1130 audit(1696277406.382:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.464142 kernel: audit: type=1130 audit(1696277406.422:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.464154 kernel: audit: type=1131 audit(1696277406.422:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.238902 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:10:06.464586 initrd-setup-root-after-ignition[1007]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:10:06.253667 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:10:06.254423 systemd[1]: Starting ignition-quench.service... Oct 2 20:10:06.269856 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:10:06.269959 systemd[1]: Finished ignition-quench.service. Oct 2 20:10:06.378009 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:10:06.382464 systemd[1]: Reached target ignition-complete.target. Oct 2 20:10:06.401819 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:10:06.416350 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:10:06.416444 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:10:06.422486 systemd[1]: Reached target initrd-fs.target. Oct 2 20:10:06.448829 systemd[1]: Reached target initrd.target. Oct 2 20:10:06.455917 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:10:06.456787 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:10:06.514620 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:10:06.535808 kernel: audit: type=1130 audit(1696277406.518:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.533165 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:10:06.543455 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:10:06.548137 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:10:06.552962 systemd[1]: Stopped target timers.target. Oct 2 20:10:06.557007 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:10:06.559504 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:10:06.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.561833 systemd[1]: Stopped target initrd.target. Oct 2 20:10:06.581828 kernel: audit: type=1131 audit(1696277406.561:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.577924 systemd[1]: Stopped target basic.target. Oct 2 20:10:06.581933 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:10:06.588500 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:10:06.593245 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:10:06.595727 systemd[1]: Stopped target remote-fs.target. Oct 2 20:10:06.600170 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:10:06.604660 systemd[1]: Stopped target sysinit.target. Oct 2 20:10:06.609106 systemd[1]: Stopped target local-fs.target. Oct 2 20:10:06.613293 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:10:06.617481 systemd[1]: Stopped target swap.target. Oct 2 20:10:06.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.621413 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:10:06.643345 kernel: audit: type=1131 audit(1696277406.625:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.621555 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:10:06.625886 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:10:06.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.643422 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:10:06.665519 kernel: audit: type=1131 audit(1696277406.647:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.643557 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:10:06.659824 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:10:06.660038 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:10:06.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.672951 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:10:06.675450 systemd[1]: Stopped ignition-files.service. Oct 2 20:10:06.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.679506 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:10:06.682197 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:10:06.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.698365 iscsid[831]: iscsid shutting down. Oct 2 20:10:06.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.687994 systemd[1]: Stopping ignition-mount.service... Oct 2 20:10:06.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.706092 ignition[1020]: INFO : Ignition 2.14.0 Oct 2 20:10:06.706092 ignition[1020]: INFO : Stage: umount Oct 2 20:10:06.706092 ignition[1020]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:10:06.706092 ignition[1020]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:10:06.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.690446 systemd[1]: Stopping iscsid.service... Oct 2 20:10:06.735073 ignition[1020]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:10:06.735073 ignition[1020]: INFO : umount: umount passed Oct 2 20:10:06.735073 ignition[1020]: INFO : Ignition finished successfully Oct 2 20:10:06.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.693543 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:10:06.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.695670 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:10:06.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.695878 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:10:06.698567 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:10:06.700347 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:10:06.708710 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:10:06.708871 systemd[1]: Stopped iscsid.service. Oct 2 20:10:06.714107 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:10:06.714184 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:10:06.725200 systemd[1]: Stopping iscsiuio.service... Oct 2 20:10:06.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.737050 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:10:06.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.737143 systemd[1]: Stopped iscsiuio.service. Oct 2 20:10:06.740681 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:10:06.740763 systemd[1]: Stopped ignition-mount.service. Oct 2 20:10:06.744910 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:10:06.744953 systemd[1]: Stopped ignition-disks.service. Oct 2 20:10:06.749383 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:10:06.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.749432 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:10:06.751609 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:10:06.751655 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:10:06.754829 systemd[1]: Stopped target network.target. Oct 2 20:10:06.757809 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:10:06.757861 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:10:06.760318 systemd[1]: Stopped target paths.target. Oct 2 20:10:06.765050 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:10:06.769890 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:10:06.772475 systemd[1]: Stopped target slices.target. Oct 2 20:10:06.774405 systemd[1]: Stopped target sockets.target. Oct 2 20:10:06.778458 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:10:06.778504 systemd[1]: Closed iscsid.socket. Oct 2 20:10:06.782852 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:10:06.782893 systemd[1]: Closed iscsiuio.socket. Oct 2 20:10:06.791292 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:10:06.791344 systemd[1]: Stopped ignition-setup.service. Oct 2 20:10:06.795453 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:10:06.798950 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:10:06.800425 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:10:06.800886 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:10:06.800966 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:10:06.801399 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:10:06.801435 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:10:06.814396 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:10:06.815809 systemd-networkd[826]: eth0: DHCPv6 lease lost Oct 2 20:10:06.816284 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:10:06.827837 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:10:06.827946 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:10:06.883000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:10:06.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.883621 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:10:06.883671 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:10:06.890000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:10:06.891404 systemd[1]: Stopping network-cleanup.service... Oct 2 20:10:06.894416 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:10:06.894476 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:10:06.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.902375 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:10:06.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.902445 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:10:06.907254 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:10:06.909375 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:10:06.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.916695 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:10:06.921023 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:10:06.924365 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:10:06.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.929532 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:10:06.929590 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:10:06.936850 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:10:06.936905 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:10:06.944120 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:10:06.944192 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:10:06.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.952656 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:10:06.952710 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:10:06.957000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.957389 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:10:06.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.957434 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:10:06.962478 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:10:06.971422 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:10:06.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.971487 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:10:06.979555 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:10:06.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.979610 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:10:06.984232 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:10:06.984278 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:10:06.993860 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:10:06.996655 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:10:07.006601 kernel: hv_netvsc 000d3ab3-22ff-000d-3ab3-22ff000d3ab3 eth0: Data path switched from VF: enP56995s1 Oct 2 20:10:07.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:07.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:07.025996 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:10:07.028946 systemd[1]: Stopped network-cleanup.service. Oct 2 20:10:07.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:07.034005 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:10:07.040052 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:10:07.051112 systemd[1]: Switching root. Oct 2 20:10:07.075608 systemd-journald[183]: Journal stopped Oct 2 20:10:19.839439 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 20:10:19.839465 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:10:19.839478 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:10:19.839487 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:10:19.839498 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:10:19.839506 kernel: SELinux: policy capability open_perms=1 Oct 2 20:10:19.839520 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:10:19.839531 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:10:19.839541 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:10:19.839549 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:10:19.839557 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:10:19.839567 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:10:19.839575 systemd[1]: Successfully loaded SELinux policy in 290.826ms. Oct 2 20:10:19.839586 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.837ms. Oct 2 20:10:19.839608 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:10:19.839622 systemd[1]: Detected virtualization microsoft. Oct 2 20:10:19.839631 systemd[1]: Detected architecture x86-64. Oct 2 20:10:19.839642 systemd[1]: Detected first boot. Oct 2 20:10:19.839662 systemd[1]: Hostname set to <ci-3510.3.0-a-7abbcb6e32>. Oct 2 20:10:19.839671 systemd[1]: Initializing machine ID from random generator. Oct 2 20:10:19.839682 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:10:19.839701 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:10:19.839716 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:10:19.839726 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:10:19.839740 kernel: kauditd_printk_skb: 42 callbacks suppressed Oct 2 20:10:19.839755 kernel: audit: type=1334 audit(1696277419.286:90): prog-id=12 op=LOAD Oct 2 20:10:19.839774 kernel: audit: type=1334 audit(1696277419.286:91): prog-id=3 op=UNLOAD Oct 2 20:10:19.839789 kernel: audit: type=1334 audit(1696277419.291:92): prog-id=13 op=LOAD Oct 2 20:10:19.839803 kernel: audit: type=1334 audit(1696277419.296:93): prog-id=14 op=LOAD Oct 2 20:10:19.839811 kernel: audit: type=1334 audit(1696277419.296:94): prog-id=4 op=UNLOAD Oct 2 20:10:19.839821 kernel: audit: type=1334 audit(1696277419.296:95): prog-id=5 op=UNLOAD Oct 2 20:10:19.839840 kernel: audit: type=1334 audit(1696277419.301:96): prog-id=15 op=LOAD Oct 2 20:10:19.839855 kernel: audit: type=1334 audit(1696277419.301:97): prog-id=12 op=UNLOAD Oct 2 20:10:19.839866 kernel: audit: type=1334 audit(1696277419.320:98): prog-id=16 op=LOAD Oct 2 20:10:19.839880 kernel: audit: type=1334 audit(1696277419.325:99): prog-id=17 op=LOAD Oct 2 20:10:19.839896 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:10:19.839906 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:10:19.839917 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:10:19.839936 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:10:19.839954 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:10:19.839977 systemd[1]: Created slice system-getty.slice. Oct 2 20:10:19.839995 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:10:19.840004 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:10:19.840018 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:10:19.840037 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:10:19.840047 systemd[1]: Created slice user.slice. Oct 2 20:10:19.840058 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:10:19.840081 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:10:19.840098 systemd[1]: Set up automount boot.automount. Oct 2 20:10:19.840115 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:10:19.840127 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:10:19.840142 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:10:19.840160 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:10:19.840182 systemd[1]: Reached target integritysetup.target. Oct 2 20:10:19.840192 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:10:19.840204 systemd[1]: Reached target remote-fs.target. Oct 2 20:10:19.840223 systemd[1]: Reached target slices.target. Oct 2 20:10:19.840235 systemd[1]: Reached target swap.target. Oct 2 20:10:19.840249 systemd[1]: Reached target torcx.target. Oct 2 20:10:19.840267 systemd[1]: Reached target veritysetup.target. Oct 2 20:10:19.840278 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:10:19.840289 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:10:19.840310 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:10:19.840332 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:10:19.840345 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:10:19.840354 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:10:19.840371 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:10:19.840391 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:10:19.840408 systemd[1]: Mounting media.mount... Oct 2 20:10:19.840427 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:10:19.840439 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:10:19.840452 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:10:19.840472 systemd[1]: Mounting tmp.mount... Oct 2 20:10:19.840491 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:10:19.840505 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:10:19.840515 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:10:19.840534 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:10:19.840551 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:10:19.840562 systemd[1]: Starting modprobe@drm.service... Oct 2 20:10:19.840573 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:10:19.840596 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:10:19.840613 systemd[1]: Starting modprobe@loop.service... Oct 2 20:10:19.840623 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:10:19.840636 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:10:19.840654 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:10:19.840671 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:10:19.840681 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:10:19.840697 systemd[1]: Stopped systemd-journald.service. Oct 2 20:10:19.840715 systemd[1]: Starting systemd-journald.service... Oct 2 20:10:19.840736 kernel: loop: module loaded Oct 2 20:10:19.840746 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:10:19.840757 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:10:19.840789 kernel: fuse: init (API version 7.34) Oct 2 20:10:19.840802 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:10:19.840811 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:10:19.840830 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:10:19.840849 systemd[1]: Stopped verity-setup.service. Oct 2 20:10:19.840869 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:10:19.840884 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:10:19.840894 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:10:19.840912 systemd[1]: Mounted media.mount. Oct 2 20:10:19.840931 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:10:19.840954 systemd-journald[1147]: Journal started Oct 2 20:10:19.841008 systemd-journald[1147]: Runtime Journal (/run/log/journal/f34d2374d89b43bd9cd8ccc41bc993e0) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:10:09.119000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:10:09.779000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:10:09.791000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:10:09.791000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:10:09.791000 audit: BPF prog-id=10 op=LOAD Oct 2 20:10:09.791000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:10:09.791000 audit: BPF prog-id=11 op=LOAD Oct 2 20:10:09.791000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:10:19.286000 audit: BPF prog-id=12 op=LOAD Oct 2 20:10:19.286000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:10:19.291000 audit: BPF prog-id=13 op=LOAD Oct 2 20:10:19.296000 audit: BPF prog-id=14 op=LOAD Oct 2 20:10:19.296000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:10:19.296000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:10:19.301000 audit: BPF prog-id=15 op=LOAD Oct 2 20:10:19.301000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:10:19.320000 audit: BPF prog-id=16 op=LOAD Oct 2 20:10:19.325000 audit: BPF prog-id=17 op=LOAD Oct 2 20:10:19.325000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:10:19.325000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:10:19.330000 audit: BPF prog-id=18 op=LOAD Oct 2 20:10:19.330000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:10:19.335000 audit: BPF prog-id=19 op=LOAD Oct 2 20:10:19.340000 audit: BPF prog-id=20 op=LOAD Oct 2 20:10:19.340000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:10:19.340000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:10:19.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.353000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:10:19.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.716000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.736000 audit: BPF prog-id=21 op=LOAD Oct 2 20:10:19.736000 audit: BPF prog-id=22 op=LOAD Oct 2 20:10:19.737000 audit: BPF prog-id=23 op=LOAD Oct 2 20:10:19.737000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:10:19.737000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:10:19.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.836000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:10:19.836000 audit[1147]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffd93485240 a2=4000 a3=7ffd934852dc items=0 ppid=1 pid=1147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:19.836000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:10:19.285576 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:10:11.062347 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:10:19.341158 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:10:11.062880 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:10:11.062899 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:10:11.062933 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:10:11.062943 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:10:11.062987 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:10:11.062999 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:10:11.063179 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:10:11.063221 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:10:11.063234 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:10:11.063674 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:10:11.063706 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:10:11.063723 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:10:11.063737 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:10:11.063753 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:10:11.063765 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:10:17.921181 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:17.921455 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:17.921565 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:17.921753 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:10:17.921824 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:10:17.921887 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:10:17Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:10:19.853034 systemd[1]: Started systemd-journald.service. Oct 2 20:10:19.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.853843 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:10:19.856432 systemd[1]: Mounted tmp.mount. Oct 2 20:10:19.858677 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:10:19.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.861257 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:10:19.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.864022 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:10:19.864161 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:10:19.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.866728 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:10:19.866880 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:10:19.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.869522 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:10:19.869661 systemd[1]: Finished modprobe@drm.service. Oct 2 20:10:19.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.872132 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:10:19.872301 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:10:19.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.874918 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:10:19.875113 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:10:19.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.877560 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:10:19.877780 systemd[1]: Finished modprobe@loop.service. Oct 2 20:10:19.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.880280 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:10:19.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.883044 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:10:19.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.886410 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:10:19.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.889593 systemd[1]: Reached target network-pre.target. Oct 2 20:10:19.893946 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:10:19.897681 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:10:19.900759 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:10:19.924411 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:10:19.928056 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:10:19.930238 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:10:19.931412 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:10:19.933536 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:10:19.934726 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:10:19.939256 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:10:19.943950 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:10:19.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:19.948632 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:10:19.951331 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:10:19.954970 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:10:19.980417 udevadm[1177]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:10:19.999334 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:10:20.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:20.002094 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:10:20.006325 systemd-journald[1147]: Time spent on flushing to /var/log/journal/f34d2374d89b43bd9cd8ccc41bc993e0 is 26.729ms for 1189 entries. Oct 2 20:10:20.006325 systemd-journald[1147]: System Journal (/var/log/journal/f34d2374d89b43bd9cd8ccc41bc993e0) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:10:20.094446 systemd-journald[1147]: Received client request to flush runtime journal. Oct 2 20:10:20.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:20.041834 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:10:20.095404 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:10:20.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:20.443575 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:10:20.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:20.447542 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:10:20.912965 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:10:20.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.204049 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:10:21.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.206000 audit: BPF prog-id=24 op=LOAD Oct 2 20:10:21.206000 audit: BPF prog-id=25 op=LOAD Oct 2 20:10:21.206000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:10:21.206000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:10:21.208468 systemd[1]: Starting systemd-udevd.service... Oct 2 20:10:21.226433 systemd-udevd[1182]: Using default interface naming scheme 'v252'. Oct 2 20:10:21.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.450000 audit: BPF prog-id=26 op=LOAD Oct 2 20:10:21.447162 systemd[1]: Started systemd-udevd.service. Oct 2 20:10:21.452855 systemd[1]: Starting systemd-networkd.service... Oct 2 20:10:21.484802 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:10:21.554000 audit[1188]: AVC avc: denied { confidentiality } for pid=1188 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:10:21.562787 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:10:21.562866 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:10:21.580940 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:10:21.581013 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:10:21.581037 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:10:21.590827 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:10:21.590888 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:10:21.596780 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:10:21.600233 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:10:21.606508 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:10:22.792466 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:10:21.554000 audit[1188]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c836d65df0 a1=f884 a2=7f96d3479bc5 a3=5 items=10 ppid=1182 pid=1188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:21.554000 audit: CWD cwd="/" Oct 2 20:10:21.554000 audit: PATH item=0 name=(null) inode=15399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=1 name=(null) inode=15400 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=2 name=(null) inode=15399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=3 name=(null) inode=15401 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=4 name=(null) inode=15399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=5 name=(null) inode=15402 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=6 name=(null) inode=15399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=7 name=(null) inode=15403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=8 name=(null) inode=15399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PATH item=9 name=(null) inode=15404 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:10:21.554000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:10:22.796290 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:10:22.796000 audit: BPF prog-id=27 op=LOAD Oct 2 20:10:22.796000 audit: BPF prog-id=28 op=LOAD Oct 2 20:10:22.796000 audit: BPF prog-id=29 op=LOAD Oct 2 20:10:22.798670 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:10:22.811151 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:10:22.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.863090 systemd[1]: Started systemd-userdbd.service. Oct 2 20:10:23.051432 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1201) Oct 2 20:10:23.087452 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:10:23.134424 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 20:10:23.172845 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:10:23.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.176872 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:10:23.189702 systemd-networkd[1195]: lo: Link UP Oct 2 20:10:23.189711 systemd-networkd[1195]: lo: Gained carrier Oct 2 20:10:23.190259 systemd-networkd[1195]: Enumeration completed Oct 2 20:10:23.190367 systemd[1]: Started systemd-networkd.service. Oct 2 20:10:23.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.194216 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:10:23.213400 systemd-networkd[1195]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:10:23.267855 kernel: mlx5_core dea3:00:02.0 enP56995s1: Link up Oct 2 20:10:23.307442 kernel: hv_netvsc 000d3ab3-22ff-000d-3ab3-22ff000d3ab3 eth0: Data path switched to VF: enP56995s1 Oct 2 20:10:23.308154 systemd-networkd[1195]: enP56995s1: Link UP Oct 2 20:10:23.308333 systemd-networkd[1195]: eth0: Link UP Oct 2 20:10:23.308345 systemd-networkd[1195]: eth0: Gained carrier Oct 2 20:10:23.313672 systemd-networkd[1195]: enP56995s1: Gained carrier Oct 2 20:10:23.338506 systemd-networkd[1195]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:10:23.456855 lvm[1259]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:10:23.488244 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:10:23.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.491377 systemd[1]: Reached target cryptsetup.target. Oct 2 20:10:23.495448 systemd[1]: Starting lvm2-activation.service... Oct 2 20:10:23.500957 lvm[1262]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:10:23.530274 systemd[1]: Finished lvm2-activation.service. Oct 2 20:10:23.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:23.532949 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:10:23.535540 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:10:23.535577 systemd[1]: Reached target local-fs.target. Oct 2 20:10:23.538024 systemd[1]: Reached target machines.target. Oct 2 20:10:23.541439 systemd[1]: Starting ldconfig.service... Oct 2 20:10:23.554124 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:10:23.554218 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:23.555384 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:10:23.559204 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:10:23.563440 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:10:23.566216 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:10:23.566313 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:10:23.567414 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:10:23.602622 systemd-tmpfiles[1267]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:10:23.779942 systemd-tmpfiles[1267]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:10:23.861812 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1264 (bootctl) Oct 2 20:10:23.863471 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:10:23.873089 systemd-tmpfiles[1267]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:10:23.880352 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:10:23.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.299728 systemd-networkd[1195]: eth0: Gained IPv6LL Oct 2 20:10:25.305266 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:10:25.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.829801 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:10:25.830446 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:10:25.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.837149 kernel: kauditd_printk_skb: 80 callbacks suppressed Oct 2 20:10:25.837218 kernel: audit: type=1130 audit(1696277425.829:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.034980 systemd-fsck[1272]: fsck.fat 4.2 (2021-01-31) Oct 2 20:10:26.034980 systemd-fsck[1272]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 20:10:26.036624 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:10:26.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.041209 systemd[1]: Mounting boot.mount... Oct 2 20:10:26.055578 kernel: audit: type=1130 audit(1696277426.038:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.060194 systemd[1]: Mounted boot.mount. Oct 2 20:10:26.074683 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:10:26.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.089425 kernel: audit: type=1130 audit(1696277426.075:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.538356 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:10:26.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.542388 systemd[1]: Starting audit-rules.service... Oct 2 20:10:26.553621 kernel: audit: type=1130 audit(1696277426.539:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.556449 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:10:26.560142 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:10:26.562000 audit: BPF prog-id=30 op=LOAD Oct 2 20:10:26.568319 systemd[1]: Starting systemd-resolved.service... Oct 2 20:10:26.573566 kernel: audit: type=1334 audit(1696277426.562:169): prog-id=30 op=LOAD Oct 2 20:10:26.572425 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:10:26.569000 audit: BPF prog-id=31 op=LOAD Oct 2 20:10:26.579608 kernel: audit: type=1334 audit(1696277426.569:170): prog-id=31 op=LOAD Oct 2 20:10:26.579971 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:10:26.612823 kernel: audit: type=1127 audit(1696277426.598:171): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.598000 audit[1284]: SYSTEM_BOOT pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.617656 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:10:26.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.633421 kernel: audit: type=1130 audit(1696277426.619:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.656716 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:10:26.673919 kernel: audit: type=1130 audit(1696277426.657:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.659311 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:10:26.684480 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:10:26.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.702426 kernel: audit: type=1130 audit(1696277426.686:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.738008 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:10:26.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.740880 systemd[1]: Reached target time-set.target. Oct 2 20:10:26.763314 systemd-resolved[1282]: Positive Trust Anchors: Oct 2 20:10:26.763333 systemd-resolved[1282]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:10:26.763378 systemd-resolved[1282]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:10:26.872000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:10:26.872000 audit[1299]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffef1a94240 a2=420 a3=0 items=0 ppid=1278 pid=1299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:26.872000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:10:26.874387 augenrules[1299]: No rules Oct 2 20:10:26.874800 systemd[1]: Finished audit-rules.service. Oct 2 20:10:26.955131 systemd-resolved[1282]: Using system hostname 'ci-3510.3.0-a-7abbcb6e32'. Oct 2 20:10:26.956962 systemd[1]: Started systemd-resolved.service. Oct 2 20:10:26.959954 systemd[1]: Reached target network.target. Oct 2 20:10:26.962157 systemd[1]: Reached target network-online.target. Oct 2 20:10:26.964732 systemd[1]: Reached target nss-lookup.target. Oct 2 20:10:27.064166 systemd-timesyncd[1283]: Contacted time server 188.125.64.7:123 (0.flatcar.pool.ntp.org). Oct 2 20:10:27.064259 systemd-timesyncd[1283]: Initial clock synchronization to Mon 2023-10-02 20:10:27.064094 UTC. Oct 2 20:10:32.241846 ldconfig[1263]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:10:32.252908 systemd[1]: Finished ldconfig.service. Oct 2 20:10:32.257794 systemd[1]: Starting systemd-update-done.service... Oct 2 20:10:32.279598 systemd[1]: Finished systemd-update-done.service. Oct 2 20:10:32.282437 systemd[1]: Reached target sysinit.target. Oct 2 20:10:32.284760 systemd[1]: Started motdgen.path. Oct 2 20:10:32.286798 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:10:32.290181 systemd[1]: Started logrotate.timer. Oct 2 20:10:32.292192 systemd[1]: Started mdadm.timer. Oct 2 20:10:32.294009 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:10:32.296476 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:10:32.296516 systemd[1]: Reached target paths.target. Oct 2 20:10:32.298459 systemd[1]: Reached target timers.target. Oct 2 20:10:32.300855 systemd[1]: Listening on dbus.socket. Oct 2 20:10:32.303736 systemd[1]: Starting docker.socket... Oct 2 20:10:32.360984 systemd[1]: Listening on sshd.socket. Oct 2 20:10:32.363855 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:32.364341 systemd[1]: Listening on docker.socket. Oct 2 20:10:32.366763 systemd[1]: Reached target sockets.target. Oct 2 20:10:32.369206 systemd[1]: Reached target basic.target. Oct 2 20:10:32.371537 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:10:32.371573 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:10:32.372565 systemd[1]: Starting containerd.service... Oct 2 20:10:32.376025 systemd[1]: Starting dbus.service... Oct 2 20:10:32.378853 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:10:32.382078 systemd[1]: Starting extend-filesystems.service... Oct 2 20:10:32.384357 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:10:32.385636 systemd[1]: Starting motdgen.service... Oct 2 20:10:32.389585 systemd[1]: Started nvidia.service. Oct 2 20:10:32.392970 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:10:32.396252 systemd[1]: Starting prepare-critools.service... Oct 2 20:10:32.399388 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:10:32.403592 systemd[1]: Starting sshd-keygen.service... Oct 2 20:10:32.410171 systemd[1]: Starting systemd-logind.service... Oct 2 20:10:32.413015 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:10:32.413101 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:10:32.413645 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:10:32.414475 systemd[1]: Starting update-engine.service... Oct 2 20:10:32.418794 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:10:32.435109 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:10:32.435336 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:10:32.470660 jq[1309]: false Oct 2 20:10:32.471534 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:10:32.471734 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:10:32.472912 jq[1323]: true Oct 2 20:10:32.480551 extend-filesystems[1310]: Found sda Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda1 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda2 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda3 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found usr Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda4 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda6 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda7 Oct 2 20:10:32.482769 extend-filesystems[1310]: Found sda9 Oct 2 20:10:32.482769 extend-filesystems[1310]: Checking size of /dev/sda9 Oct 2 20:10:32.515208 jq[1335]: true Oct 2 20:10:32.506132 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:10:32.506320 systemd[1]: Finished motdgen.service. Oct 2 20:10:32.548000 extend-filesystems[1310]: Old size kept for /dev/sda9 Oct 2 20:10:32.554329 extend-filesystems[1310]: Found sr0 Oct 2 20:10:32.548526 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:10:32.548686 systemd[1]: Finished extend-filesystems.service. Oct 2 20:10:32.564302 env[1341]: time="2023-10-02T20:10:32.564252311Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:10:32.579759 tar[1327]: crictl Oct 2 20:10:32.581527 tar[1326]: ./ Oct 2 20:10:32.581527 tar[1326]: ./loopback Oct 2 20:10:32.618871 systemd-logind[1321]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:10:32.620535 systemd-logind[1321]: New seat seat0. Oct 2 20:10:32.640268 bash[1357]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:10:32.659640 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:10:32.694059 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:10:32.707909 tar[1326]: ./bandwidth Oct 2 20:10:32.714134 env[1341]: time="2023-10-02T20:10:32.714077435Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:10:32.714427 env[1341]: time="2023-10-02T20:10:32.714386736Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.716607 env[1341]: time="2023-10-02T20:10:32.716571141Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:32.716704 env[1341]: time="2023-10-02T20:10:32.716688841Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717021 env[1341]: time="2023-10-02T20:10:32.716995741Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717118 env[1341]: time="2023-10-02T20:10:32.717103042Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717186 env[1341]: time="2023-10-02T20:10:32.717173042Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:10:32.717243 env[1341]: time="2023-10-02T20:10:32.717230942Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717390 env[1341]: time="2023-10-02T20:10:32.717372642Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717725 env[1341]: time="2023-10-02T20:10:32.717704043Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:10:32.717996 env[1341]: time="2023-10-02T20:10:32.717974444Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:10:32.718079 env[1341]: time="2023-10-02T20:10:32.718064144Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:10:32.718196 env[1341]: time="2023-10-02T20:10:32.718179544Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:10:32.718268 env[1341]: time="2023-10-02T20:10:32.718256144Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:10:32.732699 env[1341]: time="2023-10-02T20:10:32.732667175Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:10:32.732782 env[1341]: time="2023-10-02T20:10:32.732706675Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:10:32.732782 env[1341]: time="2023-10-02T20:10:32.732726776Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:10:32.732782 env[1341]: time="2023-10-02T20:10:32.732776876Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.732909 env[1341]: time="2023-10-02T20:10:32.732797076Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.732909 env[1341]: time="2023-10-02T20:10:32.732815476Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.732909 env[1341]: time="2023-10-02T20:10:32.732888676Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733021 env[1341]: time="2023-10-02T20:10:32.732909776Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733021 env[1341]: time="2023-10-02T20:10:32.732928976Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733021 env[1341]: time="2023-10-02T20:10:32.732947876Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733021 env[1341]: time="2023-10-02T20:10:32.732965776Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733021 env[1341]: time="2023-10-02T20:10:32.732986176Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:10:32.733202 env[1341]: time="2023-10-02T20:10:32.733101876Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:10:32.733202 env[1341]: time="2023-10-02T20:10:32.733195277Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:10:32.733644 env[1341]: time="2023-10-02T20:10:32.733618277Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:10:32.733711 env[1341]: time="2023-10-02T20:10:32.733661578Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733711 env[1341]: time="2023-10-02T20:10:32.733680378Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:10:32.733783 env[1341]: time="2023-10-02T20:10:32.733744278Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733783 env[1341]: time="2023-10-02T20:10:32.733764178Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733861 env[1341]: time="2023-10-02T20:10:32.733781978Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733900 env[1341]: time="2023-10-02T20:10:32.733858278Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733900 env[1341]: time="2023-10-02T20:10:32.733876478Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.733900 env[1341]: time="2023-10-02T20:10:32.733894878Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734004 env[1341]: time="2023-10-02T20:10:32.733911478Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734004 env[1341]: time="2023-10-02T20:10:32.733929978Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734004 env[1341]: time="2023-10-02T20:10:32.733950978Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:10:32.734123 env[1341]: time="2023-10-02T20:10:32.734092378Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734163 env[1341]: time="2023-10-02T20:10:32.734120079Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734163 env[1341]: time="2023-10-02T20:10:32.734140579Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734163 env[1341]: time="2023-10-02T20:10:32.734157579Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:10:32.734271 env[1341]: time="2023-10-02T20:10:32.734179079Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:10:32.734271 env[1341]: time="2023-10-02T20:10:32.734195979Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:10:32.734271 env[1341]: time="2023-10-02T20:10:32.734226479Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:10:32.734271 env[1341]: time="2023-10-02T20:10:32.734266179Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:10:32.734627 env[1341]: time="2023-10-02T20:10:32.734554779Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.734644180Z" level=info msg="Connect containerd service" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.734683280Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.735856582Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.735987983Z" level=info msg="Start subscribing containerd event" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736045083Z" level=info msg="Start recovering state" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736123083Z" level=info msg="Start event monitor" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736152183Z" level=info msg="Start snapshots syncer" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736167683Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736173983Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736242283Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:10:32.759900 env[1341]: time="2023-10-02T20:10:32.736178883Z" level=info msg="Start streaming server" Oct 2 20:10:32.736369 systemd[1]: Started containerd.service. Oct 2 20:10:32.781285 env[1341]: time="2023-10-02T20:10:32.781197080Z" level=info msg="containerd successfully booted in 0.222539s" Oct 2 20:10:32.812227 dbus-daemon[1308]: [system] SELinux support is enabled Oct 2 20:10:32.812398 systemd[1]: Started dbus.service. Oct 2 20:10:32.817481 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:10:32.817530 systemd[1]: Reached target system-config.target. Oct 2 20:10:32.819912 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:10:32.819932 systemd[1]: Reached target user-config.target. Oct 2 20:10:32.823116 systemd[1]: Started systemd-logind.service. Oct 2 20:10:32.824287 dbus-daemon[1308]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:10:32.848771 tar[1326]: ./ptp Oct 2 20:10:32.968372 tar[1326]: ./vlan Oct 2 20:10:33.063258 tar[1326]: ./host-device Oct 2 20:10:33.156796 tar[1326]: ./tuning Oct 2 20:10:33.240230 update_engine[1322]: I1002 20:10:33.239254 1322 main.cc:92] Flatcar Update Engine starting Oct 2 20:10:33.252513 tar[1326]: ./vrf Oct 2 20:10:33.280910 systemd[1]: Started update-engine.service. Oct 2 20:10:33.283584 update_engine[1322]: I1002 20:10:33.282253 1322 update_check_scheduler.cc:74] Next update check in 7m25s Oct 2 20:10:33.285971 systemd[1]: Started locksmithd.service. Oct 2 20:10:33.303083 systemd[1]: Finished prepare-critools.service. Oct 2 20:10:33.325415 tar[1326]: ./sbr Oct 2 20:10:33.360540 tar[1326]: ./tap Oct 2 20:10:33.400457 tar[1326]: ./dhcp Oct 2 20:10:33.502846 tar[1326]: ./static Oct 2 20:10:33.532071 tar[1326]: ./firewall Oct 2 20:10:33.577272 tar[1326]: ./macvlan Oct 2 20:10:33.617229 tar[1326]: ./dummy Oct 2 20:10:33.657063 tar[1326]: ./bridge Oct 2 20:10:33.700868 tar[1326]: ./ipvlan Oct 2 20:10:33.741373 tar[1326]: ./portmap Oct 2 20:10:33.780066 tar[1326]: ./host-local Oct 2 20:10:33.854376 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:10:33.985913 sshd_keygen[1334]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:10:34.006090 systemd[1]: Finished sshd-keygen.service. Oct 2 20:10:34.010361 systemd[1]: Starting issuegen.service... Oct 2 20:10:34.013899 systemd[1]: Started waagent.service. Oct 2 20:10:34.017988 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:10:34.018201 systemd[1]: Finished issuegen.service. Oct 2 20:10:34.022374 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:10:34.040908 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:10:34.045240 systemd[1]: Started getty@tty1.service. Oct 2 20:10:34.048752 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:10:34.051600 systemd[1]: Reached target getty.target. Oct 2 20:10:34.054556 systemd[1]: Reached target multi-user.target. Oct 2 20:10:34.058257 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:10:34.067315 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:10:34.067508 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:10:34.070312 systemd[1]: Startup finished in 1.018s (firmware) + 22.655s (loader) + 955ms (kernel) + 22.859s (initrd) + 24.315s (userspace) = 1min 11.804s. Oct 2 20:10:34.451586 login[1439]: pam_lastlog(login:session): file /var/log/lastlog is locked/write Oct 2 20:10:34.452165 login[1438]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:10:34.474091 systemd-logind[1321]: New session 2 of user core. Oct 2 20:10:34.475432 systemd[1]: Created slice user-500.slice. Oct 2 20:10:34.476944 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:10:34.499486 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:10:34.501421 systemd[1]: Starting user@500.service... Oct 2 20:10:34.504697 (systemd)[1445]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:34.723185 systemd[1445]: Queued start job for default target default.target. Oct 2 20:10:34.723804 systemd[1445]: Reached target paths.target. Oct 2 20:10:34.723832 systemd[1445]: Reached target sockets.target. Oct 2 20:10:34.723848 systemd[1445]: Reached target timers.target. Oct 2 20:10:34.723862 systemd[1445]: Reached target basic.target. Oct 2 20:10:34.723985 systemd[1]: Started user@500.service. Oct 2 20:10:34.725141 systemd[1]: Started session-2.scope. Oct 2 20:10:34.725712 systemd[1445]: Reached target default.target. Oct 2 20:10:34.725897 systemd[1445]: Startup finished in 215ms. Oct 2 20:10:35.129250 locksmithd[1421]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:10:35.453766 login[1439]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:10:35.459599 systemd[1]: Started session-1.scope. Oct 2 20:10:35.460190 systemd-logind[1321]: New session 1 of user core. Oct 2 20:10:41.198952 waagent[1433]: 2023-10-02T20:10:41.198834Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:10:41.203320 waagent[1433]: 2023-10-02T20:10:41.203246Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:10:41.214985 waagent[1433]: 2023-10-02T20:10:41.204462Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:10:41.214985 waagent[1433]: 2023-10-02T20:10:41.205722Z INFO Daemon Daemon Run daemon Oct 2 20:10:41.214985 waagent[1433]: 2023-10-02T20:10:41.207316Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:10:41.218326 waagent[1433]: 2023-10-02T20:10:41.218210Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:10:41.225661 waagent[1433]: 2023-10-02T20:10:41.225554Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.226852Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.227827Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.229411Z INFO Daemon Daemon Activate resource disk Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.230232Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.237991Z INFO Daemon Daemon Found device: None Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.239046Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.240006Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.241798Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:10:41.257834 waagent[1433]: 2023-10-02T20:10:41.242905Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:10:41.260521 waagent[1433]: 2023-10-02T20:10:41.260298Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:10:41.267975 waagent[1433]: 2023-10-02T20:10:41.267864Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:10:41.277357 waagent[1433]: 2023-10-02T20:10:41.269358Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:10:41.277357 waagent[1433]: 2023-10-02T20:10:41.270444Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:10:41.291607 waagent[1433]: 2023-10-02T20:10:41.290036Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:10:41.358586 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:10:41.375645 waagent[1433]: 2023-10-02T20:10:41.375506Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:10:41.378775 waagent[1433]: 2023-10-02T20:10:41.378694Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:10:41.382104 waagent[1433]: 2023-10-02T20:10:41.382035Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:10:41.385669 waagent[1433]: 2023-10-02T20:10:41.385603Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:10:41.388637 waagent[1433]: 2023-10-02T20:10:41.388574Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:10:41.392007 waagent[1433]: 2023-10-02T20:10:41.391947Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:10:41.514159 waagent[1433]: 2023-10-02T20:10:41.513995Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:10:41.522734 waagent[1433]: 2023-10-02T20:10:41.516086Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:10:41.522734 waagent[1433]: 2023-10-02T20:10:41.517018Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:10:42.137552 waagent[1433]: 2023-10-02T20:10:42.137377Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:10:42.149284 waagent[1433]: 2023-10-02T20:10:42.149210Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:10:42.152722 waagent[1433]: 2023-10-02T20:10:42.152660Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:10:46.137313 waagent[1433]: 2023-10-02T20:10:46.137185Z INFO Daemon Daemon Found private key matching thumbprint CA22102757CEF9C34C4CEA47F16E6044D3092989 Oct 2 20:10:46.142150 waagent[1433]: 2023-10-02T20:10:46.142072Z INFO Daemon Daemon Certificate with thumbprint 2957ECF0A9BECF84F7BCAB5BC811C4F1FC9171B7 has no matching private key. Oct 2 20:10:46.147197 waagent[1433]: 2023-10-02T20:10:46.147121Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:10:46.183114 waagent[1433]: 2023-10-02T20:10:46.183030Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 484c2ae6-ad50-49bd-843a-82e9af00f6bd New eTag: 17125111041345091403] Oct 2 20:10:46.189185 waagent[1433]: 2023-10-02T20:10:46.189119Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:10:46.200094 waagent[1433]: 2023-10-02T20:10:46.200033Z INFO Daemon Daemon Starting provisioning Oct 2 20:10:46.203056 waagent[1433]: 2023-10-02T20:10:46.202991Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:10:46.205780 waagent[1433]: 2023-10-02T20:10:46.205718Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-7abbcb6e32] Oct 2 20:10:46.226741 waagent[1433]: 2023-10-02T20:10:46.226616Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-7abbcb6e32] Oct 2 20:10:46.230547 waagent[1433]: 2023-10-02T20:10:46.230469Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:10:46.234043 waagent[1433]: 2023-10-02T20:10:46.233974Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:10:46.248148 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:10:46.248397 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:10:46.248494 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:10:46.248822 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:10:46.253467 systemd-networkd[1195]: eth0: DHCPv6 lease lost Oct 2 20:10:46.254880 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:10:46.255091 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:10:46.257448 systemd[1]: Starting systemd-networkd.service... Oct 2 20:10:46.288348 systemd-networkd[1488]: enP56995s1: Link UP Oct 2 20:10:46.288358 systemd-networkd[1488]: enP56995s1: Gained carrier Oct 2 20:10:46.289754 systemd-networkd[1488]: eth0: Link UP Oct 2 20:10:46.289763 systemd-networkd[1488]: eth0: Gained carrier Oct 2 20:10:46.290183 systemd-networkd[1488]: lo: Link UP Oct 2 20:10:46.290192 systemd-networkd[1488]: lo: Gained carrier Oct 2 20:10:46.290509 systemd-networkd[1488]: eth0: Gained IPv6LL Oct 2 20:10:46.290786 systemd-networkd[1488]: Enumeration completed Oct 2 20:10:46.290896 systemd[1]: Started systemd-networkd.service. Oct 2 20:10:46.293176 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:10:46.296773 waagent[1433]: 2023-10-02T20:10:46.293329Z INFO Daemon Daemon Create user account if not exists Oct 2 20:10:46.300796 waagent[1433]: 2023-10-02T20:10:46.297536Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:10:46.301036 waagent[1433]: 2023-10-02T20:10:46.300960Z INFO Daemon Daemon Configure sudoer Oct 2 20:10:46.301805 systemd-networkd[1488]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:10:46.304598 waagent[1433]: 2023-10-02T20:10:46.304531Z INFO Daemon Daemon Configure sshd Oct 2 20:10:46.308429 waagent[1433]: 2023-10-02T20:10:46.306096Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:10:46.346507 systemd-networkd[1488]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:10:46.349814 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:10:46.362312 waagent[1433]: 2023-10-02T20:10:46.362181Z INFO Daemon Daemon Decode custom data Oct 2 20:10:46.366078 waagent[1433]: 2023-10-02T20:10:46.365986Z INFO Daemon Daemon Save custom data Oct 2 20:10:47.612086 waagent[1433]: 2023-10-02T20:10:47.611977Z INFO Daemon Daemon Provisioning complete Oct 2 20:10:47.625857 waagent[1433]: 2023-10-02T20:10:47.625788Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:10:47.633342 waagent[1433]: 2023-10-02T20:10:47.627158Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:10:47.633342 waagent[1433]: 2023-10-02T20:10:47.628946Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:10:47.894204 waagent[1497]: 2023-10-02T20:10:47.894044Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:10:47.894924 waagent[1497]: 2023-10-02T20:10:47.894862Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:47.895067 waagent[1497]: 2023-10-02T20:10:47.895015Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:47.906019 waagent[1497]: 2023-10-02T20:10:47.905948Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:10:47.906174 waagent[1497]: 2023-10-02T20:10:47.906121Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:10:47.966747 waagent[1497]: 2023-10-02T20:10:47.966623Z INFO ExtHandler ExtHandler Found private key matching thumbprint CA22102757CEF9C34C4CEA47F16E6044D3092989 Oct 2 20:10:47.966966 waagent[1497]: 2023-10-02T20:10:47.966903Z INFO ExtHandler ExtHandler Certificate with thumbprint 2957ECF0A9BECF84F7BCAB5BC811C4F1FC9171B7 has no matching private key. Oct 2 20:10:47.967205 waagent[1497]: 2023-10-02T20:10:47.967156Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:10:47.980394 waagent[1497]: 2023-10-02T20:10:47.980336Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: fe1dfab2-e3f7-4d97-aac8-9ef33903a50b New eTag: 17125111041345091403] Oct 2 20:10:47.980991 waagent[1497]: 2023-10-02T20:10:47.980929Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:10:48.053904 waagent[1497]: 2023-10-02T20:10:48.053743Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:10:48.063544 waagent[1497]: 2023-10-02T20:10:48.063463Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1497 Oct 2 20:10:48.066923 waagent[1497]: 2023-10-02T20:10:48.066858Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:10:48.068176 waagent[1497]: 2023-10-02T20:10:48.068119Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:10:48.129612 waagent[1497]: 2023-10-02T20:10:48.129533Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:10:48.129981 waagent[1497]: 2023-10-02T20:10:48.129922Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:10:48.137859 waagent[1497]: 2023-10-02T20:10:48.137807Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:10:48.138312 waagent[1497]: 2023-10-02T20:10:48.138256Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:10:48.139351 waagent[1497]: 2023-10-02T20:10:48.139289Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:10:48.140596 waagent[1497]: 2023-10-02T20:10:48.140539Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:10:48.141595 waagent[1497]: 2023-10-02T20:10:48.141526Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:10:48.142203 waagent[1497]: 2023-10-02T20:10:48.142151Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:48.142291 waagent[1497]: 2023-10-02T20:10:48.142234Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:48.142505 waagent[1497]: 2023-10-02T20:10:48.142452Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:10:48.142721 waagent[1497]: 2023-10-02T20:10:48.142676Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:48.143389 waagent[1497]: 2023-10-02T20:10:48.143320Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:10:48.143571 waagent[1497]: 2023-10-02T20:10:48.143505Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:48.143779 waagent[1497]: 2023-10-02T20:10:48.143731Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:10:48.143932 waagent[1497]: 2023-10-02T20:10:48.143884Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:10:48.144127 waagent[1497]: 2023-10-02T20:10:48.144085Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:10:48.145189 waagent[1497]: 2023-10-02T20:10:48.145100Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:10:48.147165 waagent[1497]: 2023-10-02T20:10:48.147045Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:10:48.147165 waagent[1497]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:10:48.147165 waagent[1497]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:10:48.147165 waagent[1497]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:10:48.147165 waagent[1497]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:48.147165 waagent[1497]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:48.147165 waagent[1497]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:48.151171 waagent[1497]: 2023-10-02T20:10:48.151108Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:10:48.154592 waagent[1497]: 2023-10-02T20:10:48.150898Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:10:48.154592 waagent[1497]: 2023-10-02T20:10:48.153221Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:10:48.163050 waagent[1497]: 2023-10-02T20:10:48.162985Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:10:48.163638 waagent[1497]: 2023-10-02T20:10:48.163592Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:10:48.165727 waagent[1497]: 2023-10-02T20:10:48.165671Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:10:48.175232 waagent[1497]: 2023-10-02T20:10:48.175172Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1488' Oct 2 20:10:48.228448 waagent[1497]: 2023-10-02T20:10:48.228367Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:10:48.258875 waagent[1497]: 2023-10-02T20:10:48.258751Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:10:48.258875 waagent[1497]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:10:48.258875 waagent[1497]: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:10:48.258875 waagent[1497]: 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b3:22:ff brd ff:ff:ff:ff:ff:ff Oct 2 20:10:48.258875 waagent[1497]: 3: enP56995s1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b3:22:ff brd ff:ff:ff:ff:ff:ff\ altname enP56995p0s2 Oct 2 20:10:48.258875 waagent[1497]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:10:48.258875 waagent[1497]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:10:48.258875 waagent[1497]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:10:48.258875 waagent[1497]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:10:48.258875 waagent[1497]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:10:48.258875 waagent[1497]: 2: eth0 inet6 fe80::20d:3aff:feb3:22ff/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:10:48.441620 waagent[1497]: 2023-10-02T20:10:48.441470Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 20:10:48.445310 waagent[1497]: 2023-10-02T20:10:48.445213Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 20:10:48.445310 waagent[1497]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:48.445310 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 20:10:48.445310 waagent[1497]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:48.445310 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 20:10:48.445310 waagent[1497]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:48.445310 waagent[1497]: pkts bytes target prot opt in out source destination Oct 2 20:10:48.445310 waagent[1497]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:10:48.445310 waagent[1497]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:10:48.447286 waagent[1497]: 2023-10-02T20:10:48.447234Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:10:48.715148 waagent[1497]: 2023-10-02T20:10:48.715022Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 20:10:49.634031 waagent[1433]: 2023-10-02T20:10:49.633850Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:10:49.641597 waagent[1433]: 2023-10-02T20:10:49.641527Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 20:10:50.618188 waagent[1538]: 2023-10-02T20:10:50.618082Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 20:10:50.618877 waagent[1538]: 2023-10-02T20:10:50.618813Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:10:50.619028 waagent[1538]: 2023-10-02T20:10:50.618974Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:10:50.628321 waagent[1538]: 2023-10-02T20:10:50.628223Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:10:50.628723 waagent[1538]: 2023-10-02T20:10:50.628666Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:50.628884 waagent[1538]: 2023-10-02T20:10:50.628836Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:50.639673 waagent[1538]: 2023-10-02T20:10:50.639605Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:10:50.647424 waagent[1538]: 2023-10-02T20:10:50.647341Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:10:50.648283 waagent[1538]: 2023-10-02T20:10:50.648224Z INFO ExtHandler Oct 2 20:10:50.648451 waagent[1538]: 2023-10-02T20:10:50.648379Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 08e4ac94-75b0-4342-b143-48d6ef6ac512 eTag: 17125111041345091403 source: Fabric] Oct 2 20:10:50.649127 waagent[1538]: 2023-10-02T20:10:50.649071Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:10:50.650180 waagent[1538]: 2023-10-02T20:10:50.650120Z INFO ExtHandler Oct 2 20:10:50.650314 waagent[1538]: 2023-10-02T20:10:50.650264Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:10:50.656558 waagent[1538]: 2023-10-02T20:10:50.656507Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:10:50.656965 waagent[1538]: 2023-10-02T20:10:50.656917Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:10:50.675873 waagent[1538]: 2023-10-02T20:10:50.675814Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:10:50.737954 waagent[1538]: 2023-10-02T20:10:50.737827Z INFO ExtHandler Downloaded certificate {'thumbprint': 'CA22102757CEF9C34C4CEA47F16E6044D3092989', 'hasPrivateKey': True} Oct 2 20:10:50.738928 waagent[1538]: 2023-10-02T20:10:50.738861Z INFO ExtHandler Downloaded certificate {'thumbprint': '2957ECF0A9BECF84F7BCAB5BC811C4F1FC9171B7', 'hasPrivateKey': False} Oct 2 20:10:50.739909 waagent[1538]: 2023-10-02T20:10:50.739847Z INFO ExtHandler Fetch goal state completed Oct 2 20:10:50.760590 waagent[1538]: 2023-10-02T20:10:50.760523Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1538 Oct 2 20:10:50.763793 waagent[1538]: 2023-10-02T20:10:50.763734Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:10:50.765248 waagent[1538]: 2023-10-02T20:10:50.765192Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:10:50.769812 waagent[1538]: 2023-10-02T20:10:50.769760Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:10:50.770157 waagent[1538]: 2023-10-02T20:10:50.770102Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:10:50.777704 waagent[1538]: 2023-10-02T20:10:50.777651Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:10:50.778139 waagent[1538]: 2023-10-02T20:10:50.778083Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:10:50.801126 waagent[1538]: 2023-10-02T20:10:50.801025Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 20:10:50.803834 waagent[1538]: 2023-10-02T20:10:50.803736Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 20:10:50.809150 waagent[1538]: 2023-10-02T20:10:50.809092Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:10:50.810530 waagent[1538]: 2023-10-02T20:10:50.810472Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:10:50.810873 waagent[1538]: 2023-10-02T20:10:50.810819Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:50.811589 waagent[1538]: 2023-10-02T20:10:50.811537Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:10:50.811748 waagent[1538]: 2023-10-02T20:10:50.811699Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:50.812316 waagent[1538]: 2023-10-02T20:10:50.812260Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:10:50.812493 waagent[1538]: 2023-10-02T20:10:50.812445Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:10:50.813448 waagent[1538]: 2023-10-02T20:10:50.813376Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:10:50.813558 waagent[1538]: 2023-10-02T20:10:50.813501Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:10:50.813833 waagent[1538]: 2023-10-02T20:10:50.813779Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:10:50.814226 waagent[1538]: 2023-10-02T20:10:50.814173Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:10:50.814591 waagent[1538]: 2023-10-02T20:10:50.814539Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:10:50.815287 waagent[1538]: 2023-10-02T20:10:50.815230Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:10:50.815287 waagent[1538]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:10:50.815287 waagent[1538]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:10:50.815287 waagent[1538]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:10:50.815287 waagent[1538]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:50.815287 waagent[1538]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:50.815287 waagent[1538]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:10:50.815568 waagent[1538]: 2023-10-02T20:10:50.815517Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:10:50.816083 waagent[1538]: 2023-10-02T20:10:50.816024Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:10:50.818783 waagent[1538]: 2023-10-02T20:10:50.818734Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:10:50.826174 waagent[1538]: 2023-10-02T20:10:50.826048Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:10:50.845157 waagent[1538]: 2023-10-02T20:10:50.845055Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:10:50.845157 waagent[1538]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:10:50.845157 waagent[1538]: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:10:50.845157 waagent[1538]: 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b3:22:ff brd ff:ff:ff:ff:ff:ff Oct 2 20:10:50.845157 waagent[1538]: 3: enP56995s1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b3:22:ff brd ff:ff:ff:ff:ff:ff\ altname enP56995p0s2 Oct 2 20:10:50.845157 waagent[1538]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:10:50.845157 waagent[1538]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:10:50.845157 waagent[1538]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:10:50.845157 waagent[1538]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:10:50.845157 waagent[1538]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:10:50.845157 waagent[1538]: 2: eth0 inet6 fe80::20d:3aff:feb3:22ff/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:10:50.846983 waagent[1538]: 2023-10-02T20:10:50.846924Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 20:10:50.901844 waagent[1538]: 2023-10-02T20:10:50.901725Z INFO ExtHandler ExtHandler Oct 2 20:10:50.906168 waagent[1538]: 2023-10-02T20:10:50.906052Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 7f205b79-0c74-48fe-93ab-d51cd94fb919 correlation 74ad07d3-1e9e-4e67-8612-3c197e297d7c created: 2023-10-02T20:09:11.954727Z] Oct 2 20:10:50.907521 waagent[1538]: 2023-10-02T20:10:50.907444Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:10:50.915234 waagent[1538]: 2023-10-02T20:10:50.915173Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 13 ms] Oct 2 20:10:50.927799 waagent[1538]: 2023-10-02T20:10:50.927730Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:10:50.927799 waagent[1538]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:50.927799 waagent[1538]: pkts bytes target prot opt in out source destination Oct 2 20:10:50.927799 waagent[1538]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:50.927799 waagent[1538]: pkts bytes target prot opt in out source destination Oct 2 20:10:50.927799 waagent[1538]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:10:50.927799 waagent[1538]: pkts bytes target prot opt in out source destination Oct 2 20:10:50.927799 waagent[1538]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:10:50.927799 waagent[1538]: 164 19161 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:10:50.927799 waagent[1538]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:10:50.943704 waagent[1538]: 2023-10-02T20:10:50.943637Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:10:50.956822 waagent[1538]: 2023-10-02T20:10:50.956744Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: ED0E38FB-B098-40A5-9065-E4CC0BD890AB;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:11:10.848356 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 20:11:18.813832 systemd[1]: Created slice system-sshd.slice. Oct 2 20:11:18.815440 systemd[1]: Started sshd@0-10.200.8.15:22-10.200.12.6:42788.service. Oct 2 20:11:18.963610 update_engine[1322]: I1002 20:11:18.963546 1322 update_attempter.cc:505] Updating boot flags... Oct 2 20:11:19.817092 sshd[1577]: Accepted publickey for core from 10.200.12.6 port 42788 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:19.818786 sshd[1577]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:19.823835 systemd-logind[1321]: New session 3 of user core. Oct 2 20:11:19.824938 systemd[1]: Started session-3.scope. Oct 2 20:11:20.354608 systemd[1]: Started sshd@1-10.200.8.15:22-10.200.12.6:42792.service. Oct 2 20:11:20.970240 sshd[1648]: Accepted publickey for core from 10.200.12.6 port 42792 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:20.971874 sshd[1648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:20.977433 systemd[1]: Started session-4.scope. Oct 2 20:11:20.977918 systemd-logind[1321]: New session 4 of user core. Oct 2 20:11:21.411501 sshd[1648]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:21.414772 systemd[1]: sshd@1-10.200.8.15:22-10.200.12.6:42792.service: Deactivated successfully. Oct 2 20:11:21.415766 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:11:21.416565 systemd-logind[1321]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:11:21.417376 systemd-logind[1321]: Removed session 4. Oct 2 20:11:21.518012 systemd[1]: Started sshd@2-10.200.8.15:22-10.200.12.6:42806.service. Oct 2 20:11:22.176113 sshd[1654]: Accepted publickey for core from 10.200.12.6 port 42806 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:22.177755 sshd[1654]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:22.183236 systemd[1]: Started session-5.scope. Oct 2 20:11:22.183949 systemd-logind[1321]: New session 5 of user core. Oct 2 20:11:22.619494 sshd[1654]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:22.622666 systemd[1]: sshd@2-10.200.8.15:22-10.200.12.6:42806.service: Deactivated successfully. Oct 2 20:11:22.623570 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:11:22.624148 systemd-logind[1321]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:11:22.624874 systemd-logind[1321]: Removed session 5. Oct 2 20:11:22.725164 systemd[1]: Started sshd@3-10.200.8.15:22-10.200.12.6:42816.service. Oct 2 20:11:23.348207 sshd[1660]: Accepted publickey for core from 10.200.12.6 port 42816 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:23.349825 sshd[1660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:23.355372 systemd[1]: Started session-6.scope. Oct 2 20:11:23.356237 systemd-logind[1321]: New session 6 of user core. Oct 2 20:11:23.791376 sshd[1660]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:23.794881 systemd[1]: sshd@3-10.200.8.15:22-10.200.12.6:42816.service: Deactivated successfully. Oct 2 20:11:23.795831 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:11:23.796631 systemd-logind[1321]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:11:23.797462 systemd-logind[1321]: Removed session 6. Oct 2 20:11:23.898890 systemd[1]: Started sshd@4-10.200.8.15:22-10.200.12.6:42824.service. Oct 2 20:11:24.518573 sshd[1668]: Accepted publickey for core from 10.200.12.6 port 42824 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:24.519950 sshd[1668]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:24.525330 systemd[1]: Started session-7.scope. Oct 2 20:11:24.525913 systemd-logind[1321]: New session 7 of user core. Oct 2 20:11:25.077422 sudo[1671]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:11:25.077766 sudo[1671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:25.099629 dbus-daemon[1308]: \xd0M\x98\xcc\xc0U: received setenforce notice (enforcing=-519152640) Oct 2 20:11:25.101525 sudo[1671]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:25.222520 sshd[1668]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:25.225535 systemd[1]: sshd@4-10.200.8.15:22-10.200.12.6:42824.service: Deactivated successfully. Oct 2 20:11:25.226540 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:11:25.227212 systemd-logind[1321]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:11:25.228105 systemd-logind[1321]: Removed session 7. Oct 2 20:11:25.325435 systemd[1]: Started sshd@5-10.200.8.15:22-10.200.12.6:42840.service. Oct 2 20:11:25.944743 sshd[1675]: Accepted publickey for core from 10.200.12.6 port 42840 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:25.946468 sshd[1675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:25.951988 systemd[1]: Started session-8.scope. Oct 2 20:11:25.952853 systemd-logind[1321]: New session 8 of user core. Oct 2 20:11:26.284556 sudo[1679]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:11:26.285041 sudo[1679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:26.287708 sudo[1679]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:26.292028 sudo[1678]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:11:26.292280 sudo[1678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:26.300767 systemd[1]: Stopping audit-rules.service... Oct 2 20:11:26.305439 kernel: kauditd_printk_skb: 4 callbacks suppressed Oct 2 20:11:26.305520 kernel: audit: type=1305 audit(1696277486.301:177): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:11:26.301000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:11:26.305745 auditctl[1682]: No rules Oct 2 20:11:26.306205 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:11:26.306359 systemd[1]: Stopped audit-rules.service. Oct 2 20:11:26.307829 systemd[1]: Starting audit-rules.service... Oct 2 20:11:26.301000 audit[1682]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff2bb4c770 a2=420 a3=0 items=0 ppid=1 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:26.328311 kernel: audit: type=1300 audit(1696277486.301:177): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff2bb4c770 a2=420 a3=0 items=0 ppid=1 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:26.328393 kernel: audit: type=1327 audit(1696277486.301:177): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:11:26.301000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:11:26.329667 augenrules[1699]: No rules Oct 2 20:11:26.330395 systemd[1]: Finished audit-rules.service. Oct 2 20:11:26.332545 sudo[1678]: pam_unix(sudo:session): session closed for user root Oct 2 20:11:26.333480 kernel: audit: type=1131 audit(1696277486.304:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.356007 kernel: audit: type=1130 audit(1696277486.328:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.356440 kernel: audit: type=1106 audit(1696277486.328:180): pid=1678 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.328000 audit[1678]: USER_END pid=1678 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.328000 audit[1678]: CRED_DISP pid=1678 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.370422 kernel: audit: type=1104 audit(1696277486.328:181): pid=1678 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.431790 sshd[1675]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:26.433000 audit[1675]: USER_END pid=1675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:26.435463 systemd[1]: sshd@5-10.200.8.15:22-10.200.12.6:42840.service: Deactivated successfully. Oct 2 20:11:26.436265 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:11:26.437566 systemd-logind[1321]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:11:26.438596 systemd-logind[1321]: Removed session 8. Oct 2 20:11:26.433000 audit[1675]: CRED_DISP pid=1675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:26.464750 kernel: audit: type=1106 audit(1696277486.433:182): pid=1675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:26.464811 kernel: audit: type=1104 audit(1696277486.433:183): pid=1675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:26.464839 kernel: audit: type=1131 audit(1696277486.433:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:42840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:42840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:26.535696 systemd[1]: Started sshd@6-10.200.8.15:22-10.200.12.6:42844.service. Oct 2 20:11:26.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:42844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.532000 audit[1705]: USER_ACCT pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.533446 sshd[1705]: Accepted publickey for core from 10.200.12.6 port 42844 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:11:27.534000 audit[1705]: CRED_ACQ pid=1705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.534000 audit[1705]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3ca9b6a0 a2=3 a3=0 items=0 ppid=1 pid=1705 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:27.534000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:11:27.534961 sshd[1705]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:11:27.539961 systemd[1]: Started session-9.scope. Oct 2 20:11:27.540580 systemd-logind[1321]: New session 9 of user core. Oct 2 20:11:27.544000 audit[1705]: USER_START pid=1705 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.546000 audit[1707]: CRED_ACQ pid=1707 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:11:27.873000 audit[1708]: USER_ACCT pid=1708 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.873000 audit[1708]: CRED_REFR pid=1708 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:27.874240 sudo[1708]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:11:27.874520 sudo[1708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:11:27.875000 audit[1708]: USER_START pid=1708 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:11:29.049549 systemd[1]: Starting docker.service... Oct 2 20:11:29.088498 env[1723]: time="2023-10-02T20:11:29.088456663Z" level=info msg="Starting up" Oct 2 20:11:29.090021 env[1723]: time="2023-10-02T20:11:29.089993764Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:11:29.090021 env[1723]: time="2023-10-02T20:11:29.090011964Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:11:29.090190 env[1723]: time="2023-10-02T20:11:29.090040164Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 20:11:29.090190 env[1723]: time="2023-10-02T20:11:29.090053264Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:11:29.092082 env[1723]: time="2023-10-02T20:11:29.092053464Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:11:29.092082 env[1723]: time="2023-10-02T20:11:29.092071664Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:11:29.092222 env[1723]: time="2023-10-02T20:11:29.092088964Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 20:11:29.092222 env[1723]: time="2023-10-02T20:11:29.092101064Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:11:29.097564 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport74943504-merged.mount: Deactivated successfully. Oct 2 20:11:29.247616 env[1723]: time="2023-10-02T20:11:29.247570072Z" level=info msg="Loading containers: start." Oct 2 20:11:29.281000 audit[1750]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.281000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd1da045a0 a2=0 a3=7ffd1da0458c items=0 ppid=1723 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.281000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:11:29.283000 audit[1752]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.283000 audit[1752]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff56f64a60 a2=0 a3=7fff56f64a4c items=0 ppid=1723 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.283000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:11:29.285000 audit[1754]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1754 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.285000 audit[1754]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff50c0f560 a2=0 a3=7fff50c0f54c items=0 ppid=1723 pid=1754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.285000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:11:29.286000 audit[1756]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.286000 audit[1756]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd2a7df730 a2=0 a3=7ffd2a7df71c items=0 ppid=1723 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.286000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:11:29.288000 audit[1758]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.288000 audit[1758]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffef7a48250 a2=0 a3=7ffef7a4823c items=0 ppid=1723 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.288000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:11:29.290000 audit[1760]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.290000 audit[1760]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdf1a4d910 a2=0 a3=7ffdf1a4d8fc items=0 ppid=1723 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.290000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:11:29.307000 audit[1762]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.307000 audit[1762]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff3460be20 a2=0 a3=7fff3460be0c items=0 ppid=1723 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.307000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:11:29.309000 audit[1764]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.309000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffff6cada40 a2=0 a3=7ffff6cada2c items=0 ppid=1723 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.309000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:11:29.311000 audit[1766]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.311000 audit[1766]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff0f2d3b10 a2=0 a3=7fff0f2d3afc items=0 ppid=1723 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.311000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:29.328000 audit[1770]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.328000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe9a2e2920 a2=0 a3=7ffe9a2e290c items=0 ppid=1723 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.328000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:29.329000 audit[1771]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.329000 audit[1771]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcbba0bbc0 a2=0 a3=7ffcbba0bbac items=0 ppid=1723 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.329000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:29.366431 kernel: Initializing XFRM netlink socket Oct 2 20:11:29.400794 env[1723]: time="2023-10-02T20:11:29.400748081Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:11:29.455000 audit[1779]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.455000 audit[1779]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc4d25f010 a2=0 a3=7ffc4d25effc items=0 ppid=1723 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:11:29.478000 audit[1782]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.478000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffeccdbfd0 a2=0 a3=7fffeccdbfbc items=0 ppid=1723 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.478000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:11:29.481000 audit[1785]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.481000 audit[1785]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffea7796e60 a2=0 a3=7ffea7796e4c items=0 ppid=1723 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.481000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:11:29.483000 audit[1787]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.483000 audit[1787]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd5a16bf70 a2=0 a3=7ffd5a16bf5c items=0 ppid=1723 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.483000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:11:29.485000 audit[1789]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1789 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.485000 audit[1789]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe49f9ac00 a2=0 a3=7ffe49f9abec items=0 ppid=1723 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:11:29.487000 audit[1791]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.487000 audit[1791]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdbfa3a780 a2=0 a3=7ffdbfa3a76c items=0 ppid=1723 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.487000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:11:29.489000 audit[1793]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.489000 audit[1793]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd3b351550 a2=0 a3=7ffd3b35153c items=0 ppid=1723 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.489000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:11:29.491000 audit[1795]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1795 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.491000 audit[1795]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fffc197c600 a2=0 a3=7fffc197c5ec items=0 ppid=1723 pid=1795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:11:29.492000 audit[1797]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1797 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.492000 audit[1797]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff47819790 a2=0 a3=7fff4781977c items=0 ppid=1723 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.492000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:11:29.494000 audit[1799]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.494000 audit[1799]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff68a82120 a2=0 a3=7fff68a8210c items=0 ppid=1723 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.494000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:11:29.496000 audit[1801]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1801 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.496000 audit[1801]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd36d386c0 a2=0 a3=7ffd36d386ac items=0 ppid=1723 pid=1801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.496000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:11:29.497536 systemd-networkd[1488]: docker0: Link UP Oct 2 20:11:29.515000 audit[1805]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.515000 audit[1805]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc7a1059b0 a2=0 a3=7ffc7a10599c items=0 ppid=1723 pid=1805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.515000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:29.516000 audit[1806]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1806 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:29.516000 audit[1806]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffee257daf0 a2=0 a3=7ffee257dadc items=0 ppid=1723 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:29.516000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:11:29.517428 env[1723]: time="2023-10-02T20:11:29.517373787Z" level=info msg="Loading containers: done." Oct 2 20:11:29.529019 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck704516910-merged.mount: Deactivated successfully. Oct 2 20:11:29.578792 env[1723]: time="2023-10-02T20:11:29.578681390Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:11:29.579627 env[1723]: time="2023-10-02T20:11:29.579600690Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:11:29.579855 env[1723]: time="2023-10-02T20:11:29.579837590Z" level=info msg="Daemon has completed initialization" Oct 2 20:11:29.615086 env[1723]: time="2023-10-02T20:11:29.615041192Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:11:29.615302 systemd[1]: Started docker.service. Oct 2 20:11:29.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:29.634502 systemd[1]: Reloading. Oct 2 20:11:29.697959 /usr/lib/systemd/system-generators/torcx-generator[1853]: time="2023-10-02T20:11:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:11:29.698415 /usr/lib/systemd/system-generators/torcx-generator[1853]: time="2023-10-02T20:11:29Z" level=info msg="torcx already run" Oct 2 20:11:29.800912 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:11:29.800933 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:11:29.818706 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.884000 audit: BPF prog-id=38 op=LOAD Oct 2 20:11:29.884000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.885000 audit: BPF prog-id=39 op=LOAD Oct 2 20:11:29.885000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.886000 audit: BPF prog-id=40 op=LOAD Oct 2 20:11:29.886000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.887000 audit: BPF prog-id=41 op=LOAD Oct 2 20:11:29.887000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit: BPF prog-id=42 op=LOAD Oct 2 20:11:29.888000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit: BPF prog-id=43 op=LOAD Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.888000 audit: BPF prog-id=44 op=LOAD Oct 2 20:11:29.888000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:11:29.888000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit: BPF prog-id=45 op=LOAD Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.889000 audit: BPF prog-id=46 op=LOAD Oct 2 20:11:29.889000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:11:29.889000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit: BPF prog-id=47 op=LOAD Oct 2 20:11:29.893000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit: BPF prog-id=48 op=LOAD Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.893000 audit: BPF prog-id=49 op=LOAD Oct 2 20:11:29.893000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:11:29.893000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit: BPF prog-id=50 op=LOAD Oct 2 20:11:29.895000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit: BPF prog-id=51 op=LOAD Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:29.895000 audit: BPF prog-id=52 op=LOAD Oct 2 20:11:29.895000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:11:29.895000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:11:29.906043 systemd[1]: Started kubelet.service. Oct 2 20:11:29.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:29.973795 kubelet[1915]: E1002 20:11:29.973754 1915 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:11:29.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:29.975531 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:29.975637 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:33.894879 env[1341]: time="2023-10-02T20:11:33.894818385Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 20:11:34.744177 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount581123945.mount: Deactivated successfully. Oct 2 20:11:36.874648 env[1341]: time="2023-10-02T20:11:36.874594901Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:36.882810 env[1341]: time="2023-10-02T20:11:36.882773647Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:36.886057 env[1341]: time="2023-10-02T20:11:36.886022444Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:36.890644 env[1341]: time="2023-10-02T20:11:36.890611182Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:36.890941 env[1341]: time="2023-10-02T20:11:36.890910391Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 20:11:36.900929 env[1341]: time="2023-10-02T20:11:36.900901491Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 20:11:39.733750 env[1341]: time="2023-10-02T20:11:39.733696362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:39.751111 env[1341]: time="2023-10-02T20:11:39.751064342Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:39.759172 env[1341]: time="2023-10-02T20:11:39.759126065Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:39.763343 env[1341]: time="2023-10-02T20:11:39.763314780Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:39.763969 env[1341]: time="2023-10-02T20:11:39.763939298Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 20:11:39.774232 env[1341]: time="2023-10-02T20:11:39.774206181Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 20:11:40.051239 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:11:40.059019 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:11:40.059088 kernel: audit: type=1130 audit(1696277500.051:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.051555 systemd[1]: Stopped kubelet.service. Oct 2 20:11:40.053436 systemd[1]: Started kubelet.service. Oct 2 20:11:40.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.080843 kernel: audit: type=1131 audit(1696277500.051:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.095284 kernel: audit: type=1130 audit(1696277500.053:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:40.110550 kubelet[1944]: E1002 20:11:40.110505 1944 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:11:40.113646 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:40.113804 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:40.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:40.128423 kernel: audit: type=1131 audit(1696277500.113:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:41.673885 env[1341]: time="2023-10-02T20:11:41.673828347Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:41.682448 env[1341]: time="2023-10-02T20:11:41.682397771Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:41.689423 env[1341]: time="2023-10-02T20:11:41.689380954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:41.694886 env[1341]: time="2023-10-02T20:11:41.694850097Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:41.695718 env[1341]: time="2023-10-02T20:11:41.695682819Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 20:11:41.705898 env[1341]: time="2023-10-02T20:11:41.705868485Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 20:11:43.391757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2071494458.mount: Deactivated successfully. Oct 2 20:11:43.956194 env[1341]: time="2023-10-02T20:11:43.956140146Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:43.963674 env[1341]: time="2023-10-02T20:11:43.963635732Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:43.968219 env[1341]: time="2023-10-02T20:11:43.968181844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:43.973770 env[1341]: time="2023-10-02T20:11:43.973735682Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:43.974289 env[1341]: time="2023-10-02T20:11:43.974258995Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 20:11:43.984636 env[1341]: time="2023-10-02T20:11:43.984606851Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:11:44.473442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4104933916.mount: Deactivated successfully. Oct 2 20:11:44.499430 env[1341]: time="2023-10-02T20:11:44.499366284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.507796 env[1341]: time="2023-10-02T20:11:44.507703085Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.512650 env[1341]: time="2023-10-02T20:11:44.512621604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.518919 env[1341]: time="2023-10-02T20:11:44.518891455Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:44.519323 env[1341]: time="2023-10-02T20:11:44.519296365Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:11:44.530498 env[1341]: time="2023-10-02T20:11:44.530476935Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 20:11:50.202855 env[1341]: time="2023-10-02T20:11:50.202804618Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:50.209469 env[1341]: time="2023-10-02T20:11:50.209430255Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:50.213861 env[1341]: time="2023-10-02T20:11:50.213825445Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:50.218452 env[1341]: time="2023-10-02T20:11:50.218424540Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:50.219084 env[1341]: time="2023-10-02T20:11:50.219053953Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 20:11:50.230389 env[1341]: time="2023-10-02T20:11:50.230073580Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:11:50.301130 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:11:50.301480 systemd[1]: Stopped kubelet.service. Oct 2 20:11:50.318664 kernel: audit: type=1130 audit(1696277510.300:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.303547 systemd[1]: Started kubelet.service. Oct 2 20:11:50.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.349060 kernel: audit: type=1131 audit(1696277510.300:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.349160 kernel: audit: type=1130 audit(1696277510.300:399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.365150 kubelet[1972]: E1002 20:11:50.365109 1972 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:11:50.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:50.367059 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:11:50.367212 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:11:50.381537 kernel: audit: type=1131 audit(1696277510.366:400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:11:50.850014 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2035652237.mount: Deactivated successfully. Oct 2 20:11:51.550284 env[1341]: time="2023-10-02T20:11:51.550235673Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.560671 env[1341]: time="2023-10-02T20:11:51.560632781Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.565704 env[1341]: time="2023-10-02T20:11:51.565674182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.570622 env[1341]: time="2023-10-02T20:11:51.570588381Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:51.571153 env[1341]: time="2023-10-02T20:11:51.571119092Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 20:11:53.843917 systemd[1]: Stopped kubelet.service. Oct 2 20:11:53.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:53.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:53.871533 kernel: audit: type=1130 audit(1696277513.843:401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:53.871624 kernel: audit: type=1131 audit(1696277513.857:402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:53.881200 systemd[1]: Reloading. Oct 2 20:11:53.958225 /usr/lib/systemd/system-generators/torcx-generator[2061]: time="2023-10-02T20:11:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:11:53.958262 /usr/lib/systemd/system-generators/torcx-generator[2061]: time="2023-10-02T20:11:53Z" level=info msg="torcx already run" Oct 2 20:11:54.047560 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:11:54.047580 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:11:54.065521 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:11:54.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.147456 kernel: audit: type=1400 audit(1696277514.130:403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.176256 kernel: audit: type=1400 audit(1696277514.130:404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.176360 kernel: audit: type=1400 audit(1696277514.131:405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit: BPF prog-id=53 op=LOAD Oct 2 20:11:54.146000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit: BPF prog-id=54 op=LOAD Oct 2 20:11:54.146000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit: BPF prog-id=55 op=LOAD Oct 2 20:11:54.161000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit: BPF prog-id=56 op=LOAD Oct 2 20:11:54.175000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit: BPF prog-id=57 op=LOAD Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.175000 audit: BPF prog-id=58 op=LOAD Oct 2 20:11:54.175000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.181462 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit: BPF prog-id=59 op=LOAD Oct 2 20:11:54.180000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit: BPF prog-id=60 op=LOAD Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.180000 audit: BPF prog-id=61 op=LOAD Oct 2 20:11:54.180000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:11:54.180000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit: BPF prog-id=62 op=LOAD Oct 2 20:11:54.184000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit: BPF prog-id=63 op=LOAD Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.184000 audit: BPF prog-id=64 op=LOAD Oct 2 20:11:54.184000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:11:54.184000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit: BPF prog-id=65 op=LOAD Oct 2 20:11:54.186000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit: BPF prog-id=66 op=LOAD Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.187000 audit: BPF prog-id=67 op=LOAD Oct 2 20:11:54.187000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:11:54.187000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:11:54.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:54.203580 systemd[1]: Started kubelet.service. Oct 2 20:11:54.249118 kubelet[2124]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:11:54.249118 kubelet[2124]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:11:54.249118 kubelet[2124]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:11:54.249599 kubelet[2124]: I1002 20:11:54.249164 2124 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:11:54.484756 kubelet[2124]: I1002 20:11:54.479980 2124 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:11:54.484756 kubelet[2124]: I1002 20:11:54.480006 2124 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:11:54.484756 kubelet[2124]: I1002 20:11:54.480255 2124 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:11:54.486235 kubelet[2124]: I1002 20:11:54.486207 2124 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:11:54.487310 kubelet[2124]: E1002 20:11:54.487294 2124 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.491598 kubelet[2124]: I1002 20:11:54.491567 2124 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:11:54.491799 kubelet[2124]: I1002 20:11:54.491780 2124 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:11:54.491966 kubelet[2124]: I1002 20:11:54.491947 2124 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:11:54.492105 kubelet[2124]: I1002 20:11:54.491975 2124 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:11:54.492105 kubelet[2124]: I1002 20:11:54.491987 2124 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:11:54.492105 kubelet[2124]: I1002 20:11:54.492092 2124 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:11:54.492221 kubelet[2124]: I1002 20:11:54.492215 2124 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:11:54.492267 kubelet[2124]: I1002 20:11:54.492234 2124 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:11:54.492587 kubelet[2124]: I1002 20:11:54.492567 2124 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:11:54.492667 kubelet[2124]: I1002 20:11:54.492597 2124 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:11:54.496563 kubelet[2124]: W1002 20:11:54.496519 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7abbcb6e32&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.496654 kubelet[2124]: E1002 20:11:54.496574 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7abbcb6e32&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.496702 kubelet[2124]: W1002 20:11:54.496644 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.496702 kubelet[2124]: E1002 20:11:54.496677 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.497143 kubelet[2124]: I1002 20:11:54.497116 2124 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:11:54.497421 kubelet[2124]: W1002 20:11:54.497386 2124 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:11:54.497911 kubelet[2124]: I1002 20:11:54.497881 2124 server.go:1232] "Started kubelet" Oct 2 20:11:54.498041 kubelet[2124]: I1002 20:11:54.498028 2124 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:11:54.498139 kubelet[2124]: I1002 20:11:54.498123 2124 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:11:54.498446 kubelet[2124]: I1002 20:11:54.498428 2124 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:11:54.499583 kubelet[2124]: I1002 20:11:54.499566 2124 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:11:54.498000 audit[2124]: AVC avc: denied { mac_admin } for pid=2124 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.498000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.498000 audit[2124]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009d5ad0 a1=c0009de8a0 a2=c0009d5aa0 a3=25 items=0 ppid=1 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.498000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:54.498000 audit[2124]: AVC avc: denied { mac_admin } for pid=2124 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.498000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.498000 audit[2124]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009a1060 a1=c0009de8b8 a2=c0009d5b60 a3=25 items=0 ppid=1 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.498000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:54.500231 kubelet[2124]: I1002 20:11:54.499815 2124 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:11:54.500231 kubelet[2124]: I1002 20:11:54.499870 2124 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:11:54.500231 kubelet[2124]: I1002 20:11:54.499943 2124 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:11:54.501521 kubelet[2124]: E1002 20:11:54.501502 2124 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:11:54.501521 kubelet[2124]: E1002 20:11:54.501523 2124 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:11:54.501768 kubelet[2124]: E1002 20:11:54.501695 2124 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-7abbcb6e32.178a636984209cc7", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-7abbcb6e32", UID:"ci-3510.3.0-a-7abbcb6e32", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7abbcb6e32"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 497858759, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 497858759, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-7abbcb6e32"}': 'Post "https://10.200.8.15:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.15:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:11:54.504688 kubelet[2124]: E1002 20:11:54.504670 2124 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-7abbcb6e32\" not found" Oct 2 20:11:54.504777 kubelet[2124]: I1002 20:11:54.504702 2124 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:11:54.504824 kubelet[2124]: I1002 20:11:54.504782 2124 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:11:54.504869 kubelet[2124]: I1002 20:11:54.504825 2124 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:11:54.505092 kubelet[2124]: W1002 20:11:54.505055 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.505092 kubelet[2124]: E1002 20:11:54.505094 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.506452 kubelet[2124]: E1002 20:11:54.506437 2124 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7abbcb6e32?timeout=10s\": dial tcp 10.200.8.15:6443: connect: connection refused" interval="200ms" Oct 2 20:11:54.507000 audit[2135]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.507000 audit[2135]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffd33637b0 a2=0 a3=7fffd336379c items=0 ppid=2124 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:11:54.510000 audit[2136]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2136 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.510000 audit[2136]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda39f7590 a2=0 a3=7ffda39f757c items=0 ppid=2124 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.510000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:11:54.513000 audit[2138]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2138 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.513000 audit[2138]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd34f4a670 a2=0 a3=7ffd34f4a65c items=0 ppid=2124 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.513000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:11:54.515000 audit[2140]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2140 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.515000 audit[2140]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe1af83b90 a2=0 a3=7ffe1af83b7c items=0 ppid=2124 pid=2140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:11:54.635000 audit[2145]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.635000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff7280ad30 a2=0 a3=7fff7280ad1c items=0 ppid=2124 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.635000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:11:54.637690 kubelet[2124]: I1002 20:11:54.637573 2124 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:11:54.637000 audit[2146]: NETFILTER_CFG table=mangle:35 family=10 entries=2 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.637000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff18028ea0 a2=0 a3=7fff18028e8c items=0 ppid=2124 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:11:54.639164 kubelet[2124]: I1002 20:11:54.638798 2124 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:11:54.639164 kubelet[2124]: I1002 20:11:54.638827 2124 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:11:54.639164 kubelet[2124]: I1002 20:11:54.638849 2124 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:11:54.639164 kubelet[2124]: E1002 20:11:54.638906 2124 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:11:54.641388 kubelet[2124]: W1002 20:11:54.641246 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.641595 kubelet[2124]: E1002 20:11:54.641441 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:54.641688 kubelet[2124]: I1002 20:11:54.641668 2124 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.642372 kubelet[2124]: E1002 20:11:54.642353 2124 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.641000 audit[2148]: NETFILTER_CFG table=mangle:36 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.641000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6635e1a0 a2=0 a3=7ffe6635e18c items=0 ppid=2124 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:11:54.643102 kubelet[2124]: I1002 20:11:54.643088 2124 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:11:54.643102 kubelet[2124]: I1002 20:11:54.643103 2124 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:11:54.643215 kubelet[2124]: I1002 20:11:54.643118 2124 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:11:54.642000 audit[2149]: NETFILTER_CFG table=mangle:37 family=10 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.642000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd4cebdd10 a2=0 a3=7ffd4cebdcfc items=0 ppid=2124 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:11:54.643000 audit[2151]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.643000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd201e7970 a2=0 a3=7ffd201e795c items=0 ppid=2124 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.643000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:11:54.643000 audit[2152]: NETFILTER_CFG table=nat:39 family=10 entries=2 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.643000 audit[2152]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdfa4aa2d0 a2=0 a3=7ffdfa4aa2bc items=0 ppid=2124 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:11:54.644000 audit[2153]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:11:54.644000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc385a41d0 a2=0 a3=7ffc385a41bc items=0 ppid=2124 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:11:54.645000 audit[2154]: NETFILTER_CFG table=filter:41 family=10 entries=2 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:11:54.645000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc725c82f0 a2=0 a3=7ffc725c82dc items=0 ppid=2124 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.645000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:11:54.652198 kubelet[2124]: I1002 20:11:54.652153 2124 policy_none.go:49] "None policy: Start" Oct 2 20:11:54.653475 kubelet[2124]: I1002 20:11:54.653454 2124 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:11:54.653556 kubelet[2124]: I1002 20:11:54.653492 2124 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:11:54.661195 systemd[1]: Created slice kubepods.slice. Oct 2 20:11:54.665615 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:11:54.668668 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:11:54.677463 kubelet[2124]: I1002 20:11:54.677448 2124 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:11:54.676000 audit[2124]: AVC avc: denied { mac_admin } for pid=2124 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:54.676000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:11:54.676000 audit[2124]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aef4a0 a1=c0009cbea8 a2=c000aef470 a3=25 items=0 ppid=1 pid=2124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:54.676000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:11:54.678309 kubelet[2124]: I1002 20:11:54.678295 2124 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:11:54.678611 kubelet[2124]: I1002 20:11:54.678593 2124 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:11:54.679702 kubelet[2124]: E1002 20:11:54.679688 2124 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-7abbcb6e32\" not found" Oct 2 20:11:54.707299 kubelet[2124]: E1002 20:11:54.707261 2124 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7abbcb6e32?timeout=10s\": dial tcp 10.200.8.15:6443: connect: connection refused" interval="400ms" Oct 2 20:11:54.741444 kubelet[2124]: I1002 20:11:54.739373 2124 topology_manager.go:215] "Topology Admit Handler" podUID="e36419ef0fe53b34626e94012a545c37" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.743765 kubelet[2124]: I1002 20:11:54.743743 2124 topology_manager.go:215] "Topology Admit Handler" podUID="d3a18c5ae3da32eb4401a556de514f76" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.745507 kubelet[2124]: I1002 20:11:54.745481 2124 topology_manager.go:215] "Topology Admit Handler" podUID="685516ad5535acb596f438e6d0cbe41a" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.751086 systemd[1]: Created slice kubepods-burstable-pode36419ef0fe53b34626e94012a545c37.slice. Oct 2 20:11:54.760666 systemd[1]: Created slice kubepods-burstable-podd3a18c5ae3da32eb4401a556de514f76.slice. Oct 2 20:11:54.767462 systemd[1]: Created slice kubepods-burstable-pod685516ad5535acb596f438e6d0cbe41a.slice. Oct 2 20:11:54.844391 kubelet[2124]: I1002 20:11:54.844363 2124 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.844834 kubelet[2124]: E1002 20:11:54.844770 2124 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.906620 kubelet[2124]: I1002 20:11:54.906531 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.906798 kubelet[2124]: I1002 20:11:54.906667 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.906798 kubelet[2124]: I1002 20:11:54.906707 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.906798 kubelet[2124]: I1002 20:11:54.906739 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.906798 kubelet[2124]: I1002 20:11:54.906774 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.907021 kubelet[2124]: I1002 20:11:54.906806 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/685516ad5535acb596f438e6d0cbe41a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-7abbcb6e32\" (UID: \"685516ad5535acb596f438e6d0cbe41a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.907021 kubelet[2124]: I1002 20:11:54.906841 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.907021 kubelet[2124]: I1002 20:11:54.906880 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:54.907021 kubelet[2124]: I1002 20:11:54.906922 2124 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:55.060162 env[1341]: time="2023-10-02T20:11:55.060121880Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-7abbcb6e32,Uid:e36419ef0fe53b34626e94012a545c37,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.068799 env[1341]: time="2023-10-02T20:11:55.068764137Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-7abbcb6e32,Uid:d3a18c5ae3da32eb4401a556de514f76,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.071088 env[1341]: time="2023-10-02T20:11:55.071057178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-7abbcb6e32,Uid:685516ad5535acb596f438e6d0cbe41a,Namespace:kube-system,Attempt:0,}" Oct 2 20:11:55.108184 kubelet[2124]: E1002 20:11:55.108159 2124 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7abbcb6e32?timeout=10s\": dial tcp 10.200.8.15:6443: connect: connection refused" interval="800ms" Oct 2 20:11:55.246769 kubelet[2124]: I1002 20:11:55.246724 2124 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:55.247084 kubelet[2124]: E1002 20:11:55.247059 2124 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:55.328002 kubelet[2124]: W1002 20:11:55.327887 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7abbcb6e32&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.328002 kubelet[2124]: E1002 20:11:55.327951 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-7abbcb6e32&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.351344 kubelet[2124]: W1002 20:11:55.351290 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.351521 kubelet[2124]: E1002 20:11:55.351365 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.502115 kubelet[2124]: W1002 20:11:55.502079 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.502115 kubelet[2124]: E1002 20:11:55.502121 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.559180 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4129837513.mount: Deactivated successfully. Oct 2 20:11:55.591741 env[1341]: time="2023-10-02T20:11:55.591013598Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.596044 env[1341]: time="2023-10-02T20:11:55.596009988Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.610558 env[1341]: time="2023-10-02T20:11:55.610519951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.615805 env[1341]: time="2023-10-02T20:11:55.615770646Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.619626 env[1341]: time="2023-10-02T20:11:55.619592815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.624579 env[1341]: time="2023-10-02T20:11:55.624547805Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.626978 env[1341]: time="2023-10-02T20:11:55.626946649Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.631119 env[1341]: time="2023-10-02T20:11:55.631086124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.641118 env[1341]: time="2023-10-02T20:11:55.641081905Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.644892 env[1341]: time="2023-10-02T20:11:55.644860273Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.659002 env[1341]: time="2023-10-02T20:11:55.658970429Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.669677 env[1341]: time="2023-10-02T20:11:55.669642822Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:11:55.706083 env[1341]: time="2023-10-02T20:11:55.705900979Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:55.706083 env[1341]: time="2023-10-02T20:11:55.705939180Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:55.706083 env[1341]: time="2023-10-02T20:11:55.705949080Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:55.716820 env[1341]: time="2023-10-02T20:11:55.706104983Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6 pid=2163 runtime=io.containerd.runc.v2 Oct 2 20:11:55.721612 kubelet[2124]: W1002 20:11:55.721553 2124 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.721718 kubelet[2124]: E1002 20:11:55.721638 2124 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:11:55.728270 systemd[1]: Started cri-containerd-4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6.scope. Oct 2 20:11:55.738797 env[1341]: time="2023-10-02T20:11:55.738720173Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:55.738887 env[1341]: time="2023-10-02T20:11:55.738821275Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:55.738887 env[1341]: time="2023-10-02T20:11:55.738850876Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:55.739236 env[1341]: time="2023-10-02T20:11:55.739196682Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5c56bbaf2f6fab88c4eff0494f73b30fb72b92fe21e6546ed08dedb3a5721627 pid=2191 runtime=io.containerd.runc.v2 Oct 2 20:11:55.767113 kernel: kauditd_printk_skb: 219 callbacks suppressed Oct 2 20:11:55.767202 kernel: audit: type=1400 audit(1696277515.745:590): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.784488 kernel: audit: type=1400 audit(1696277515.745:591): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.784529 env[1341]: time="2023-10-02T20:11:55.779056904Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:11:55.784529 env[1341]: time="2023-10-02T20:11:55.779121405Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:11:55.784529 env[1341]: time="2023-10-02T20:11:55.779143306Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:11:55.784529 env[1341]: time="2023-10-02T20:11:55.779274008Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91 pid=2223 runtime=io.containerd.runc.v2 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.795123 systemd[1]: Started cri-containerd-0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91.scope. Oct 2 20:11:55.796005 systemd[1]: Started cri-containerd-5c56bbaf2f6fab88c4eff0494f73b30fb72b92fe21e6546ed08dedb3a5721627.scope. Oct 2 20:11:55.800948 kernel: audit: type=1400 audit(1696277515.745:592): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.828425 kernel: audit: type=1400 audit(1696277515.745:593): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.856777 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:11:55.856860 kernel: audit: type=1400 audit(1696277515.745:594): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.856888 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:11:55.856910 kernel: audit: backlog limit exceeded Oct 2 20:11:55.856934 kernel: audit: type=1400 audit(1696277515.745:595): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.887623 kernel: audit: type=1400 audit(1696277515.745:596): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.745000 audit: BPF prog-id=68 op=LOAD Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2163 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462386363636139663332383936646266656434306438326139353031 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2163 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462386363636139663332383936646266656434306438326139353031 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.750000 audit: BPF prog-id=69 op=LOAD Oct 2 20:11:55.750000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003a6760 items=0 ppid=2163 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462386363636139663332383936646266656434306438326139353031 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.782000 audit: BPF prog-id=70 op=LOAD Oct 2 20:11:55.782000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003a67a8 items=0 ppid=2163 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462386363636139663332383936646266656434306438326139353031 Oct 2 20:11:55.782000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:11:55.783000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { perfmon } for pid=2173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit[2173]: AVC avc: denied { bpf } for pid=2173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.783000 audit: BPF prog-id=71 op=LOAD Oct 2 20:11:55.783000 audit[2173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003a6bb8 items=0 ppid=2163 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462386363636139663332383936646266656434306438326139353031 Oct 2 20:11:55.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.872000 audit: BPF prog-id=72 op=LOAD Oct 2 20:11:55.886000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.886000 audit[2208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c6d90 items=0 ppid=2191 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353662626166326636666162383863346566663034393466373362 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit: BPF prog-id=74 op=LOAD Oct 2 20:11:55.888000 audit[2208]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c6dd8 items=0 ppid=2191 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353662626166326636666162383863346566663034393466373362 Oct 2 20:11:55.888000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:11:55.888000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.888000 audit: BPF prog-id=75 op=LOAD Oct 2 20:11:55.888000 audit[2208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c71e8 items=0 ppid=2191 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353662626166326636666162383863346566663034393466373362 Oct 2 20:11:55.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit: BPF prog-id=76 op=LOAD Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2223 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376165663433653532306161616137343936333332303765386331 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2223 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376165663433653532306161616137343936333332303765386331 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.890000 audit: BPF prog-id=77 op=LOAD Oct 2 20:11:55.890000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00030e350 items=0 ppid=2223 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376165663433653532306161616137343936333332303765386331 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.891000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00030e398 items=0 ppid=2223 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376165663433653532306161616137343936333332303765386331 Oct 2 20:11:55.894000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:11:55.894000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { perfmon } for pid=2231 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit[2231]: AVC avc: denied { bpf } for pid=2231 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:55.894000 audit: BPF prog-id=79 op=LOAD Oct 2 20:11:55.894000 audit[2231]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00030e7a8 items=0 ppid=2223 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:55.894000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376165663433653532306161616137343936333332303765386331 Oct 2 20:11:55.904984 env[1341]: time="2023-10-02T20:11:55.904943085Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-7abbcb6e32,Uid:d3a18c5ae3da32eb4401a556de514f76,Namespace:kube-system,Attempt:0,} returns sandbox id \"4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6\"" Oct 2 20:11:55.916833 kubelet[2124]: E1002 20:11:55.916808 2124 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-7abbcb6e32?timeout=10s\": dial tcp 10.200.8.15:6443: connect: connection refused" interval="1.6s" Oct 2 20:11:55.917290 env[1341]: time="2023-10-02T20:11:55.917252508Z" level=info msg="CreateContainer within sandbox \"4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:11:55.948916 env[1341]: time="2023-10-02T20:11:55.948882881Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-7abbcb6e32,Uid:e36419ef0fe53b34626e94012a545c37,Namespace:kube-system,Attempt:0,} returns sandbox id \"5c56bbaf2f6fab88c4eff0494f73b30fb72b92fe21e6546ed08dedb3a5721627\"" Oct 2 20:11:55.951143 env[1341]: time="2023-10-02T20:11:55.951080420Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-7abbcb6e32,Uid:685516ad5535acb596f438e6d0cbe41a,Namespace:kube-system,Attempt:0,} returns sandbox id \"0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91\"" Oct 2 20:11:55.952830 env[1341]: time="2023-10-02T20:11:55.952807052Z" level=info msg="CreateContainer within sandbox \"5c56bbaf2f6fab88c4eff0494f73b30fb72b92fe21e6546ed08dedb3a5721627\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:11:55.955058 env[1341]: time="2023-10-02T20:11:55.955033492Z" level=info msg="CreateContainer within sandbox \"0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:11:55.968638 env[1341]: time="2023-10-02T20:11:55.968611938Z" level=info msg="CreateContainer within sandbox \"4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d\"" Oct 2 20:11:55.969225 env[1341]: time="2023-10-02T20:11:55.969197149Z" level=info msg="StartContainer for \"f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d\"" Oct 2 20:11:55.986265 systemd[1]: Started cri-containerd-f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d.scope. Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.001000 audit: BPF prog-id=80 op=LOAD Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=2163 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323934323034386637643135383939396537646138343064646336 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=8 items=0 ppid=2163 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323934323034386637643135383939396537646138343064646336 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.002000 audit: BPF prog-id=81 op=LOAD Oct 2 20:11:56.002000 audit[2286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c00031cd00 items=0 ppid=2163 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323934323034386637643135383939396537646138343064646336 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit: BPF prog-id=82 op=LOAD Oct 2 20:11:56.003000 audit[2286]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c00031cd48 items=0 ppid=2163 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323934323034386637643135383939396537646138343064646336 Oct 2 20:11:56.003000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:11:56.003000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { perfmon } for pid=2286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit[2286]: AVC avc: denied { bpf } for pid=2286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.003000 audit: BPF prog-id=83 op=LOAD Oct 2 20:11:56.003000 audit[2286]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c00031d158 items=0 ppid=2163 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.003000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630323934323034386637643135383939396537646138343064646336 Oct 2 20:11:56.028634 env[1341]: time="2023-10-02T20:11:56.028583612Z" level=info msg="CreateContainer within sandbox \"0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005\"" Oct 2 20:11:56.029394 env[1341]: time="2023-10-02T20:11:56.029358626Z" level=info msg="StartContainer for \"1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005\"" Oct 2 20:11:56.046358 env[1341]: time="2023-10-02T20:11:56.046309825Z" level=info msg="CreateContainer within sandbox \"5c56bbaf2f6fab88c4eff0494f73b30fb72b92fe21e6546ed08dedb3a5721627\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5e1d215e30e8eee304c427a1c4b5f2011c06dafbbf95f51f2f93390d33faee0c\"" Oct 2 20:11:56.055007 env[1341]: time="2023-10-02T20:11:56.052848541Z" level=info msg="StartContainer for \"f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d\" returns successfully" Oct 2 20:11:56.055007 env[1341]: time="2023-10-02T20:11:56.053140946Z" level=info msg="StartContainer for \"5e1d215e30e8eee304c427a1c4b5f2011c06dafbbf95f51f2f93390d33faee0c\"" Oct 2 20:11:56.056357 systemd[1]: Started cri-containerd-1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005.scope. Oct 2 20:11:56.058874 kubelet[2124]: I1002 20:11:56.057801 2124 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:56.058874 kubelet[2124]: E1002 20:11:56.058530 2124 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.080000 audit: BPF prog-id=84 op=LOAD Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2223 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166373366333738346365306161626665323631323931636665343732 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2223 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166373366333738346365306161626665323631323931636665343732 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.081000 audit: BPF prog-id=85 op=LOAD Oct 2 20:11:56.081000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000218fe0 items=0 ppid=2223 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166373366333738346365306161626665323631323931636665343732 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit: BPF prog-id=86 op=LOAD Oct 2 20:11:56.082000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000219028 items=0 ppid=2223 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166373366333738346365306161626665323631323931636665343732 Oct 2 20:11:56.082000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:11:56.082000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { perfmon } for pid=2317 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit[2317]: AVC avc: denied { bpf } for pid=2317 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.082000 audit: BPF prog-id=87 op=LOAD Oct 2 20:11:56.082000 audit[2317]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000219438 items=0 ppid=2223 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166373366333738346365306161626665323631323931636665343732 Oct 2 20:11:56.102283 systemd[1]: Started cri-containerd-5e1d215e30e8eee304c427a1c4b5f2011c06dafbbf95f51f2f93390d33faee0c.scope. Oct 2 20:11:56.137876 env[1341]: time="2023-10-02T20:11:56.137771641Z" level=info msg="StartContainer for \"1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005\" returns successfully" Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.147000 audit: BPF prog-id=88 op=LOAD Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2191 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316432313565333065386565653330346334323761316334623566 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2191 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316432313565333065386565653330346334323761316334623566 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit: BPF prog-id=89 op=LOAD Oct 2 20:11:56.148000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003281d0 items=0 ppid=2191 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316432313565333065386565653330346334323761316334623566 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit: BPF prog-id=90 op=LOAD Oct 2 20:11:56.148000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000328218 items=0 ppid=2191 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316432313565333065386565653330346334323761316334623566 Oct 2 20:11:56.148000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:11:56.148000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:56.148000 audit: BPF prog-id=91 op=LOAD Oct 2 20:11:56.148000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000328628 items=0 ppid=2191 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:56.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565316432313565333065386565653330346334323761316334623566 Oct 2 20:11:56.222152 env[1341]: time="2023-10-02T20:11:56.222091431Z" level=info msg="StartContainer for \"5e1d215e30e8eee304c427a1c4b5f2011c06dafbbf95f51f2f93390d33faee0c\" returns successfully" Oct 2 20:11:56.559482 systemd[1]: run-containerd-runc-k8s.io-4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6-runc.kxT57o.mount: Deactivated successfully. Oct 2 20:11:57.660969 kubelet[2124]: I1002 20:11:57.660935 2124 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:58.643000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.643000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000539c20 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:11:58.643000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:58.647000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.647000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000f2180 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:11:58.647000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:58.735000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.735000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.735000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003e1e1e0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.735000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c00349ed80 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.742000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.742000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00349f6b0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.743000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.743000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006428ae0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.827000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.827000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c003c19080 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.827000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.827000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:58.827000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c000fb2d20 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:11:58.827000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:11:58.882550 kubelet[2124]: E1002 20:11:58.882514 2124 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-7abbcb6e32\" not found" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:58.916137 kubelet[2124]: I1002 20:11:58.916041 2124 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:11:58.985722 kubelet[2124]: E1002 20:11:58.985615 2124 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-7abbcb6e32.178a636984209cc7", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-7abbcb6e32", UID:"ci-3510.3.0-a-7abbcb6e32", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7abbcb6e32"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 497858759, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 11, 54, 497858759, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-7abbcb6e32"}': 'namespaces "default" not found' (will not retry!) Oct 2 20:11:59.498498 kubelet[2124]: I1002 20:11:59.498457 2124 apiserver.go:52] "Watching apiserver" Oct 2 20:11:59.505261 kubelet[2124]: I1002 20:11:59.505233 2124 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:12:01.890259 systemd[1]: Reloading. Oct 2 20:12:01.993398 /usr/lib/systemd/system-generators/torcx-generator[2414]: time="2023-10-02T20:12:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:12:01.993965 /usr/lib/systemd/system-generators/torcx-generator[2414]: time="2023-10-02T20:12:01Z" level=info msg="torcx already run" Oct 2 20:12:02.077484 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:12:02.077503 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:12:02.095921 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:12:02.196497 kernel: kauditd_printk_skb: 398 callbacks suppressed Oct 2 20:12:02.196629 kernel: audit: type=1400 audit(1696277522.176:694): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.226268 kernel: audit: type=1400 audit(1696277522.176:695): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.226365 kernel: audit: type=1400 audit(1696277522.176:696): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.250379 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:02.250485 kernel: audit: type=1400 audit(1696277522.176:697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.250511 kernel: audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:02.250529 kernel: audit: backlog limit exceeded Oct 2 20:12:02.250550 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.258964 kernel: audit: type=1400 audit(1696277522.176:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.259036 kernel: audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.194000 audit: BPF prog-id=92 op=LOAD Oct 2 20:12:02.194000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.196000 audit: BPF prog-id=93 op=LOAD Oct 2 20:12:02.196000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit: BPF prog-id=94 op=LOAD Oct 2 20:12:02.211000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.211000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit: BPF prog-id=95 op=LOAD Oct 2 20:12:02.225000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit: BPF prog-id=96 op=LOAD Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.225000 audit: BPF prog-id=97 op=LOAD Oct 2 20:12:02.225000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit: BPF prog-id=98 op=LOAD Oct 2 20:12:02.276000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.276000 audit: BPF prog-id=99 op=LOAD Oct 2 20:12:02.276000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:12:02.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit: BPF prog-id=100 op=LOAD Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.277000 audit: BPF prog-id=101 op=LOAD Oct 2 20:12:02.277000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:12:02.277000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.278000 audit: BPF prog-id=102 op=LOAD Oct 2 20:12:02.278000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.280000 audit: BPF prog-id=103 op=LOAD Oct 2 20:12:02.280000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.281000 audit: BPF prog-id=104 op=LOAD Oct 2 20:12:02.281000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.283000 audit: BPF prog-id=105 op=LOAD Oct 2 20:12:02.283000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit: BPF prog-id=106 op=LOAD Oct 2 20:12:02.284000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit: BPF prog-id=107 op=LOAD Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.284000 audit: BPF prog-id=108 op=LOAD Oct 2 20:12:02.284000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:12:02.284000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit: BPF prog-id=109 op=LOAD Oct 2 20:12:02.286000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.286000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit: BPF prog-id=110 op=LOAD Oct 2 20:12:02.287000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit: BPF prog-id=111 op=LOAD Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.287000 audit: BPF prog-id=112 op=LOAD Oct 2 20:12:02.287000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:12:02.287000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:12:02.305761 systemd[1]: Stopping kubelet.service... Oct 2 20:12:02.307971 kubelet[2124]: I1002 20:12:02.306067 2124 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:12:02.329136 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:12:02.329466 systemd[1]: Stopped kubelet.service. Oct 2 20:12:02.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:02.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:02.332038 systemd[1]: Started kubelet.service. Oct 2 20:12:02.400266 kubelet[2475]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:12:02.400601 kubelet[2475]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:12:02.400642 kubelet[2475]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:12:02.400757 kubelet[2475]: I1002 20:12:02.400724 2475 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:12:02.406710 kubelet[2475]: I1002 20:12:02.406686 2475 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:12:02.406881 kubelet[2475]: I1002 20:12:02.406867 2475 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:12:02.407183 kubelet[2475]: I1002 20:12:02.407165 2475 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:12:02.409379 kubelet[2475]: I1002 20:12:02.409351 2475 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:12:02.410508 kubelet[2475]: I1002 20:12:02.410493 2475 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.417623 2475 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.417862 2475 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.418053 2475 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.418087 2475 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.418100 2475 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:12:02.418740 kubelet[2475]: I1002 20:12:02.418134 2475 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:12:02.419096 kubelet[2475]: I1002 20:12:02.418219 2475 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:12:02.419096 kubelet[2475]: I1002 20:12:02.418237 2475 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:12:02.419096 kubelet[2475]: I1002 20:12:02.418265 2475 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:12:02.419096 kubelet[2475]: I1002 20:12:02.418282 2475 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:12:02.422074 kubelet[2475]: I1002 20:12:02.422058 2475 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:12:02.424611 kubelet[2475]: I1002 20:12:02.424594 2475 server.go:1232] "Started kubelet" Oct 2 20:12:02.425445 kubelet[2475]: I1002 20:12:02.425427 2475 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:12:02.426161 kubelet[2475]: I1002 20:12:02.426141 2475 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:12:02.428070 kubelet[2475]: I1002 20:12:02.428047 2475 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:12:02.428303 kubelet[2475]: I1002 20:12:02.428282 2475 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:12:02.450000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:02.450000 audit[2475]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00084cf90 a1=c000af8708 a2=c00084cf60 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:02.450000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:02.450000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:02.450000 audit[2475]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d992c0 a1=c000af8720 a2=c00084d020 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:02.450000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:02.455315 kubelet[2475]: I1002 20:12:02.451614 2475 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:12:02.455315 kubelet[2475]: I1002 20:12:02.451671 2475 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:12:02.455315 kubelet[2475]: I1002 20:12:02.451699 2475 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:12:02.457123 kubelet[2475]: E1002 20:12:02.457106 2475 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:12:02.457229 kubelet[2475]: E1002 20:12:02.457220 2475 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:12:02.461631 kubelet[2475]: I1002 20:12:02.461612 2475 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:12:02.462011 kubelet[2475]: I1002 20:12:02.461988 2475 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:12:02.462165 kubelet[2475]: I1002 20:12:02.462149 2475 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:12:02.469222 kubelet[2475]: I1002 20:12:02.469196 2475 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:12:02.471192 kubelet[2475]: I1002 20:12:02.470327 2475 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:12:02.471192 kubelet[2475]: I1002 20:12:02.470354 2475 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:12:02.471192 kubelet[2475]: I1002 20:12:02.470371 2475 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:12:02.471192 kubelet[2475]: E1002 20:12:02.470468 2475 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:12:02.522938 kubelet[2475]: I1002 20:12:02.522910 2475 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:12:02.522938 kubelet[2475]: I1002 20:12:02.522929 2475 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:12:02.522938 kubelet[2475]: I1002 20:12:02.522946 2475 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:12:02.523175 kubelet[2475]: I1002 20:12:02.523098 2475 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:12:02.523175 kubelet[2475]: I1002 20:12:02.523129 2475 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 20:12:02.523175 kubelet[2475]: I1002 20:12:02.523140 2475 policy_none.go:49] "None policy: Start" Oct 2 20:12:02.523755 kubelet[2475]: I1002 20:12:02.523734 2475 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:12:02.523755 kubelet[2475]: I1002 20:12:02.523758 2475 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:12:02.523942 kubelet[2475]: I1002 20:12:02.523924 2475 state_mem.go:75] "Updated machine memory state" Oct 2 20:12:02.527351 kubelet[2475]: I1002 20:12:02.527331 2475 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:12:02.525000 audit[2475]: AVC avc: denied { mac_admin } for pid=2475 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:02.525000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:12:02.525000 audit[2475]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00103d830 a1=c00129f458 a2=c00103d800 a3=25 items=0 ppid=1 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:02.525000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:12:02.527920 kubelet[2475]: I1002 20:12:02.527906 2475 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:12:02.528743 kubelet[2475]: I1002 20:12:02.528718 2475 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:12:02.564163 kubelet[2475]: I1002 20:12:02.564136 2475 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.570711 kubelet[2475]: I1002 20:12:02.570683 2475 topology_manager.go:215] "Topology Admit Handler" podUID="e36419ef0fe53b34626e94012a545c37" podNamespace="kube-system" podName="kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.570826 kubelet[2475]: I1002 20:12:02.570785 2475 topology_manager.go:215] "Topology Admit Handler" podUID="d3a18c5ae3da32eb4401a556de514f76" podNamespace="kube-system" podName="kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.570878 kubelet[2475]: I1002 20:12:02.570830 2475 topology_manager.go:215] "Topology Admit Handler" podUID="685516ad5535acb596f438e6d0cbe41a" podNamespace="kube-system" podName="kube-scheduler-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.578498 kubelet[2475]: W1002 20:12:02.578476 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:12:02.583775 kubelet[2475]: W1002 20:12:02.583738 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:12:02.584027 kubelet[2475]: I1002 20:12:02.584008 2475 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.584105 kubelet[2475]: I1002 20:12:02.584087 2475 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.584227 kubelet[2475]: W1002 20:12:02.584210 2475 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Oct 2 20:12:02.763386 kubelet[2475]: I1002 20:12:02.763260 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763386 kubelet[2475]: I1002 20:12:02.763316 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763386 kubelet[2475]: I1002 20:12:02.763354 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763386 kubelet[2475]: I1002 20:12:02.763390 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763733 kubelet[2475]: I1002 20:12:02.763441 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763733 kubelet[2475]: I1002 20:12:02.763487 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/685516ad5535acb596f438e6d0cbe41a-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-7abbcb6e32\" (UID: \"685516ad5535acb596f438e6d0cbe41a\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763733 kubelet[2475]: I1002 20:12:02.763527 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e36419ef0fe53b34626e94012a545c37-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-7abbcb6e32\" (UID: \"e36419ef0fe53b34626e94012a545c37\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763733 kubelet[2475]: I1002 20:12:02.763558 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:02.763733 kubelet[2475]: I1002 20:12:02.763593 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d3a18c5ae3da32eb4401a556de514f76-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-7abbcb6e32\" (UID: \"d3a18c5ae3da32eb4401a556de514f76\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" Oct 2 20:12:03.241000 audit[2504]: USER_ACCT pid=2504 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.241000 audit[2504]: CRED_REFR pid=2504 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.243094 sudo[2504]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:12:03.243359 sudo[2504]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:12:03.243000 audit[2504]: USER_START pid=2504 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.425883 kubelet[2475]: I1002 20:12:03.425845 2475 apiserver.go:52] "Watching apiserver" Oct 2 20:12:03.462514 kubelet[2475]: I1002 20:12:03.462469 2475 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:12:03.534993 kubelet[2475]: I1002 20:12:03.534896 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-7abbcb6e32" podStartSLOduration=1.534831353 podCreationTimestamp="2023-10-02 20:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:03.524603601 +0000 UTC m=+1.187236917" watchObservedRunningTime="2023-10-02 20:12:03.534831353 +0000 UTC m=+1.197464669" Oct 2 20:12:03.543808 kubelet[2475]: I1002 20:12:03.543775 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-7abbcb6e32" podStartSLOduration=1.543735386 podCreationTimestamp="2023-10-02 20:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:03.535355361 +0000 UTC m=+1.197988577" watchObservedRunningTime="2023-10-02 20:12:03.543735386 +0000 UTC m=+1.206368602" Oct 2 20:12:03.554882 kubelet[2475]: I1002 20:12:03.554853 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" podStartSLOduration=1.554823251 podCreationTimestamp="2023-10-02 20:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:03.544055491 +0000 UTC m=+1.206688707" watchObservedRunningTime="2023-10-02 20:12:03.554823251 +0000 UTC m=+1.217456567" Oct 2 20:12:03.787000 audit[2504]: USER_END pid=2504 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:03.788585 sudo[2504]: pam_unix(sudo:session): session closed for user root Oct 2 20:12:03.787000 audit[2504]: CRED_DISP pid=2504 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:05.027191 sudo[1708]: pam_unix(sudo:session): session closed for user root Oct 2 20:12:05.025000 audit[1708]: USER_END pid=1708 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:05.025000 audit[1708]: CRED_DISP pid=1708 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:12:05.125632 sshd[1705]: pam_unix(sshd:session): session closed for user core Oct 2 20:12:05.125000 audit[1705]: USER_END pid=1705 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:12:05.126000 audit[1705]: CRED_DISP pid=1705 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:12:05.129718 systemd[1]: sshd@6-10.200.8.15:22-10.200.12.6:42844.service: Deactivated successfully. Oct 2 20:12:05.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:42844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:12:05.130744 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:12:05.130970 systemd[1]: session-9.scope: Consumed 3.704s CPU time. Oct 2 20:12:05.131380 systemd-logind[1321]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:12:05.132469 systemd-logind[1321]: Removed session 9. Oct 2 20:12:12.683440 kernel: kauditd_printk_skb: 262 callbacks suppressed Oct 2 20:12:12.683590 kernel: audit: type=1400 audit(1696277532.658:951): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.658000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.658000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.705141 kernel: audit: type=1400 audit(1696277532.658:952): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.705240 kernel: audit: type=1300 audit(1696277532.658:952): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fa5e80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.658000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fa5e80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.658000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.745911 kernel: audit: type=1327 audit(1696277532.658:952): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.658000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.762686 kernel: audit: type=1400 audit(1696277532.658:953): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.658000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0001d0960 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.795609 kernel: audit: type=1300 audit(1696277532.658:953): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0001d0960 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.795689 kernel: audit: type=1327 audit(1696277532.658:953): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.658000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.658000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fa5d40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.835465 kernel: audit: type=1300 audit(1696277532.658:951): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fa5d40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.835568 kernel: audit: type=1327 audit(1696277532.658:951): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.658000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:12.665000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.869720 kernel: audit: type=1400 audit(1696277532.665:954): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:12.665000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0001d0f00 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:12.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:14.194000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:12:14.194000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e23f80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:14.194000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:16.583473 kubelet[2475]: I1002 20:12:16.583436 2475 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:12:16.584322 env[1341]: time="2023-10-02T20:12:16.584280440Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:12:16.584790 kubelet[2475]: I1002 20:12:16.584768 2475 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:12:17.061721 kubelet[2475]: I1002 20:12:17.061685 2475 topology_manager.go:215] "Topology Admit Handler" podUID="32183a83-23f4-428c-8a7d-53c6ca93ad64" podNamespace="kube-system" podName="kube-proxy-jvnw4" Oct 2 20:12:17.068124 systemd[1]: Created slice kubepods-besteffort-pod32183a83_23f4_428c_8a7d_53c6ca93ad64.slice. Oct 2 20:12:17.095717 kubelet[2475]: I1002 20:12:17.095685 2475 topology_manager.go:215] "Topology Admit Handler" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" podNamespace="kube-system" podName="cilium-228p4" Oct 2 20:12:17.102111 systemd[1]: Created slice kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice. Oct 2 20:12:17.156792 kubelet[2475]: I1002 20:12:17.156708 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-88plg\" (UniqueName: \"kubernetes.io/projected/32183a83-23f4-428c-8a7d-53c6ca93ad64-kube-api-access-88plg\") pod \"kube-proxy-jvnw4\" (UID: \"32183a83-23f4-428c-8a7d-53c6ca93ad64\") " pod="kube-system/kube-proxy-jvnw4" Oct 2 20:12:17.157158 kubelet[2475]: I1002 20:12:17.156824 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-config-path\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157158 kubelet[2475]: I1002 20:12:17.156905 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-kernel\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157158 kubelet[2475]: I1002 20:12:17.156983 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hubble-tls\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157158 kubelet[2475]: I1002 20:12:17.157071 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ggz9x\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157158 kubelet[2475]: I1002 20:12:17.157148 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-cgroup\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157177 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cni-path\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157205 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-xtables-lock\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157232 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hostproc\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157261 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-etc-cni-netd\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157287 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/32183a83-23f4-428c-8a7d-53c6ca93ad64-xtables-lock\") pod \"kube-proxy-jvnw4\" (UID: \"32183a83-23f4-428c-8a7d-53c6ca93ad64\") " pod="kube-system/kube-proxy-jvnw4" Oct 2 20:12:17.157382 kubelet[2475]: I1002 20:12:17.157322 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/32183a83-23f4-428c-8a7d-53c6ca93ad64-lib-modules\") pod \"kube-proxy-jvnw4\" (UID: \"32183a83-23f4-428c-8a7d-53c6ca93ad64\") " pod="kube-system/kube-proxy-jvnw4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157348 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-bpf-maps\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157377 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-clustermesh-secrets\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157422 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-net\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157449 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-lib-modules\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157492 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/32183a83-23f4-428c-8a7d-53c6ca93ad64-kube-proxy\") pod \"kube-proxy-jvnw4\" (UID: \"32183a83-23f4-428c-8a7d-53c6ca93ad64\") " pod="kube-system/kube-proxy-jvnw4" Oct 2 20:12:17.157680 kubelet[2475]: I1002 20:12:17.157527 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-run\") pod \"cilium-228p4\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " pod="kube-system/cilium-228p4" Oct 2 20:12:17.286906 kubelet[2475]: E1002 20:12:17.286880 2475 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 20:12:17.287080 kubelet[2475]: E1002 20:12:17.287070 2475 projected.go:198] Error preparing data for projected volume kube-api-access-ggz9x for pod kube-system/cilium-228p4: configmap "kube-root-ca.crt" not found Oct 2 20:12:17.287207 kubelet[2475]: E1002 20:12:17.287197 2475 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x podName:b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b nodeName:}" failed. No retries permitted until 2023-10-02 20:12:17.787175388 +0000 UTC m=+15.449808704 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-ggz9x" (UniqueName: "kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x") pod "cilium-228p4" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b") : configmap "kube-root-ca.crt" not found Oct 2 20:12:17.289312 kubelet[2475]: E1002 20:12:17.289290 2475 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Oct 2 20:12:17.289465 kubelet[2475]: E1002 20:12:17.289453 2475 projected.go:198] Error preparing data for projected volume kube-api-access-88plg for pod kube-system/kube-proxy-jvnw4: configmap "kube-root-ca.crt" not found Oct 2 20:12:17.289593 kubelet[2475]: E1002 20:12:17.289581 2475 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/32183a83-23f4-428c-8a7d-53c6ca93ad64-kube-api-access-88plg podName:32183a83-23f4-428c-8a7d-53c6ca93ad64 nodeName:}" failed. No retries permitted until 2023-10-02 20:12:17.789563314 +0000 UTC m=+15.452196530 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-88plg" (UniqueName: "kubernetes.io/projected/32183a83-23f4-428c-8a7d-53c6ca93ad64-kube-api-access-88plg") pod "kube-proxy-jvnw4" (UID: "32183a83-23f4-428c-8a7d-53c6ca93ad64") : configmap "kube-root-ca.crt" not found Oct 2 20:12:17.525733 kubelet[2475]: I1002 20:12:17.525618 2475 topology_manager.go:215] "Topology Admit Handler" podUID="85903ade-29bb-4f88-91c7-57626ec9ada0" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-p4k72" Oct 2 20:12:17.533080 systemd[1]: Created slice kubepods-besteffort-pod85903ade_29bb_4f88_91c7_57626ec9ada0.slice. Oct 2 20:12:17.560389 kubelet[2475]: I1002 20:12:17.560359 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85903ade-29bb-4f88-91c7-57626ec9ada0-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-p4k72\" (UID: \"85903ade-29bb-4f88-91c7-57626ec9ada0\") " pod="kube-system/cilium-operator-6bc8ccdb58-p4k72" Oct 2 20:12:17.560552 kubelet[2475]: I1002 20:12:17.560437 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s6v9h\" (UniqueName: \"kubernetes.io/projected/85903ade-29bb-4f88-91c7-57626ec9ada0-kube-api-access-s6v9h\") pod \"cilium-operator-6bc8ccdb58-p4k72\" (UID: \"85903ade-29bb-4f88-91c7-57626ec9ada0\") " pod="kube-system/cilium-operator-6bc8ccdb58-p4k72" Oct 2 20:12:17.836861 env[1341]: time="2023-10-02T20:12:17.836814471Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-p4k72,Uid:85903ade-29bb-4f88-91c7-57626ec9ada0,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:17.878053 env[1341]: time="2023-10-02T20:12:17.877824517Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:17.878053 env[1341]: time="2023-10-02T20:12:17.877885718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:17.878053 env[1341]: time="2023-10-02T20:12:17.877902318Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:17.878357 env[1341]: time="2023-10-02T20:12:17.878308322Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420 pid=2547 runtime=io.containerd.runc.v2 Oct 2 20:12:17.891665 systemd[1]: Started cri-containerd-9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420.scope. Oct 2 20:12:17.926642 kernel: kauditd_printk_skb: 5 callbacks suppressed Oct 2 20:12:17.926767 kernel: audit: type=1400 audit(1696277537.904:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.942527 kernel: audit: type=1400 audit(1696277537.904:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.958439 kernel: audit: type=1400 audit(1696277537.904:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.976840 kernel: audit: type=1400 audit(1696277537.904:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.991146 env[1341]: time="2023-10-02T20:12:17.977181299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jvnw4,Uid:32183a83-23f4-428c-8a7d-53c6ca93ad64,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:18.005274 kernel: audit: type=1400 audit(1696277537.904:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.005354 kernel: audit: type=1400 audit(1696277537.904:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.005484 env[1341]: time="2023-10-02T20:12:18.003891889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-p4k72,Uid:85903ade-29bb-4f88-91c7-57626ec9ada0,Namespace:kube-system,Attempt:0,} returns sandbox id \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\"" Oct 2 20:12:18.005819 env[1341]: time="2023-10-02T20:12:18.005789809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-228p4,Uid:b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b,Namespace:kube-system,Attempt:0,}" Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.020169 env[1341]: time="2023-10-02T20:12:18.020138762Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.034015 kernel: audit: type=1400 audit(1696277537.904:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.034127 kernel: audit: type=1400 audit(1696277537.904:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.034595 kernel: audit: type=1400 audit(1696277537.904:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.060548 kernel: audit: type=1400 audit(1696277537.941:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit: BPF prog-id=113 op=LOAD Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2547 pid=2558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965623039626664653032656132393239303831356462393330663335 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2547 pid=2558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965623039626664653032656132393239303831356462393330663335 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.941000 audit: BPF prog-id=114 op=LOAD Oct 2 20:12:17.941000 audit[2558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000024540 items=0 ppid=2547 pid=2558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965623039626664653032656132393239303831356462393330663335 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit: BPF prog-id=115 op=LOAD Oct 2 20:12:17.955000 audit[2558]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024588 items=0 ppid=2547 pid=2558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965623039626664653032656132393239303831356462393330663335 Oct 2 20:12:17.955000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:12:17.955000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { perfmon } for pid=2558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit[2558]: AVC avc: denied { bpf } for pid=2558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:17.955000 audit: BPF prog-id=116 op=LOAD Oct 2 20:12:17.955000 audit[2558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000024998 items=0 ppid=2547 pid=2558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:17.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965623039626664653032656132393239303831356462393330663335 Oct 2 20:12:18.106107 env[1341]: time="2023-10-02T20:12:18.099110904Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:18.106107 env[1341]: time="2023-10-02T20:12:18.099149505Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:18.106107 env[1341]: time="2023-10-02T20:12:18.099160405Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:18.106107 env[1341]: time="2023-10-02T20:12:18.099303906Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f66d893ba6fe8d74be59b38f6002085610e5d36e67036883a2043bc04c135eb4 pid=2587 runtime=io.containerd.runc.v2 Oct 2 20:12:18.112268 env[1341]: time="2023-10-02T20:12:18.112180844Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:12:18.112595 env[1341]: time="2023-10-02T20:12:18.112561348Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:12:18.112762 env[1341]: time="2023-10-02T20:12:18.112712449Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:12:18.113174 env[1341]: time="2023-10-02T20:12:18.113117954Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050 pid=2606 runtime=io.containerd.runc.v2 Oct 2 20:12:18.121189 systemd[1]: Started cri-containerd-f66d893ba6fe8d74be59b38f6002085610e5d36e67036883a2043bc04c135eb4.scope. Oct 2 20:12:18.137805 systemd[1]: Started cri-containerd-20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050.scope. Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit: BPF prog-id=117 op=LOAD Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2587 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636366438393362613666653864373462653539623338663630303230 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2587 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636366438393362613666653864373462653539623338663630303230 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit: BPF prog-id=118 op=LOAD Oct 2 20:12:18.144000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003be570 items=0 ppid=2587 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636366438393362613666653864373462653539623338663630303230 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.144000 audit: BPF prog-id=119 op=LOAD Oct 2 20:12:18.144000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003be5b8 items=0 ppid=2587 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636366438393362613666653864373462653539623338663630303230 Oct 2 20:12:18.145000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:12:18.145000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { perfmon } for pid=2603 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit[2603]: AVC avc: denied { bpf } for pid=2603 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.145000 audit: BPF prog-id=120 op=LOAD Oct 2 20:12:18.145000 audit[2603]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003be9c8 items=0 ppid=2587 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636366438393362613666653864373462653539623338663630303230 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit: BPF prog-id=121 op=LOAD Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2606 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230636266396433383262366531316137323565663730656638386535 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2606 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230636266396433383262366531316137323565663730656638386535 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit: BPF prog-id=122 op=LOAD Oct 2 20:12:18.160000 audit[2621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388340 items=0 ppid=2606 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230636266396433383262366531316137323565663730656638386535 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.160000 audit: BPF prog-id=123 op=LOAD Oct 2 20:12:18.160000 audit[2621]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000388388 items=0 ppid=2606 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230636266396433383262366531316137323565663730656638386535 Oct 2 20:12:18.161000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:12:18.161000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { perfmon } for pid=2621 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit[2621]: AVC avc: denied { bpf } for pid=2621 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.161000 audit: BPF prog-id=124 op=LOAD Oct 2 20:12:18.161000 audit[2621]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000388798 items=0 ppid=2606 pid=2621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230636266396433383262366531316137323565663730656638386535 Oct 2 20:12:18.171520 env[1341]: time="2023-10-02T20:12:18.171474276Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-jvnw4,Uid:32183a83-23f4-428c-8a7d-53c6ca93ad64,Namespace:kube-system,Attempt:0,} returns sandbox id \"f66d893ba6fe8d74be59b38f6002085610e5d36e67036883a2043bc04c135eb4\"" Oct 2 20:12:18.175014 env[1341]: time="2023-10-02T20:12:18.174980513Z" level=info msg="CreateContainer within sandbox \"f66d893ba6fe8d74be59b38f6002085610e5d36e67036883a2043bc04c135eb4\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:12:18.179851 env[1341]: time="2023-10-02T20:12:18.179820165Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-228p4,Uid:b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b,Namespace:kube-system,Attempt:0,} returns sandbox id \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\"" Oct 2 20:12:18.213613 env[1341]: time="2023-10-02T20:12:18.213587025Z" level=info msg="CreateContainer within sandbox \"f66d893ba6fe8d74be59b38f6002085610e5d36e67036883a2043bc04c135eb4\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"896b060452473614ed2fd426a03f8d60bb8f281a62a9483ec1359f2ffb3adc74\"" Oct 2 20:12:18.214282 env[1341]: time="2023-10-02T20:12:18.214256932Z" level=info msg="StartContainer for \"896b060452473614ed2fd426a03f8d60bb8f281a62a9483ec1359f2ffb3adc74\"" Oct 2 20:12:18.237463 systemd[1]: Started cri-containerd-896b060452473614ed2fd426a03f8d60bb8f281a62a9483ec1359f2ffb3adc74.scope. Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2587 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366230363034353234373336313465643266643432366130336638 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.252000 audit: BPF prog-id=125 op=LOAD Oct 2 20:12:18.252000 audit[2673]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001499d8 a2=78 a3=c0003de160 items=0 ppid=2587 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366230363034353234373336313465643266643432366130336638 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit: BPF prog-id=126 op=LOAD Oct 2 20:12:18.253000 audit[2673]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000149770 a2=78 a3=c0003de1a8 items=0 ppid=2587 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366230363034353234373336313465643266643432366130336638 Oct 2 20:12:18.253000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:12:18.253000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { perfmon } for pid=2673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit[2673]: AVC avc: denied { bpf } for pid=2673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:18.253000 audit: BPF prog-id=127 op=LOAD Oct 2 20:12:18.253000 audit[2673]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000149c30 a2=78 a3=c0003de238 items=0 ppid=2587 pid=2673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366230363034353234373336313465643266643432366130336638 Oct 2 20:12:18.275243 env[1341]: time="2023-10-02T20:12:18.275020580Z" level=info msg="StartContainer for \"896b060452473614ed2fd426a03f8d60bb8f281a62a9483ec1359f2ffb3adc74\" returns successfully" Oct 2 20:12:18.338000 audit[2723]: NETFILTER_CFG table=mangle:42 family=10 entries=1 op=nft_register_chain pid=2723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.338000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc4636f80 a2=0 a3=7ffdc4636f6c items=0 ppid=2683 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.338000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:12:18.340000 audit[2724]: NETFILTER_CFG table=nat:43 family=10 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.340000 audit[2724]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffea2f222e0 a2=0 a3=7ffea2f222cc items=0 ppid=2683 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:12:18.346000 audit[2725]: NETFILTER_CFG table=filter:44 family=10 entries=1 op=nft_register_chain pid=2725 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.346000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc6c3a7f10 a2=0 a3=7ffc6c3a7efc items=0 ppid=2683 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.346000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:12:18.347000 audit[2726]: NETFILTER_CFG table=mangle:45 family=2 entries=1 op=nft_register_chain pid=2726 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.347000 audit[2726]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd26323de0 a2=0 a3=7ffd26323dcc items=0 ppid=2683 pid=2726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:12:18.349000 audit[2727]: NETFILTER_CFG table=nat:46 family=2 entries=1 op=nft_register_chain pid=2727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.349000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd35fe9560 a2=0 a3=7ffd35fe954c items=0 ppid=2683 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:12:18.350000 audit[2728]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.350000 audit[2728]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1b67c1b0 a2=0 a3=7ffd1b67c19c items=0 ppid=2683 pid=2728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:12:18.442000 audit[2729]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_chain pid=2729 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.442000 audit[2729]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd8c1d2440 a2=0 a3=7ffd8c1d242c items=0 ppid=2683 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:12:18.446000 audit[2731]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_rule pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.446000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd2ab25b20 a2=0 a3=7ffd2ab25b0c items=0 ppid=2683 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.446000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:12:18.452000 audit[2734]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.452000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff5086fde0 a2=0 a3=7fff5086fdcc items=0 ppid=2683 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:12:18.454000 audit[2735]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.454000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec50d8450 a2=0 a3=7ffec50d843c items=0 ppid=2683 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:12:18.456000 audit[2737]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_rule pid=2737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.456000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc7825a1c0 a2=0 a3=7ffc7825a1ac items=0 ppid=2683 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:12:18.458000 audit[2738]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_chain pid=2738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.458000 audit[2738]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd59217720 a2=0 a3=7ffd5921770c items=0 ppid=2683 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.458000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:12:18.460000 audit[2740]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_rule pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.460000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc127af6a0 a2=0 a3=7ffc127af68c items=0 ppid=2683 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:12:18.464000 audit[2743]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.464000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffeb4c2d00 a2=0 a3=7fffeb4c2cec items=0 ppid=2683 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:12:18.465000 audit[2744]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.465000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee1bab770 a2=0 a3=7ffee1bab75c items=0 ppid=2683 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:12:18.467000 audit[2746]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.467000 audit[2746]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe50c00250 a2=0 a3=7ffe50c0023c items=0 ppid=2683 pid=2746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.467000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:12:18.468000 audit[2747]: NETFILTER_CFG table=filter:58 family=2 entries=1 op=nft_register_chain pid=2747 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.468000 audit[2747]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3ea3ad80 a2=0 a3=7ffc3ea3ad6c items=0 ppid=2683 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.468000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:12:18.473000 audit[2749]: NETFILTER_CFG table=filter:59 family=2 entries=1 op=nft_register_rule pid=2749 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.473000 audit[2749]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc559946c0 a2=0 a3=7ffc559946ac items=0 ppid=2683 pid=2749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.473000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.477000 audit[2752]: NETFILTER_CFG table=filter:60 family=2 entries=1 op=nft_register_rule pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.477000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff589da440 a2=0 a3=7fff589da42c items=0 ppid=2683 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.481000 audit[2755]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_rule pid=2755 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.481000 audit[2755]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe3792d4c0 a2=0 a3=7ffe3792d4ac items=0 ppid=2683 pid=2755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:12:18.482000 audit[2756]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_chain pid=2756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.482000 audit[2756]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0aeba890 a2=0 a3=7fff0aeba87c items=0 ppid=2683 pid=2756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:12:18.484000 audit[2758]: NETFILTER_CFG table=nat:63 family=2 entries=1 op=nft_register_rule pid=2758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.484000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff910fa4f0 a2=0 a3=7fff910fa4dc items=0 ppid=2683 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.484000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.488000 audit[2761]: NETFILTER_CFG table=nat:64 family=2 entries=1 op=nft_register_rule pid=2761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.488000 audit[2761]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff283c19a0 a2=0 a3=7fff283c198c items=0 ppid=2683 pid=2761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.488000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.489000 audit[2762]: NETFILTER_CFG table=nat:65 family=2 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.489000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1534e340 a2=0 a3=7ffe1534e32c items=0 ppid=2683 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:12:18.491000 audit[2764]: NETFILTER_CFG table=nat:66 family=2 entries=1 op=nft_register_rule pid=2764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:12:18.491000 audit[2764]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffdca6e31c0 a2=0 a3=7ffdca6e31ac items=0 ppid=2683 pid=2764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:12:18.533979 kubelet[2475]: I1002 20:12:18.532715 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-jvnw4" podStartSLOduration=1.532675327 podCreationTimestamp="2023-10-02 20:12:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:12:18.532335923 +0000 UTC m=+16.194969139" watchObservedRunningTime="2023-10-02 20:12:18.532675327 +0000 UTC m=+16.195308643" Oct 2 20:12:18.552000 audit[2770]: NETFILTER_CFG table=filter:67 family=2 entries=8 op=nft_register_rule pid=2770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:12:18.552000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffe1925d250 a2=0 a3=7ffe1925d23c items=0 ppid=2683 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.552000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.570000 audit[2770]: NETFILTER_CFG table=nat:68 family=2 entries=14 op=nft_register_chain pid=2770 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:12:18.570000 audit[2770]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffe1925d250 a2=0 a3=7ffe1925d23c items=0 ppid=2683 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.570000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.571000 audit[2775]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_chain pid=2775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.571000 audit[2775]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdf7d588c0 a2=0 a3=7ffdf7d588ac items=0 ppid=2683 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.571000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:12:18.574000 audit[2777]: NETFILTER_CFG table=filter:70 family=10 entries=2 op=nft_register_chain pid=2777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.574000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcee4d84f0 a2=0 a3=7ffcee4d84dc items=0 ppid=2683 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:12:18.578000 audit[2780]: NETFILTER_CFG table=filter:71 family=10 entries=2 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.578000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc9b303cd0 a2=0 a3=7ffc9b303cbc items=0 ppid=2683 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.578000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:12:18.581000 audit[2781]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=2781 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.581000 audit[2781]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf7b917c0 a2=0 a3=7ffcf7b917ac items=0 ppid=2683 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:12:18.583000 audit[2783]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=2783 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.583000 audit[2783]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe3e5aa720 a2=0 a3=7ffe3e5aa70c items=0 ppid=2683 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:12:18.584000 audit[2784]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.584000 audit[2784]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1344fd70 a2=0 a3=7fff1344fd5c items=0 ppid=2683 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:12:18.587000 audit[2786]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_rule pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.587000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffac099ba0 a2=0 a3=7fffac099b8c items=0 ppid=2683 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:12:18.590000 audit[2789]: NETFILTER_CFG table=filter:76 family=10 entries=2 op=nft_register_chain pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.590000 audit[2789]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffdd2353240 a2=0 a3=7ffdd235322c items=0 ppid=2683 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:12:18.591000 audit[2790]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=2790 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.591000 audit[2790]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff64925700 a2=0 a3=7fff649256ec items=0 ppid=2683 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.591000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:12:18.594000 audit[2792]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2792 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.594000 audit[2792]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd8aa57b0 a2=0 a3=7fffd8aa579c items=0 ppid=2683 pid=2792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:12:18.595000 audit[2793]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_chain pid=2793 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.595000 audit[2793]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc4693b900 a2=0 a3=7ffc4693b8ec items=0 ppid=2683 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.595000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:12:18.598000 audit[2795]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=2795 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.598000 audit[2795]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea2b06ee0 a2=0 a3=7ffea2b06ecc items=0 ppid=2683 pid=2795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:12:18.602000 audit[2798]: NETFILTER_CFG table=filter:81 family=10 entries=1 op=nft_register_rule pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.602000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd4a43b150 a2=0 a3=7ffd4a43b13c items=0 ppid=2683 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:12:18.605000 audit[2801]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_rule pid=2801 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.605000 audit[2801]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd7350b580 a2=0 a3=7ffd7350b56c items=0 ppid=2683 pid=2801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.605000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:12:18.606000 audit[2802]: NETFILTER_CFG table=nat:83 family=10 entries=1 op=nft_register_chain pid=2802 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.606000 audit[2802]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdc2411bc0 a2=0 a3=7ffdc2411bac items=0 ppid=2683 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.606000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:12:18.609000 audit[2804]: NETFILTER_CFG table=nat:84 family=10 entries=2 op=nft_register_chain pid=2804 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.609000 audit[2804]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc09ce8bb0 a2=0 a3=7ffc09ce8b9c items=0 ppid=2683 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.609000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.612000 audit[2807]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.612000 audit[2807]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff734a28d0 a2=0 a3=7fff734a28bc items=0 ppid=2683 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.612000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:12:18.613000 audit[2808]: NETFILTER_CFG table=nat:86 family=10 entries=1 op=nft_register_chain pid=2808 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.613000 audit[2808]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff42048990 a2=0 a3=7fff4204897c items=0 ppid=2683 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:12:18.616000 audit[2810]: NETFILTER_CFG table=nat:87 family=10 entries=2 op=nft_register_chain pid=2810 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.616000 audit[2810]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcc3e15000 a2=0 a3=7ffcc3e14fec items=0 ppid=2683 pid=2810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.616000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:12:18.617000 audit[2811]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2811 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.617000 audit[2811]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd1e8cd840 a2=0 a3=7ffd1e8cd82c items=0 ppid=2683 pid=2811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.617000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:12:18.619000 audit[2813]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_rule pid=2813 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.619000 audit[2813]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcadd3bf30 a2=0 a3=7ffcadd3bf1c items=0 ppid=2683 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:12:18.622000 audit[2816]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=2816 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:12:18.622000 audit[2816]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0a4726b0 a2=0 a3=7ffc0a47269c items=0 ppid=2683 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.622000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:12:18.627000 audit[2818]: NETFILTER_CFG table=filter:91 family=10 entries=3 op=nft_register_rule pid=2818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:12:18.627000 audit[2818]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff8d5c3c40 a2=0 a3=7fff8d5c3c2c items=0 ppid=2683 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.627000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:18.628000 audit[2818]: NETFILTER_CFG table=nat:92 family=10 entries=7 op=nft_register_chain pid=2818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:12:18.628000 audit[2818]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff8d5c3c40 a2=0 a3=7fff8d5c3c2c items=0 ppid=2683 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:18.628000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:12:19.642167 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount962377054.mount: Deactivated successfully. Oct 2 20:12:20.502414 env[1341]: time="2023-10-02T20:12:20.502359297Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:20.507501 env[1341]: time="2023-10-02T20:12:20.507465350Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:20.510252 env[1341]: time="2023-10-02T20:12:20.510219378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:20.510677 env[1341]: time="2023-10-02T20:12:20.510644982Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:12:20.512032 env[1341]: time="2023-10-02T20:12:20.511999496Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:12:20.513155 env[1341]: time="2023-10-02T20:12:20.513125208Z" level=info msg="CreateContainer within sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:12:20.547471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1421309653.mount: Deactivated successfully. Oct 2 20:12:20.560387 env[1341]: time="2023-10-02T20:12:20.560349991Z" level=info msg="CreateContainer within sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\"" Oct 2 20:12:20.562562 env[1341]: time="2023-10-02T20:12:20.560921997Z" level=info msg="StartContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\"" Oct 2 20:12:20.584211 systemd[1]: Started cri-containerd-deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51.scope. Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.596000 audit: BPF prog-id=128 op=LOAD Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2547 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:20.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465616531353137373565633666323135306564396633383163626262 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2547 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:20.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465616531353137373565633666323135306564396633383163626262 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit: BPF prog-id=129 op=LOAD Oct 2 20:12:20.597000 audit[2827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024390 items=0 ppid=2547 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:20.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465616531353137373565633666323135306564396633383163626262 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit: BPF prog-id=130 op=LOAD Oct 2 20:12:20.597000 audit[2827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000243d8 items=0 ppid=2547 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:20.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465616531353137373565633666323135306564396633383163626262 Oct 2 20:12:20.597000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:12:20.597000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { perfmon } for pid=2827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit[2827]: AVC avc: denied { bpf } for pid=2827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:20.597000 audit: BPF prog-id=131 op=LOAD Oct 2 20:12:20.597000 audit[2827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000247e8 items=0 ppid=2547 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:20.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465616531353137373565633666323135306564396633383163626262 Oct 2 20:12:20.613919 env[1341]: time="2023-10-02T20:12:20.613881439Z" level=info msg="StartContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" returns successfully" Oct 2 20:12:20.644000 audit[2838]: AVC avc: denied { map_create } for pid=2838 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c374,c380 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c374,c380 tclass=bpf permissive=0 Oct 2 20:12:20.644000 audit[2838]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00060f7d0 a2=48 a3=0 items=0 ppid=2547 pid=2838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c374,c380 key=(null) Oct 2 20:12:20.644000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:12:21.546020 kubelet[2475]: I1002 20:12:21.545988 2475 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-p4k72" podStartSLOduration=2.041051395 podCreationTimestamp="2023-10-02 20:12:17 +0000 UTC" firstStartedPulling="2023-10-02 20:12:18.006213114 +0000 UTC m=+15.668846330" lastFinishedPulling="2023-10-02 20:12:20.511105587 +0000 UTC m=+18.173738803" observedRunningTime="2023-10-02 20:12:21.545625465 +0000 UTC m=+19.208258681" watchObservedRunningTime="2023-10-02 20:12:21.545943868 +0000 UTC m=+19.208577084" Oct 2 20:12:27.079828 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1923752171.mount: Deactivated successfully. Oct 2 20:12:29.792919 env[1341]: time="2023-10-02T20:12:29.792871603Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:29.801712 env[1341]: time="2023-10-02T20:12:29.801671179Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:29.806195 env[1341]: time="2023-10-02T20:12:29.806162518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:12:29.806709 env[1341]: time="2023-10-02T20:12:29.806672422Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:12:29.810526 env[1341]: time="2023-10-02T20:12:29.810497555Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:12:29.842886 env[1341]: time="2023-10-02T20:12:29.842836934Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" Oct 2 20:12:29.845147 env[1341]: time="2023-10-02T20:12:29.843491239Z" level=info msg="StartContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" Oct 2 20:12:29.862637 systemd[1]: Started cri-containerd-2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0.scope. Oct 2 20:12:29.879739 systemd[1]: cri-containerd-2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0.scope: Deactivated successfully. Oct 2 20:12:29.886323 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0-rootfs.mount: Deactivated successfully. Oct 2 20:12:31.869886 env[1341]: time="2023-10-02T20:12:31.869765590Z" level=error msg="get state for 2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" error="context deadline exceeded: unknown" Oct 2 20:12:31.869886 env[1341]: time="2023-10-02T20:12:31.869866191Z" level=warning msg="unknown status" status=0 Oct 2 20:12:33.971817 env[1341]: time="2023-10-02T20:12:33.971690957Z" level=error msg="get state for 2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" error="context deadline exceeded: unknown" Oct 2 20:12:33.971817 env[1341]: time="2023-10-02T20:12:33.971797158Z" level=warning msg="unknown status" status=0 Oct 2 20:12:34.027329 env[1341]: time="2023-10-02T20:12:34.027273600Z" level=info msg="shim disconnected" id=2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0 Oct 2 20:12:34.027535 env[1341]: time="2023-10-02T20:12:34.027338501Z" level=warning msg="cleaning up after shim disconnected" id=2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0 namespace=k8s.io Oct 2 20:12:34.027535 env[1341]: time="2023-10-02T20:12:34.027351401Z" level=info msg="cleaning up dead shim" Oct 2 20:12:34.038692 env[1341]: time="2023-10-02T20:12:34.038632590Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2885 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:34.039018 env[1341]: time="2023-10-02T20:12:34.038912692Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 20:12:34.039512 env[1341]: time="2023-10-02T20:12:34.039467997Z" level=error msg="Failed to pipe stdout of container \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" error="reading from a closed fifo" Oct 2 20:12:34.039700 env[1341]: time="2023-10-02T20:12:34.039638898Z" level=error msg="Failed to pipe stderr of container \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" error="reading from a closed fifo" Oct 2 20:12:34.044795 env[1341]: time="2023-10-02T20:12:34.044746839Z" level=error msg="StartContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:34.045083 kubelet[2475]: E1002 20:12:34.045056 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" Oct 2 20:12:34.045511 kubelet[2475]: E1002 20:12:34.045219 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:34.045511 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:34.045511 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:12:34.045653 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:34.045653 kubelet[2475]: E1002 20:12:34.045306 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:34.574457 env[1341]: time="2023-10-02T20:12:34.574383524Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:12:34.608947 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount553538011.mount: Deactivated successfully. Oct 2 20:12:34.621254 env[1341]: time="2023-10-02T20:12:34.621210894Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" Oct 2 20:12:34.621764 env[1341]: time="2023-10-02T20:12:34.621733798Z" level=info msg="StartContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" Oct 2 20:12:34.643674 systemd[1]: Started cri-containerd-0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2.scope. Oct 2 20:12:34.653589 systemd[1]: cri-containerd-0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2.scope: Deactivated successfully. Oct 2 20:12:34.653915 systemd[1]: Stopped cri-containerd-0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2.scope. Oct 2 20:12:34.670171 env[1341]: time="2023-10-02T20:12:34.670118880Z" level=info msg="shim disconnected" id=0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2 Oct 2 20:12:34.670370 env[1341]: time="2023-10-02T20:12:34.670196081Z" level=warning msg="cleaning up after shim disconnected" id=0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2 namespace=k8s.io Oct 2 20:12:34.670370 env[1341]: time="2023-10-02T20:12:34.670212681Z" level=info msg="cleaning up dead shim" Oct 2 20:12:34.678548 env[1341]: time="2023-10-02T20:12:34.678503446Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2926 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:34.678805 env[1341]: time="2023-10-02T20:12:34.678751848Z" level=error msg="copy shim log" error="read /proc/self/fd/58: file already closed" Oct 2 20:12:34.679004 env[1341]: time="2023-10-02T20:12:34.678973150Z" level=error msg="Failed to pipe stderr of container \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" error="reading from a closed fifo" Oct 2 20:12:34.679555 env[1341]: time="2023-10-02T20:12:34.679515054Z" level=error msg="Failed to pipe stdout of container \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" error="reading from a closed fifo" Oct 2 20:12:34.683191 env[1341]: time="2023-10-02T20:12:34.683151083Z" level=error msg="StartContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:34.683450 kubelet[2475]: E1002 20:12:34.683426 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2" Oct 2 20:12:34.683586 kubelet[2475]: E1002 20:12:34.683562 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:34.683586 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:34.683586 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:12:34.683586 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:34.683852 kubelet[2475]: E1002 20:12:34.683620 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:35.575549 kubelet[2475]: I1002 20:12:35.575519 2475 scope.go:117] "RemoveContainer" containerID="2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" Oct 2 20:12:35.576201 kubelet[2475]: I1002 20:12:35.576178 2475 scope.go:117] "RemoveContainer" containerID="2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" Oct 2 20:12:35.579819 env[1341]: time="2023-10-02T20:12:35.579772692Z" level=info msg="RemoveContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" Oct 2 20:12:35.583257 env[1341]: time="2023-10-02T20:12:35.581553806Z" level=info msg="RemoveContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\"" Oct 2 20:12:35.583257 env[1341]: time="2023-10-02T20:12:35.581655007Z" level=error msg="RemoveContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\" failed" error="failed to set removing state for container \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\": container is already in removing state" Oct 2 20:12:35.584966 kubelet[2475]: E1002 20:12:35.581822 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\": container is already in removing state" containerID="2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" Oct 2 20:12:35.584966 kubelet[2475]: E1002 20:12:35.581866 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0": container is already in removing state; Skipping pod "cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)" Oct 2 20:12:35.584966 kubelet[2475]: E1002 20:12:35.582185 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:35.594448 env[1341]: time="2023-10-02T20:12:35.594416306Z" level=info msg="RemoveContainer for \"2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0\" returns successfully" Oct 2 20:12:35.605643 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2-rootfs.mount: Deactivated successfully. Oct 2 20:12:36.579760 kubelet[2475]: E1002 20:12:36.579727 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:36.979506 kubelet[2475]: W1002 20:12:36.979172 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0.scope WatchSource:0}: container "2772de08e6f17fa8617e2e49ab220237a1e4920554a49d4faf9e32af8a9659e0" in namespace "k8s.io": not found Oct 2 20:12:40.087883 kubelet[2475]: W1002 20:12:40.087843 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2.scope WatchSource:0}: task 0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2 not found: not found Oct 2 20:12:48.476799 env[1341]: time="2023-10-02T20:12:48.476276165Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:12:48.501115 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1092580786.mount: Deactivated successfully. Oct 2 20:12:48.508597 env[1341]: time="2023-10-02T20:12:48.508554672Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" Oct 2 20:12:48.509104 env[1341]: time="2023-10-02T20:12:48.508888374Z" level=info msg="StartContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" Oct 2 20:12:48.535657 systemd[1]: Started cri-containerd-36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187.scope. Oct 2 20:12:48.546609 systemd[1]: cri-containerd-36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187.scope: Deactivated successfully. Oct 2 20:12:48.561226 env[1341]: time="2023-10-02T20:12:48.561168209Z" level=info msg="shim disconnected" id=36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187 Oct 2 20:12:48.561226 env[1341]: time="2023-10-02T20:12:48.561217309Z" level=warning msg="cleaning up after shim disconnected" id=36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187 namespace=k8s.io Oct 2 20:12:48.561226 env[1341]: time="2023-10-02T20:12:48.561228809Z" level=info msg="cleaning up dead shim" Oct 2 20:12:48.568812 env[1341]: time="2023-10-02T20:12:48.568774258Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2968 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:12:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:12:48.569065 env[1341]: time="2023-10-02T20:12:48.569007459Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 20:12:48.569812 env[1341]: time="2023-10-02T20:12:48.569762364Z" level=error msg="Failed to pipe stdout of container \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" error="reading from a closed fifo" Oct 2 20:12:48.569985 env[1341]: time="2023-10-02T20:12:48.569948465Z" level=error msg="Failed to pipe stderr of container \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" error="reading from a closed fifo" Oct 2 20:12:48.573560 env[1341]: time="2023-10-02T20:12:48.573522788Z" level=error msg="StartContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:12:48.573745 kubelet[2475]: E1002 20:12:48.573721 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187" Oct 2 20:12:48.574086 kubelet[2475]: E1002 20:12:48.573856 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:12:48.574086 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:12:48.574086 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:12:48.574086 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:12:48.574086 kubelet[2475]: E1002 20:12:48.573907 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:48.602371 kubelet[2475]: I1002 20:12:48.602346 2475 scope.go:117] "RemoveContainer" containerID="0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2" Oct 2 20:12:48.602741 kubelet[2475]: I1002 20:12:48.602722 2475 scope.go:117] "RemoveContainer" containerID="0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2" Oct 2 20:12:48.605260 env[1341]: time="2023-10-02T20:12:48.605206591Z" level=info msg="RemoveContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" Oct 2 20:12:48.612432 env[1341]: time="2023-10-02T20:12:48.606815601Z" level=info msg="RemoveContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\"" Oct 2 20:12:48.612432 env[1341]: time="2023-10-02T20:12:48.606902002Z" level=error msg="RemoveContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\" failed" error="failed to set removing state for container \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\": container is already in removing state" Oct 2 20:12:48.612570 kubelet[2475]: E1002 20:12:48.607036 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\": container is already in removing state" containerID="0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2" Oct 2 20:12:48.612570 kubelet[2475]: E1002 20:12:48.607065 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2": container is already in removing state; Skipping pod "cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)" Oct 2 20:12:48.612570 kubelet[2475]: E1002 20:12:48.607386 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:12:48.619112 env[1341]: time="2023-10-02T20:12:48.618044473Z" level=info msg="RemoveContainer for \"0bb6ab00c826093fd70f67ac49ff53c0668fb37cd811c1b6f5dfdc251b1bc1c2\" returns successfully" Oct 2 20:12:49.496434 systemd[1]: run-containerd-runc-k8s.io-36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187-runc.8u6wje.mount: Deactivated successfully. Oct 2 20:12:49.496580 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187-rootfs.mount: Deactivated successfully. Oct 2 20:12:51.666551 kubelet[2475]: W1002 20:12:51.666512 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187.scope WatchSource:0}: task 36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187 not found: not found Oct 2 20:12:58.648000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.655503 kernel: kauditd_printk_skb: 417 callbacks suppressed Oct 2 20:12:58.655605 kernel: audit: type=1400 audit(1696277578.648:1086): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.648000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001410b10 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:58.707167 kernel: audit: type=1300 audit(1696277578.648:1086): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001410b10 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:58.708247 kernel: audit: type=1327 audit(1696277578.648:1086): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.748484 kernel: audit: type=1400 audit(1696277578.648:1087): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.648000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.648000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f16ae0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:58.772774 kernel: audit: type=1300 audit(1696277578.648:1087): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f16ae0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:12:58.773575 kernel: audit: type=1327 audit(1696277578.648:1087): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:58.748000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.810646 kernel: audit: type=1400 audit(1696277578.748:1088): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.810765 kernel: audit: type=1300 audit(1696277578.748:1088): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00736c090 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.748000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00736c090 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.748000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.850454 kernel: audit: type=1327 audit(1696277578.748:1088): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.748000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.748000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0071be3f0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.748000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.868435 kernel: audit: type=1400 audit(1696277578.748:1089): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.748000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.748000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0071be450 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.748000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.748000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.748000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c008cbe8a0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.748000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.829000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.829000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00736c300 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.829000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:12:58.829000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:58.829000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c008f8e980 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:12:58.829000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:00.472329 kubelet[2475]: E1002 20:13:00.472289 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:12.660000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.665680 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:13:12.665768 kernel: audit: type=1400 audit(1696277592.660:1094): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.660000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d5a0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.683427 kernel: audit: type=1300 audit(1696277592.660:1094): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d5a0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.705428 kernel: audit: type=1327 audit(1696277592.660:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.723557 kernel: audit: type=1400 audit(1696277592.660:1095): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.660000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.741703 kernel: audit: type=1300 audit(1696277592.660:1095): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d5c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.660000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d5c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.660000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.803689 kernel: audit: type=1327 audit(1696277592.660:1095): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.803882 kernel: audit: type=1400 audit(1696277592.660:1096): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.804992 kernel: audit: type=1300 audit(1696277592.660:1096): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d6e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.660000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135d6e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.854815 kernel: audit: type=1327 audit(1696277592.660:1096): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:12.857056 kernel: audit: type=1400 audit(1696277592.671:1097): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.671000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:12.671000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d73800 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:12.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:13.475279 env[1341]: time="2023-10-02T20:13:13.474888727Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:13:13.500835 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3346647377.mount: Deactivated successfully. Oct 2 20:13:13.513144 env[1341]: time="2023-10-02T20:13:13.513087516Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" Oct 2 20:13:13.514063 env[1341]: time="2023-10-02T20:13:13.513989220Z" level=info msg="StartContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" Oct 2 20:13:13.542595 systemd[1]: Started cri-containerd-41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b.scope. Oct 2 20:13:13.552298 systemd[1]: cri-containerd-41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b.scope: Deactivated successfully. Oct 2 20:13:13.552639 systemd[1]: Stopped cri-containerd-41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b.scope. Oct 2 20:13:13.591307 env[1341]: time="2023-10-02T20:13:13.591253102Z" level=info msg="shim disconnected" id=41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b Oct 2 20:13:13.591539 env[1341]: time="2023-10-02T20:13:13.591306502Z" level=warning msg="cleaning up after shim disconnected" id=41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b namespace=k8s.io Oct 2 20:13:13.591539 env[1341]: time="2023-10-02T20:13:13.591318303Z" level=info msg="cleaning up dead shim" Oct 2 20:13:13.599159 env[1341]: time="2023-10-02T20:13:13.599122841Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:13:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3007 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:13:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:13:13.599424 env[1341]: time="2023-10-02T20:13:13.599353142Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:13:13.600491 env[1341]: time="2023-10-02T20:13:13.600450748Z" level=error msg="Failed to pipe stdout of container \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" error="reading from a closed fifo" Oct 2 20:13:13.604630 env[1341]: time="2023-10-02T20:13:13.604588268Z" level=error msg="Failed to pipe stderr of container \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" error="reading from a closed fifo" Oct 2 20:13:13.618369 env[1341]: time="2023-10-02T20:13:13.618320836Z" level=error msg="StartContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:13:13.618657 kubelet[2475]: E1002 20:13:13.618631 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b" Oct 2 20:13:13.619016 kubelet[2475]: E1002 20:13:13.618764 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:13:13.619016 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:13:13.619016 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:13:13.619016 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:13:13.619016 kubelet[2475]: E1002 20:13:13.618822 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:13.654567 kubelet[2475]: I1002 20:13:13.654539 2475 scope.go:117] "RemoveContainer" containerID="36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187" Oct 2 20:13:13.654938 kubelet[2475]: I1002 20:13:13.654917 2475 scope.go:117] "RemoveContainer" containerID="36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187" Oct 2 20:13:13.658412 env[1341]: time="2023-10-02T20:13:13.657204428Z" level=info msg="RemoveContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" Oct 2 20:13:13.658628 env[1341]: time="2023-10-02T20:13:13.658582735Z" level=info msg="RemoveContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\"" Oct 2 20:13:13.658916 env[1341]: time="2023-10-02T20:13:13.658884936Z" level=error msg="RemoveContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\" failed" error="failed to set removing state for container \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\": container is already in removing state" Oct 2 20:13:13.659203 kubelet[2475]: E1002 20:13:13.659124 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\": container is already in removing state" containerID="36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187" Oct 2 20:13:13.659203 kubelet[2475]: I1002 20:13:13.659175 2475 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187"} err="rpc error: code = Unknown desc = failed to set removing state for container \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\": container is already in removing state" Oct 2 20:13:13.672199 env[1341]: time="2023-10-02T20:13:13.672165402Z" level=info msg="RemoveContainer for \"36f39244d59976bdfc7bb7b938cfa36154279c3db08cabbc40396b9d5a79d187\" returns successfully" Oct 2 20:13:13.672619 kubelet[2475]: E1002 20:13:13.672602 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:14.496581 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b-rootfs.mount: Deactivated successfully. Oct 2 20:13:16.697962 kubelet[2475]: W1002 20:13:16.697923 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b.scope WatchSource:0}: task 41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b not found: not found Oct 2 20:13:28.472575 kubelet[2475]: E1002 20:13:28.472328 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:42.471537 kubelet[2475]: E1002 20:13:42.471500 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:53.471996 kubelet[2475]: E1002 20:13:53.471946 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:13:58.649000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.654431 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:13:58.654518 kernel: audit: type=1400 audit(1696277638.649:1099): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.649000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.687824 kernel: audit: type=1400 audit(1696277638.649:1098): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.687905 kernel: audit: type=1300 audit(1696277638.649:1098): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f34870 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:58.649000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f34870 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:58.649000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.727997 kernel: audit: type=1327 audit(1696277638.649:1098): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.728852 kernel: audit: type=1300 audit(1696277638.649:1099): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002540820 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:58.649000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002540820 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:13:58.649000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.769343 kernel: audit: type=1327 audit(1696277638.649:1099): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:13:58.769457 kernel: audit: type=1400 audit(1696277638.747:1100): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.747000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.747000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c1f5820 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.806438 kernel: audit: type=1300 audit(1696277638.747:1100): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c1f5820 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.806515 kernel: audit: type=1327 audit(1696277638.747:1100): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.747000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.747000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.841727 kernel: audit: type=1400 audit(1696277638.747:1101): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.747000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c1932c0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.747000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.747000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.747000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c193320 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.747000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.747000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.747000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c1355f0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.747000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.830000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.830000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c1f5920 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.830000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:13:58.830000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:13:58.830000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00c193470 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:13:58.830000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:02.545587 kubelet[2475]: E1002 20:14:02.545517 2475 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:14:02.556236 kubelet[2475]: E1002 20:14:02.556212 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:04.476677 env[1341]: time="2023-10-02T20:14:04.475738458Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:14:04.510427 env[1341]: time="2023-10-02T20:14:04.510382109Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" Oct 2 20:14:04.511199 env[1341]: time="2023-10-02T20:14:04.511164001Z" level=info msg="StartContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" Oct 2 20:14:04.531180 systemd[1]: Started cri-containerd-56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b.scope. Oct 2 20:14:04.543475 systemd[1]: cri-containerd-56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b.scope: Deactivated successfully. Oct 2 20:14:04.547962 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b-rootfs.mount: Deactivated successfully. Oct 2 20:14:04.579438 env[1341]: time="2023-10-02T20:14:04.579363513Z" level=info msg="shim disconnected" id=56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b Oct 2 20:14:04.579698 env[1341]: time="2023-10-02T20:14:04.579443613Z" level=warning msg="cleaning up after shim disconnected" id=56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b namespace=k8s.io Oct 2 20:14:04.579698 env[1341]: time="2023-10-02T20:14:04.579456913Z" level=info msg="cleaning up dead shim" Oct 2 20:14:04.587890 env[1341]: time="2023-10-02T20:14:04.587852128Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:14:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3056 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:14:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:14:04.588172 env[1341]: time="2023-10-02T20:14:04.588118925Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:14:04.589523 env[1341]: time="2023-10-02T20:14:04.589475312Z" level=error msg="Failed to pipe stdout of container \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" error="reading from a closed fifo" Oct 2 20:14:04.589606 env[1341]: time="2023-10-02T20:14:04.589549411Z" level=error msg="Failed to pipe stderr of container \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" error="reading from a closed fifo" Oct 2 20:14:04.594560 env[1341]: time="2023-10-02T20:14:04.594515561Z" level=error msg="StartContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:14:04.594958 kubelet[2475]: E1002 20:14:04.594778 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b" Oct 2 20:14:04.594958 kubelet[2475]: E1002 20:14:04.594892 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:14:04.594958 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:14:04.594958 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:14:04.594958 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:14:04.594958 kubelet[2475]: E1002 20:14:04.594932 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:14:04.750906 kubelet[2475]: I1002 20:14:04.749665 2475 scope.go:117] "RemoveContainer" containerID="41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b" Oct 2 20:14:04.750906 kubelet[2475]: I1002 20:14:04.750877 2475 scope.go:117] "RemoveContainer" containerID="41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b" Oct 2 20:14:04.752240 env[1341]: time="2023-10-02T20:14:04.752202071Z" level=info msg="RemoveContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" Oct 2 20:14:04.753369 env[1341]: time="2023-10-02T20:14:04.752838865Z" level=info msg="RemoveContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\"" Oct 2 20:14:04.753578 env[1341]: time="2023-10-02T20:14:04.753534358Z" level=error msg="RemoveContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\" failed" error="failed to set removing state for container \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\": container is already in removing state" Oct 2 20:14:04.753840 kubelet[2475]: E1002 20:14:04.753809 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\": container is already in removing state" containerID="41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b" Oct 2 20:14:04.753928 kubelet[2475]: E1002 20:14:04.753857 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b": container is already in removing state; Skipping pod "cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)" Oct 2 20:14:04.754800 kubelet[2475]: E1002 20:14:04.754269 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:14:04.766318 env[1341]: time="2023-10-02T20:14:04.766282729Z" level=info msg="RemoveContainer for \"41df06919bec8d6e6f671d02adede04a08687b404961fe93cf0bda2c217d162b\" returns successfully" Oct 2 20:14:07.557527 kubelet[2475]: E1002 20:14:07.557493 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:07.684850 kubelet[2475]: W1002 20:14:07.684804 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b.scope WatchSource:0}: task 56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b not found: not found Oct 2 20:14:12.559541 kubelet[2475]: E1002 20:14:12.559498 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:12.661000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.666440 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:14:12.666541 kernel: audit: type=1400 audit(1696277652.661:1106): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.661000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6c00 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.684426 kernel: audit: type=1300 audit(1696277652.661:1106): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6c00 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.707471 kernel: audit: type=1327 audit(1696277652.661:1106): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.725579 kernel: audit: type=1400 audit(1696277652.663:1107): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.663000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.663000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6d20 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.785701 kernel: audit: type=1300 audit(1696277652.663:1107): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6d20 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.785838 kernel: audit: type=1327 audit(1696277652.663:1107): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.786955 kernel: audit: type=1400 audit(1696277652.666:1108): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.666000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.666000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6d40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.825909 kernel: audit: type=1300 audit(1696277652.666:1108): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6d40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.825989 kernel: audit: type=1327 audit(1696277652.666:1108): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.666000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:12.672000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.861120 kernel: audit: type=1400 audit(1696277652.672:1109): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:12.672000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0026e6d60 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:12.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:17.561190 kubelet[2475]: E1002 20:14:17.561153 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:19.472051 kubelet[2475]: E1002 20:14:19.472016 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:14:22.562458 kubelet[2475]: E1002 20:14:22.562425 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:27.563587 kubelet[2475]: E1002 20:14:27.563554 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:32.564839 kubelet[2475]: E1002 20:14:32.564801 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:33.471601 kubelet[2475]: E1002 20:14:33.471557 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:14:37.565786 kubelet[2475]: E1002 20:14:37.565740 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:42.567387 kubelet[2475]: E1002 20:14:42.567351 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:47.568766 kubelet[2475]: E1002 20:14:47.568717 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:48.472212 kubelet[2475]: E1002 20:14:48.472165 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:14:52.570273 kubelet[2475]: E1002 20:14:52.570184 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:57.571323 kubelet[2475]: E1002 20:14:57.571270 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:14:58.649000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.655680 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:14:58.655790 kernel: audit: type=1400 audit(1696277698.649:1110): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.649000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002099710 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:58.700433 kernel: audit: type=1300 audit(1696277698.649:1110): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002099710 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:58.649000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:58.650000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.735701 kernel: audit: type=1327 audit(1696277698.649:1110): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:58.735795 kernel: audit: type=1400 audit(1696277698.650:1111): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.735825 kernel: audit: type=1300 audit(1696277698.650:1111): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fa5c80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:58.650000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fa5c80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:14:58.650000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:58.772680 kernel: audit: type=1327 audit(1696277698.650:1111): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:14:58.745000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.789310 kernel: audit: type=1400 audit(1696277698.745:1112): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.789395 kernel: audit: type=1300 audit(1696277698.745:1112): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0060f1860 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.745000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0060f1860 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.745000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.827870 kernel: audit: type=1327 audit(1696277698.745:1112): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.827970 kernel: audit: type=1400 audit(1696277698.745:1113): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.745000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.745000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0090c25c0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.745000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.745000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.745000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0060f18c0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.745000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.745000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.745000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006c76120 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.745000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.827000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.827000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006c765a0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.827000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:14:58.827000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:14:58.827000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0090c28a0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:14:58.827000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:00.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:53406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:00.868158 systemd[1]: Started sshd@7-10.200.8.15:22-10.200.12.6:53406.service. Oct 2 20:15:01.472125 kubelet[2475]: E1002 20:15:01.472086 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:01.587000 audit[3074]: USER_ACCT pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:01.589650 sshd[3074]: Accepted publickey for core from 10.200.12.6 port 53406 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:01.589000 audit[3074]: CRED_ACQ pid=3074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:01.591200 sshd[3074]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:01.589000 audit[3074]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff57ceef70 a2=3 a3=0 items=0 ppid=1 pid=3074 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:01.589000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:01.595345 systemd-logind[1321]: New session 10 of user core. Oct 2 20:15:01.597503 systemd[1]: Started session-10.scope. Oct 2 20:15:01.600000 audit[3074]: USER_START pid=3074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:01.602000 audit[3076]: CRED_ACQ pid=3076 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:02.125210 sshd[3074]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:02.125000 audit[3074]: USER_END pid=3074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:02.125000 audit[3074]: CRED_DISP pid=3074 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:02.127000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:53406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:02.128293 systemd-logind[1321]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:15:02.128509 systemd[1]: sshd@7-10.200.8.15:22-10.200.12.6:53406.service: Deactivated successfully. Oct 2 20:15:02.129493 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:15:02.130338 systemd-logind[1321]: Removed session 10. Oct 2 20:15:02.571979 kubelet[2475]: E1002 20:15:02.571941 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:07.573153 kubelet[2475]: E1002 20:15:07.573111 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:12.255488 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:15:12.255639 kernel: audit: type=1130 audit(1696277712.230:1127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:49904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:12.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:49904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:12.231990 systemd[1]: Started sshd@8-10.200.8.15:22-10.200.12.6:49904.service. Oct 2 20:15:12.574137 kubelet[2475]: E1002 20:15:12.574116 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:12.660000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.683449 kernel: audit: type=1400 audit(1696277712.660:1128): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.683541 kernel: audit: type=1300 audit(1696277712.660:1128): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea3b40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.660000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea3b40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.720585 kernel: audit: type=1327 audit(1696277712.660:1128): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.720666 kernel: audit: type=1400 audit(1696277712.663:1129): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.663000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.663000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c820 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.759431 kernel: audit: type=1300 audit(1696277712.663:1129): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c820 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.777470 kernel: audit: type=1327 audit(1696277712.663:1129): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.777560 kernel: audit: type=1400 audit(1696277712.666:1130): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.666000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.794834 kernel: audit: type=1300 audit(1696277712.666:1130): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea3b80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.666000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ea3b80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.666000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.817436 kernel: audit: type=1327 audit(1696277712.666:1130): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.672000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:12.672000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c960 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:12.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:12.867000 audit[3090]: USER_ACCT pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:12.869138 sshd[3090]: Accepted publickey for core from 10.200.12.6 port 49904 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:12.868000 audit[3090]: CRED_ACQ pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:12.868000 audit[3090]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4fad4a40 a2=3 a3=0 items=0 ppid=1 pid=3090 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:12.868000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:12.870584 sshd[3090]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:12.875565 systemd[1]: Started session-11.scope. Oct 2 20:15:12.876438 systemd-logind[1321]: New session 11 of user core. Oct 2 20:15:12.879000 audit[3090]: USER_START pid=3090 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:12.881000 audit[3092]: CRED_ACQ pid=3092 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:13.363761 sshd[3090]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:13.363000 audit[3090]: USER_END pid=3090 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:13.363000 audit[3090]: CRED_DISP pid=3090 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:13.367090 systemd[1]: sshd@8-10.200.8.15:22-10.200.12.6:49904.service: Deactivated successfully. Oct 2 20:15:13.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:49904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:13.368221 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:15:13.369154 systemd-logind[1321]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:15:13.370142 systemd-logind[1321]: Removed session 11. Oct 2 20:15:15.471421 kubelet[2475]: E1002 20:15:15.471367 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:17.575439 kubelet[2475]: E1002 20:15:17.575395 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:22.576669 kubelet[2475]: E1002 20:15:22.576595 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:23.471498 systemd[1]: Started sshd@9-10.200.8.15:22-10.200.12.6:43118.service. Oct 2 20:15:23.499806 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:15:23.499900 kernel: audit: type=1130 audit(1696277723.470:1140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:43118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:23.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:43118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:24.100000 audit[3106]: USER_ACCT pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.121810 sshd[3106]: Accepted publickey for core from 10.200.12.6 port 43118 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:24.122189 sshd[3106]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:24.122443 kernel: audit: type=1101 audit(1696277724.100:1141): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.120000 audit[3106]: CRED_ACQ pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.127843 systemd[1]: Started session-12.scope. Oct 2 20:15:24.129181 systemd-logind[1321]: New session 12 of user core. Oct 2 20:15:24.142423 kernel: audit: type=1103 audit(1696277724.120:1142): pid=3106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.120000 audit[3106]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee568400 a2=3 a3=0 items=0 ppid=1 pid=3106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:24.174482 kernel: audit: type=1006 audit(1696277724.120:1143): pid=3106 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:15:24.174553 kernel: audit: type=1300 audit(1696277724.120:1143): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee568400 a2=3 a3=0 items=0 ppid=1 pid=3106 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:24.174580 kernel: audit: type=1327 audit(1696277724.120:1143): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:24.120000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:24.137000 audit[3106]: USER_START pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.204983 kernel: audit: type=1105 audit(1696277724.137:1144): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.205161 kernel: audit: type=1103 audit(1696277724.141:1145): pid=3111 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.141000 audit[3111]: CRED_ACQ pid=3111 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.601944 sshd[3106]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:24.602000 audit[3106]: USER_END pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.605684 systemd[1]: sshd@9-10.200.8.15:22-10.200.12.6:43118.service: Deactivated successfully. Oct 2 20:15:24.606489 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:15:24.607890 systemd-logind[1321]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:15:24.608795 systemd-logind[1321]: Removed session 12. Oct 2 20:15:24.602000 audit[3106]: CRED_DISP pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.639835 kernel: audit: type=1106 audit(1696277724.602:1146): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.639920 kernel: audit: type=1104 audit(1696277724.602:1147): pid=3106 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:24.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:43118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:27.578155 kubelet[2475]: E1002 20:15:27.578113 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:29.474228 env[1341]: time="2023-10-02T20:15:29.474164743Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:15:29.507981 env[1341]: time="2023-10-02T20:15:29.507933094Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" Oct 2 20:15:29.508545 env[1341]: time="2023-10-02T20:15:29.508513293Z" level=info msg="StartContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" Oct 2 20:15:29.534569 systemd[1]: Started cri-containerd-6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42.scope. Oct 2 20:15:29.546495 systemd[1]: cri-containerd-6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42.scope: Deactivated successfully. Oct 2 20:15:29.573761 env[1341]: time="2023-10-02T20:15:29.573705098Z" level=info msg="shim disconnected" id=6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42 Oct 2 20:15:29.573761 env[1341]: time="2023-10-02T20:15:29.573762198Z" level=warning msg="cleaning up after shim disconnected" id=6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42 namespace=k8s.io Oct 2 20:15:29.574054 env[1341]: time="2023-10-02T20:15:29.573773698Z" level=info msg="cleaning up dead shim" Oct 2 20:15:29.582025 env[1341]: time="2023-10-02T20:15:29.581981686Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:15:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3146 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:15:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:15:29.582289 env[1341]: time="2023-10-02T20:15:29.582231385Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:15:29.582507 env[1341]: time="2023-10-02T20:15:29.582462885Z" level=error msg="Failed to pipe stdout of container \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" error="reading from a closed fifo" Oct 2 20:15:29.586593 env[1341]: time="2023-10-02T20:15:29.586552079Z" level=error msg="Failed to pipe stderr of container \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" error="reading from a closed fifo" Oct 2 20:15:29.591082 env[1341]: time="2023-10-02T20:15:29.591039372Z" level=error msg="StartContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:15:29.591336 kubelet[2475]: E1002 20:15:29.591296 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42" Oct 2 20:15:29.591703 kubelet[2475]: E1002 20:15:29.591632 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:15:29.591703 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:15:29.591703 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:15:29.591703 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:15:29.591703 kubelet[2475]: E1002 20:15:29.591683 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:29.920258 kubelet[2475]: I1002 20:15:29.920229 2475 scope.go:117] "RemoveContainer" containerID="56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b" Oct 2 20:15:29.921923 kubelet[2475]: I1002 20:15:29.920694 2475 scope.go:117] "RemoveContainer" containerID="56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b" Oct 2 20:15:29.922052 env[1341]: time="2023-10-02T20:15:29.922018388Z" level=info msg="RemoveContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" Oct 2 20:15:29.923420 env[1341]: time="2023-10-02T20:15:29.923371786Z" level=info msg="RemoveContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\"" Oct 2 20:15:29.923568 env[1341]: time="2023-10-02T20:15:29.923530386Z" level=error msg="RemoveContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\" failed" error="failed to set removing state for container \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\": container is already in removing state" Oct 2 20:15:29.923701 kubelet[2475]: E1002 20:15:29.923681 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\": container is already in removing state" containerID="56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b" Oct 2 20:15:29.923782 kubelet[2475]: E1002 20:15:29.923715 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b": container is already in removing state; Skipping pod "cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)" Oct 2 20:15:29.923998 kubelet[2475]: E1002 20:15:29.923974 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:29.936007 env[1341]: time="2023-10-02T20:15:29.935081669Z" level=info msg="RemoveContainer for \"56358ae087b2aa208aaaac0d1f3df29ae6ec5df567493e11fa907730a9e38e4b\" returns successfully" Oct 2 20:15:30.499228 systemd[1]: run-containerd-runc-k8s.io-6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42-runc.DZXmER.mount: Deactivated successfully. Oct 2 20:15:30.499387 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42-rootfs.mount: Deactivated successfully. Oct 2 20:15:32.579272 kubelet[2475]: E1002 20:15:32.579235 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:32.678290 kubelet[2475]: W1002 20:15:32.678242 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42.scope WatchSource:0}: task 6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42 not found: not found Oct 2 20:15:34.709530 systemd[1]: Started sshd@10-10.200.8.15:22-10.200.12.6:53812.service. Oct 2 20:15:34.733649 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:34.733770 kernel: audit: type=1130 audit(1696277734.708:1149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:53812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:34.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:53812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:35.357000 audit[3161]: USER_ACCT pid=3161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.383389 sshd[3161]: Accepted publickey for core from 10.200.12.6 port 53812 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:35.383756 kernel: audit: type=1101 audit(1696277735.357:1150): pid=3161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.383918 sshd[3161]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:35.381000 audit[3161]: CRED_ACQ pid=3161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.389344 systemd[1]: Started session-13.scope. Oct 2 20:15:35.390610 systemd-logind[1321]: New session 13 of user core. Oct 2 20:15:35.411213 kernel: audit: type=1103 audit(1696277735.381:1151): pid=3161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.411296 kernel: audit: type=1006 audit(1696277735.381:1152): pid=3161 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:15:35.411326 kernel: audit: type=1300 audit(1696277735.381:1152): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea6f97710 a2=3 a3=0 items=0 ppid=1 pid=3161 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:35.381000 audit[3161]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea6f97710 a2=3 a3=0 items=0 ppid=1 pid=3161 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:35.381000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:35.430476 kernel: audit: type=1327 audit(1696277735.381:1152): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:35.393000 audit[3161]: USER_START pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.436502 kernel: audit: type=1105 audit(1696277735.393:1153): pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.393000 audit[3163]: CRED_ACQ pid=3163 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.471948 kernel: audit: type=1103 audit(1696277735.393:1154): pid=3163 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.855438 sshd[3161]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:35.855000 audit[3161]: USER_END pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.859136 systemd[1]: sshd@10-10.200.8.15:22-10.200.12.6:53812.service: Deactivated successfully. Oct 2 20:15:35.860004 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:15:35.861331 systemd-logind[1321]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:15:35.862228 systemd-logind[1321]: Removed session 13. Oct 2 20:15:35.856000 audit[3161]: CRED_DISP pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.894455 kernel: audit: type=1106 audit(1696277735.855:1155): pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.894571 kernel: audit: type=1104 audit(1696277735.856:1156): pid=3161 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:35.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:53812 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:37.580863 kubelet[2475]: E1002 20:15:37.580826 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:42.472046 kubelet[2475]: E1002 20:15:42.471997 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:42.582286 kubelet[2475]: E1002 20:15:42.582253 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:45.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:37968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:45.961005 systemd[1]: Started sshd@11-10.200.8.15:22-10.200.12.6:37968.service. Oct 2 20:15:45.966273 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:45.966357 kernel: audit: type=1130 audit(1696277745.959:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:37968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:46.590000 audit[3174]: USER_ACCT pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.592380 sshd[3174]: Accepted publickey for core from 10.200.12.6 port 37968 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:46.612439 kernel: audit: type=1101 audit(1696277746.590:1159): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.613050 sshd[3174]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:46.611000 audit[3174]: CRED_ACQ pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.620717 systemd[1]: Started session-14.scope. Oct 2 20:15:46.621563 systemd-logind[1321]: New session 14 of user core. Oct 2 20:15:46.642755 kernel: audit: type=1103 audit(1696277746.611:1160): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.642869 kernel: audit: type=1006 audit(1696277746.611:1161): pid=3174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:15:46.642892 kernel: audit: type=1300 audit(1696277746.611:1161): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffce6e9b0 a2=3 a3=0 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:46.611000 audit[3174]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffce6e9b0 a2=3 a3=0 items=0 ppid=1 pid=3174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:46.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:46.627000 audit[3174]: USER_START pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.696312 kernel: audit: type=1327 audit(1696277746.611:1161): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:46.696532 kernel: audit: type=1105 audit(1696277746.627:1162): pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.629000 audit[3176]: CRED_ACQ pid=3176 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:46.715435 kernel: audit: type=1103 audit(1696277746.629:1163): pid=3176 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:47.094828 sshd[3174]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:47.094000 audit[3174]: USER_END pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:47.097642 systemd[1]: sshd@11-10.200.8.15:22-10.200.12.6:37968.service: Deactivated successfully. Oct 2 20:15:47.098301 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:15:47.100175 systemd-logind[1321]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:15:47.101320 systemd-logind[1321]: Removed session 14. Oct 2 20:15:47.095000 audit[3174]: CRED_DISP pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:47.121459 kernel: audit: type=1106 audit(1696277747.094:1164): pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:47.121500 kernel: audit: type=1104 audit(1696277747.095:1165): pid=3174 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:47.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:37968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:47.583569 kubelet[2475]: E1002 20:15:47.583523 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:52.585262 kubelet[2475]: E1002 20:15:52.585214 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:57.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:57.201456 systemd[1]: Started sshd@12-10.200.8.15:22-10.200.12.6:45112.service. Oct 2 20:15:57.206747 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:15:57.206859 kernel: audit: type=1130 audit(1696277757.200:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:57.471539 kubelet[2475]: E1002 20:15:57.471282 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:15:57.586291 kubelet[2475]: E1002 20:15:57.586261 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:15:58.025000 audit[3193]: USER_ACCT pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.027635 sshd[3193]: Accepted publickey for core from 10.200.12.6 port 45112 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:15:58.046000 audit[3193]: CRED_ACQ pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.048809 sshd[3193]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:15:58.053782 systemd[1]: Started session-15.scope. Oct 2 20:15:58.054896 systemd-logind[1321]: New session 15 of user core. Oct 2 20:15:58.065316 kernel: audit: type=1101 audit(1696277758.025:1168): pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.065435 kernel: audit: type=1103 audit(1696277758.046:1169): pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.065476 kernel: audit: type=1006 audit(1696277758.047:1170): pid=3193 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:15:58.047000 audit[3193]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8e6d6790 a2=3 a3=0 items=0 ppid=1 pid=3193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:58.093209 kernel: audit: type=1300 audit(1696277758.047:1170): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8e6d6790 a2=3 a3=0 items=0 ppid=1 pid=3193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:15:58.093279 kernel: audit: type=1327 audit(1696277758.047:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:58.047000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:15:58.058000 audit[3193]: USER_START pid=3193 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.099435 kernel: audit: type=1105 audit(1696277758.058:1171): pid=3193 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.060000 audit[3195]: CRED_ACQ pid=3195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.135470 kernel: audit: type=1103 audit(1696277758.060:1172): pid=3195 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.651000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.651000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bb1740 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:58.698501 kernel: audit: type=1400 audit(1696277758.651:1173): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.698603 kernel: audit: type=1300 audit(1696277758.651:1173): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bb1740 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:58.651000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:58.652000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.652000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00233c520 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:15:58.652000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:15:58.728339 sshd[3193]: pam_unix(sshd:session): session closed for user core Oct 2 20:15:58.728000 audit[3193]: USER_END pid=3193 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.728000 audit[3193]: CRED_DISP pid=3193 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:15:58.731844 systemd[1]: sshd@12-10.200.8.15:22-10.200.12.6:45112.service: Deactivated successfully. Oct 2 20:15:58.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:45112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:15:58.733378 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:15:58.733474 systemd-logind[1321]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:15:58.734601 systemd-logind[1321]: Removed session 15. Oct 2 20:15:58.749000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.749000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.749000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006c76150 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.749000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0060f1ec0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.749000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:58.749000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:58.750000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.750000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007f3ca20 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.750000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:58.750000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.750000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006c76270 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.750000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:58.831000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.831000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:15:58.831000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007f3cba0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:15:58.831000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c006d6c3f0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:15:58.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:02.587184 kubelet[2475]: E1002 20:16:02.587143 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:07.588052 kubelet[2475]: E1002 20:16:07.588014 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:08.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:51358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:08.835080 systemd[1]: Started sshd@13-10.200.8.15:22-10.200.12.6:51358.service. Oct 2 20:16:08.840315 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:16:08.840434 kernel: audit: type=1130 audit(1696277768.833:1184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:51358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:09.458000 audit[3209]: USER_ACCT pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.479714 sshd[3209]: Accepted publickey for core from 10.200.12.6 port 51358 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:09.480473 kernel: audit: type=1101 audit(1696277769.458:1185): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.478000 audit[3209]: CRED_ACQ pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.480863 sshd[3209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:09.486141 systemd[1]: Started session-16.scope. Oct 2 20:16:09.487554 systemd-logind[1321]: New session 16 of user core. Oct 2 20:16:09.508521 kernel: audit: type=1103 audit(1696277769.478:1186): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.508650 kernel: audit: type=1006 audit(1696277769.479:1187): pid=3209 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:16:09.508678 kernel: audit: type=1300 audit(1696277769.479:1187): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff325283e0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:09.479000 audit[3209]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff325283e0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:09.479000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:09.491000 audit[3209]: USER_START pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.560867 kernel: audit: type=1327 audit(1696277769.479:1187): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:09.561095 kernel: audit: type=1105 audit(1696277769.491:1188): pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.561161 kernel: audit: type=1103 audit(1696277769.493:1189): pid=3211 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:09.493000 audit[3211]: CRED_ACQ pid=3211 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:10.094780 sshd[3209]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:10.094000 audit[3209]: USER_END pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:10.098739 systemd-logind[1321]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:16:10.099959 systemd[1]: sshd@13-10.200.8.15:22-10.200.12.6:51358.service: Deactivated successfully. Oct 2 20:16:10.100686 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:16:10.101868 systemd-logind[1321]: Removed session 16. Oct 2 20:16:10.094000 audit[3209]: CRED_DISP pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:10.133548 kernel: audit: type=1106 audit(1696277770.094:1190): pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:10.133684 kernel: audit: type=1104 audit(1696277770.094:1191): pid=3209 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:10.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:51358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:11.471926 kubelet[2475]: E1002 20:16:11.471877 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:16:12.589421 kubelet[2475]: E1002 20:16:12.589364 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:12.663000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:12.663000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025b9780 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:12.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:12.664000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:12.664000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00233d6a0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:12.664000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:12.667000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:12.667000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025b99c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:12.667000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:12.672000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:12.672000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00233d7e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:12.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:17.590445 kubelet[2475]: E1002 20:16:17.590396 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:20.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:59998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:20.200323 systemd[1]: Started sshd@14-10.200.8.15:22-10.200.12.6:59998.service. Oct 2 20:16:20.224291 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:16:20.224444 kernel: audit: type=1130 audit(1696277780.199:1197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:59998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:20.822000 audit[3224]: USER_ACCT pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.842828 sshd[3224]: Accepted publickey for core from 10.200.12.6 port 59998 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:20.843234 sshd[3224]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:20.843524 kernel: audit: type=1101 audit(1696277780.822:1198): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.841000 audit[3224]: CRED_ACQ pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.850877 systemd[1]: Started session-17.scope. Oct 2 20:16:20.851449 systemd-logind[1321]: New session 17 of user core. Oct 2 20:16:20.873441 kernel: audit: type=1103 audit(1696277780.841:1199): pid=3224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.873535 kernel: audit: type=1006 audit(1696277780.841:1200): pid=3224 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:16:20.873560 kernel: audit: type=1300 audit(1696277780.841:1200): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd2d30650 a2=3 a3=0 items=0 ppid=1 pid=3224 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:20.841000 audit[3224]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd2d30650 a2=3 a3=0 items=0 ppid=1 pid=3224 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:20.841000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:20.897193 kernel: audit: type=1327 audit(1696277780.841:1200): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:20.897266 kernel: audit: type=1105 audit(1696277780.855:1201): pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.855000 audit[3224]: USER_START pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.859000 audit[3226]: CRED_ACQ pid=3226 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:20.932568 kernel: audit: type=1103 audit(1696277780.859:1202): pid=3226 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:21.329453 sshd[3224]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:21.329000 audit[3224]: USER_END pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:21.332885 systemd[1]: sshd@14-10.200.8.15:22-10.200.12.6:59998.service: Deactivated successfully. Oct 2 20:16:21.333624 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:16:21.335193 systemd-logind[1321]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:16:21.336077 systemd-logind[1321]: Removed session 17. Oct 2 20:16:21.329000 audit[3224]: CRED_DISP pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:21.368595 kernel: audit: type=1106 audit(1696277781.329:1203): pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:21.368708 kernel: audit: type=1104 audit(1696277781.329:1204): pid=3224 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:21.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:59998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:22.472264 kubelet[2475]: E1002 20:16:22.472218 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:16:22.592051 kubelet[2475]: E1002 20:16:22.592014 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:27.592962 kubelet[2475]: E1002 20:16:27.592920 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:31.466012 systemd[1]: Started sshd@15-10.200.8.15:22-10.200.12.6:36898.service. Oct 2 20:16:31.501464 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:16:31.501698 kernel: audit: type=1130 audit(1696277791.465:1206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:36898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:31.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:36898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:32.153500 kernel: audit: type=1101 audit(1696277792.130:1207): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.130000 audit[3238]: USER_ACCT pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.153781 sshd[3238]: Accepted publickey for core from 10.200.12.6 port 36898 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:32.154127 sshd[3238]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:32.152000 audit[3238]: CRED_ACQ pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.158923 systemd[1]: Started session-18.scope. Oct 2 20:16:32.159938 systemd-logind[1321]: New session 18 of user core. Oct 2 20:16:32.182823 kernel: audit: type=1103 audit(1696277792.152:1208): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.182975 kernel: audit: type=1006 audit(1696277792.152:1209): pid=3238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:16:32.183008 kernel: audit: type=1300 audit(1696277792.152:1209): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc6ec4ae0 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:32.152000 audit[3238]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc6ec4ae0 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:32.205928 kernel: audit: type=1327 audit(1696277792.152:1209): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:32.152000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:32.164000 audit[3238]: USER_START pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.213487 kernel: audit: type=1105 audit(1696277792.164:1210): pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.236443 kernel: audit: type=1103 audit(1696277792.166:1211): pid=3240 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.166000 audit[3240]: CRED_ACQ pid=3240 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.594582 kubelet[2475]: E1002 20:16:32.594546 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:32.679823 sshd[3238]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:32.679000 audit[3238]: USER_END pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.683092 systemd[1]: sshd@15-10.200.8.15:22-10.200.12.6:36898.service: Deactivated successfully. Oct 2 20:16:32.683973 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:16:32.686230 systemd-logind[1321]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:16:32.687500 systemd-logind[1321]: Removed session 18. Oct 2 20:16:32.679000 audit[3238]: CRED_DISP pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.719754 kernel: audit: type=1106 audit(1696277792.679:1212): pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.719891 kernel: audit: type=1104 audit(1696277792.679:1213): pid=3238 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:32.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:36898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:36.472346 kubelet[2475]: E1002 20:16:36.472293 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:16:37.595577 kubelet[2475]: E1002 20:16:37.595530 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:42.597141 kubelet[2475]: E1002 20:16:42.597102 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:42.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:33338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:42.805036 systemd[1]: Started sshd@16-10.200.8.15:22-10.200.12.6:33338.service. Oct 2 20:16:42.810142 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:16:42.810248 kernel: audit: type=1130 audit(1696277802.803:1215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:33338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:43.568000 audit[3252]: USER_ACCT pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.570577 sshd[3252]: Accepted publickey for core from 10.200.12.6 port 33338 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:43.590431 kernel: audit: type=1101 audit(1696277803.568:1216): pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.589000 audit[3252]: CRED_ACQ pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.591234 sshd[3252]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:43.596308 systemd[1]: Started session-19.scope. Oct 2 20:16:43.597442 systemd-logind[1321]: New session 19 of user core. Oct 2 20:16:43.618897 kernel: audit: type=1103 audit(1696277803.589:1217): pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.619034 kernel: audit: type=1006 audit(1696277803.589:1218): pid=3252 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:16:43.619061 kernel: audit: type=1300 audit(1696277803.589:1218): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd71c2d90 a2=3 a3=0 items=0 ppid=1 pid=3252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:43.589000 audit[3252]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd71c2d90 a2=3 a3=0 items=0 ppid=1 pid=3252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:43.637560 kernel: audit: type=1327 audit(1696277803.589:1218): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:43.589000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:43.601000 audit[3252]: USER_START pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.644507 kernel: audit: type=1105 audit(1696277803.601:1219): pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.603000 audit[3254]: CRED_ACQ pid=3254 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:43.679498 kernel: audit: type=1103 audit(1696277803.603:1220): pid=3254 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.078188 sshd[3252]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:44.078000 audit[3252]: USER_END pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.085127 systemd[1]: sshd@16-10.200.8.15:22-10.200.12.6:33338.service: Deactivated successfully. Oct 2 20:16:44.086032 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:16:44.087987 systemd-logind[1321]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:16:44.088945 systemd-logind[1321]: Removed session 19. Oct 2 20:16:44.082000 audit[3252]: CRED_DISP pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.124356 kernel: audit: type=1106 audit(1696277804.078:1221): pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.124532 kernel: audit: type=1104 audit(1696277804.082:1222): pid=3252 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:33338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:44.183671 systemd[1]: Started sshd@17-10.200.8.15:22-10.200.12.6:33354.service. Oct 2 20:16:44.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:44.802000 audit[3266]: USER_ACCT pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.803756 sshd[3266]: Accepted publickey for core from 10.200.12.6 port 33354 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:44.803000 audit[3266]: CRED_ACQ pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.803000 audit[3266]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec6d99250 a2=3 a3=0 items=0 ppid=1 pid=3266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:44.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:44.805200 sshd[3266]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:44.810285 systemd[1]: Started session-20.scope. Oct 2 20:16:44.810751 systemd-logind[1321]: New session 20 of user core. Oct 2 20:16:44.814000 audit[3266]: USER_START pid=3266 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:44.815000 audit[3268]: CRED_ACQ pid=3268 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:45.941887 sshd[3266]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:45.941000 audit[3266]: USER_END pid=3266 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:45.941000 audit[3266]: CRED_DISP pid=3266 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:45.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:33354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:45.944927 systemd-logind[1321]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:16:45.945121 systemd[1]: sshd@17-10.200.8.15:22-10.200.12.6:33354.service: Deactivated successfully. Oct 2 20:16:45.946009 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:16:45.947309 systemd-logind[1321]: Removed session 20. Oct 2 20:16:46.047492 systemd[1]: Started sshd@18-10.200.8.15:22-10.200.12.6:33366.service. Oct 2 20:16:46.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:33366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:46.668000 audit[3276]: USER_ACCT pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:46.670076 sshd[3276]: Accepted publickey for core from 10.200.12.6 port 33366 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:46.669000 audit[3276]: CRED_ACQ pid=3276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:46.669000 audit[3276]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc658eb830 a2=3 a3=0 items=0 ppid=1 pid=3276 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:46.669000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:46.671836 sshd[3276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:46.676736 systemd[1]: Started session-21.scope. Oct 2 20:16:46.677494 systemd-logind[1321]: New session 21 of user core. Oct 2 20:16:46.680000 audit[3276]: USER_START pid=3276 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:46.682000 audit[3278]: CRED_ACQ pid=3278 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:47.169204 sshd[3276]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:47.169000 audit[3276]: USER_END pid=3276 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:47.169000 audit[3276]: CRED_DISP pid=3276 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:47.172320 systemd[1]: sshd@18-10.200.8.15:22-10.200.12.6:33366.service: Deactivated successfully. Oct 2 20:16:47.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:33366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:47.173285 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:16:47.173955 systemd-logind[1321]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:16:47.174862 systemd-logind[1321]: Removed session 21. Oct 2 20:16:47.471476 kubelet[2475]: E1002 20:16:47.471314 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:16:47.597914 kubelet[2475]: E1002 20:16:47.597874 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:52.599583 kubelet[2475]: E1002 20:16:52.599544 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:57.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:52558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:57.277358 systemd[1]: Started sshd@19-10.200.8.15:22-10.200.12.6:52558.service. Oct 2 20:16:57.302208 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:16:57.302366 kernel: audit: type=1130 audit(1696277817.276:1242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:52558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:57.600611 kubelet[2475]: E1002 20:16:57.600578 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:16:57.904000 audit[3290]: USER_ACCT pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:57.925714 sshd[3290]: Accepted publickey for core from 10.200.12.6 port 52558 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:16:57.926108 sshd[3290]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:16:57.926436 kernel: audit: type=1101 audit(1696277817.904:1243): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:57.924000 audit[3290]: CRED_ACQ pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:57.939491 systemd[1]: Started session-22.scope. Oct 2 20:16:57.940624 systemd-logind[1321]: New session 22 of user core. Oct 2 20:16:57.946465 kernel: audit: type=1103 audit(1696277817.924:1244): pid=3290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:57.924000 audit[3290]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc06f1e3c0 a2=3 a3=0 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:57.975728 kernel: audit: type=1006 audit(1696277817.924:1245): pid=3290 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:16:57.975880 kernel: audit: type=1300 audit(1696277817.924:1245): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc06f1e3c0 a2=3 a3=0 items=0 ppid=1 pid=3290 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:16:57.976500 kernel: audit: type=1327 audit(1696277817.924:1245): proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:57.924000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:16:57.945000 audit[3290]: USER_START pid=3290 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:58.001098 kernel: audit: type=1105 audit(1696277817.945:1246): pid=3290 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:58.001221 kernel: audit: type=1103 audit(1696277817.945:1247): pid=3292 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:57.945000 audit[3292]: CRED_ACQ pid=3292 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:58.472559 kubelet[2475]: E1002 20:16:58.471556 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:16:58.652000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.652000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f5ba10 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:58.675433 kernel: audit: type=1400 audit(1696277818.652:1248): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.675496 kernel: audit: type=1300 audit(1696277818.652:1248): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f5ba10 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:58.652000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:58.653000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.653000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001401a80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:16:58.653000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:16:58.704340 sshd[3290]: pam_unix(sshd:session): session closed for user core Oct 2 20:16:58.704000 audit[3290]: USER_END pid=3290 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:58.704000 audit[3290]: CRED_DISP pid=3290 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:16:58.706999 systemd[1]: sshd@19-10.200.8.15:22-10.200.12.6:52558.service: Deactivated successfully. Oct 2 20:16:58.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:52558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:16:58.708269 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:16:58.708302 systemd-logind[1321]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:16:58.709456 systemd-logind[1321]: Removed session 22. Oct 2 20:16:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005a09380 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00bdf1e60 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00c621bf0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00c621c50 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:58.831000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.831000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:16:58.831000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005a09bf0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.831000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c007182a20 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:16:58.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:16:58.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:02.602382 kubelet[2475]: E1002 20:17:02.602345 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:07.603827 kubelet[2475]: E1002 20:17:07.603784 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:08.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:49852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:08.821542 systemd[1]: Started sshd@20-10.200.8.15:22-10.200.12.6:49852.service. Oct 2 20:17:08.826850 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:17:08.826998 kernel: audit: type=1130 audit(1696277828.820:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:49852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:09.442000 audit[3304]: USER_ACCT pid=3304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.444439 sshd[3304]: Accepted publickey for core from 10.200.12.6 port 49852 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:09.463000 audit[3304]: CRED_ACQ pid=3304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.465733 sshd[3304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:09.470752 systemd[1]: Started session-23.scope. Oct 2 20:17:09.471375 systemd-logind[1321]: New session 23 of user core. Oct 2 20:17:09.482216 kernel: audit: type=1101 audit(1696277829.442:1260): pid=3304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.482311 kernel: audit: type=1103 audit(1696277829.463:1261): pid=3304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.482343 kernel: audit: type=1006 audit(1696277829.463:1262): pid=3304 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:17:09.463000 audit[3304]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b0fecc0 a2=3 a3=0 items=0 ppid=1 pid=3304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:09.493424 kernel: audit: type=1300 audit(1696277829.463:1262): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b0fecc0 a2=3 a3=0 items=0 ppid=1 pid=3304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:09.463000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:09.511471 kernel: audit: type=1327 audit(1696277829.463:1262): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:09.475000 audit[3304]: USER_START pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.518426 kernel: audit: type=1105 audit(1696277829.475:1263): pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.477000 audit[3306]: CRED_ACQ pid=3306 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:09.553542 kernel: audit: type=1103 audit(1696277829.477:1264): pid=3306 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:10.104823 sshd[3304]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:10.104000 audit[3304]: USER_END pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:10.107422 systemd[1]: sshd@20-10.200.8.15:22-10.200.12.6:49852.service: Deactivated successfully. Oct 2 20:17:10.108473 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:17:10.110969 systemd-logind[1321]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:17:10.112138 systemd-logind[1321]: Removed session 23. Oct 2 20:17:10.104000 audit[3304]: CRED_DISP pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:10.144396 kernel: audit: type=1106 audit(1696277830.104:1265): pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:10.144575 kernel: audit: type=1104 audit(1696277830.104:1266): pid=3304 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:10.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:49852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:10.472211 kubelet[2475]: E1002 20:17:10.472086 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:17:12.604674 kubelet[2475]: E1002 20:17:12.604636 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:12.664000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:12.664000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001441c20 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:12.664000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:12.665000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:12.665000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001162bc0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:12.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:12.668000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:12.668000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001162c40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:12.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:12.674000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:12.674000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001163060 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:12.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:17.605891 kubelet[2475]: E1002 20:17:17.605854 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:20.280915 systemd[1]: Started sshd@21-10.200.8.15:22-10.200.12.6:52454.service. Oct 2 20:17:20.304239 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:17:20.304376 kernel: audit: type=1130 audit(1696277840.280:1272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:52454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:20.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:52454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:20.901000 audit[3317]: USER_ACCT pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:20.904789 sshd[3317]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:20.925647 kernel: audit: type=1101 audit(1696277840.901:1273): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:20.925697 sshd[3317]: Accepted publickey for core from 10.200.12.6 port 52454 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:20.903000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:20.933429 systemd[1]: Started session-24.scope. Oct 2 20:17:20.934782 systemd-logind[1321]: New session 24 of user core. Oct 2 20:17:20.944484 kernel: audit: type=1103 audit(1696277840.903:1274): pid=3317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:20.944562 kernel: audit: type=1006 audit(1696277840.903:1275): pid=3317 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:17:20.903000 audit[3317]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1bc35c20 a2=3 a3=0 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:20.955598 kernel: audit: type=1300 audit(1696277840.903:1275): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1bc35c20 a2=3 a3=0 items=0 ppid=1 pid=3317 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:20.903000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:20.973481 kernel: audit: type=1327 audit(1696277840.903:1275): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:20.934000 audit[3317]: USER_START pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.001015 kernel: audit: type=1105 audit(1696277840.934:1276): pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.002302 kernel: audit: type=1103 audit(1696277840.939:1277): pid=3319 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:20.939000 audit[3319]: CRED_ACQ pid=3319 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.419545 sshd[3317]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:21.419000 audit[3317]: USER_END pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.423831 systemd-logind[1321]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:17:21.425271 systemd[1]: sshd@21-10.200.8.15:22-10.200.12.6:52454.service: Deactivated successfully. Oct 2 20:17:21.425995 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:17:21.427566 systemd-logind[1321]: Removed session 24. Oct 2 20:17:21.441483 kernel: audit: type=1106 audit(1696277841.419:1278): pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.441602 kernel: audit: type=1104 audit(1696277841.419:1279): pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.419000 audit[3317]: CRED_DISP pid=3317 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:21.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:52454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:21.471759 kubelet[2475]: E1002 20:17:21.471719 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:17:22.606995 kubelet[2475]: E1002 20:17:22.606944 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:27.608598 kubelet[2475]: E1002 20:17:27.608554 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:31.551027 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:31.551215 kernel: audit: type=1130 audit(1696277851.526:1281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:54808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:31.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:54808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:31.527447 systemd[1]: Started sshd@22-10.200.8.15:22-10.200.12.6:54808.service. Oct 2 20:17:32.155000 audit[3329]: USER_ACCT pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.178886 sshd[3329]: Accepted publickey for core from 10.200.12.6 port 54808 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:32.177000 audit[3329]: CRED_ACQ pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.179281 sshd[3329]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:32.188421 systemd[1]: Started session-25.scope. Oct 2 20:17:32.189527 systemd-logind[1321]: New session 25 of user core. Oct 2 20:17:32.198295 kernel: audit: type=1101 audit(1696277852.155:1282): pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.198374 kernel: audit: type=1103 audit(1696277852.177:1283): pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.198400 kernel: audit: type=1006 audit(1696277852.177:1284): pid=3329 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:17:32.177000 audit[3329]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd79941af0 a2=3 a3=0 items=0 ppid=1 pid=3329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:32.226986 kernel: audit: type=1300 audit(1696277852.177:1284): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd79941af0 a2=3 a3=0 items=0 ppid=1 pid=3329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:32.227113 kernel: audit: type=1327 audit(1696277852.177:1284): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:32.177000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:32.234440 kernel: audit: type=1105 audit(1696277852.194:1285): pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.194000 audit[3329]: USER_START pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.253514 kernel: audit: type=1103 audit(1696277852.196:1286): pid=3331 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.196000 audit[3331]: CRED_ACQ pid=3331 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.610297 kubelet[2475]: E1002 20:17:32.610249 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:32.655687 sshd[3329]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:32.655000 audit[3329]: USER_END pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.659115 systemd[1]: sshd@22-10.200.8.15:22-10.200.12.6:54808.service: Deactivated successfully. Oct 2 20:17:32.659866 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:17:32.664127 systemd-logind[1321]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:17:32.665050 systemd-logind[1321]: Removed session 25. Oct 2 20:17:32.656000 audit[3329]: CRED_DISP pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.693208 kernel: audit: type=1106 audit(1696277852.655:1287): pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.693320 kernel: audit: type=1104 audit(1696277852.656:1288): pid=3329 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:32.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:54808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:34.471841 kubelet[2475]: E1002 20:17:34.471798 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:17:37.610965 kubelet[2475]: E1002 20:17:37.610932 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:42.612596 kubelet[2475]: E1002 20:17:42.612560 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:42.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:42.761762 systemd[1]: Started sshd@23-10.200.8.15:22-10.200.12.6:58550.service. Oct 2 20:17:42.770062 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:42.770168 kernel: audit: type=1130 audit(1696277862.760:1290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:43.398000 audit[3340]: USER_ACCT pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.419552 kernel: audit: type=1101 audit(1696277863.398:1291): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.401585 sshd[3340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:43.419931 sshd[3340]: Accepted publickey for core from 10.200.12.6 port 58550 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:43.399000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.425354 systemd[1]: Started session-26.scope. Oct 2 20:17:43.426592 systemd-logind[1321]: New session 26 of user core. Oct 2 20:17:43.449833 kernel: audit: type=1103 audit(1696277863.399:1292): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.450000 kernel: audit: type=1006 audit(1696277863.399:1293): pid=3340 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:17:43.450042 kernel: audit: type=1300 audit(1696277863.399:1293): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeef4db740 a2=3 a3=0 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:43.399000 audit[3340]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeef4db740 a2=3 a3=0 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:43.399000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:43.474264 kernel: audit: type=1327 audit(1696277863.399:1293): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:43.474439 kernel: audit: type=1105 audit(1696277863.429:1294): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.429000 audit[3340]: USER_START pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.429000 audit[3342]: CRED_ACQ pid=3342 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.510605 kernel: audit: type=1103 audit(1696277863.429:1295): pid=3342 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.901033 sshd[3340]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:43.901000 audit[3340]: USER_END pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.904803 systemd-logind[1321]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:17:43.906419 systemd[1]: sshd@23-10.200.8.15:22-10.200.12.6:58550.service: Deactivated successfully. Oct 2 20:17:43.907273 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:17:43.909034 systemd-logind[1321]: Removed session 26. Oct 2 20:17:43.901000 audit[3340]: CRED_DISP pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.938571 kernel: audit: type=1106 audit(1696277863.901:1296): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.938721 kernel: audit: type=1104 audit(1696277863.901:1297): pid=3340 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:43.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:58550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:47.471660 kubelet[2475]: E1002 20:17:47.471611 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:17:47.614328 kubelet[2475]: E1002 20:17:47.614293 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:52.615213 kubelet[2475]: E1002 20:17:52.615113 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:54.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:54.007738 systemd[1]: Started sshd@24-10.200.8.15:22-10.200.12.6:44414.service. Oct 2 20:17:54.013530 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:17:54.013616 kernel: audit: type=1130 audit(1696277874.006:1299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:54.628000 audit[3354]: USER_ACCT pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.630633 sshd[3354]: Accepted publickey for core from 10.200.12.6 port 44414 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:17:54.648000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.650768 sshd[3354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:17:54.655910 systemd[1]: Started session-27.scope. Oct 2 20:17:54.657009 systemd-logind[1321]: New session 27 of user core. Oct 2 20:17:54.667422 kernel: audit: type=1101 audit(1696277874.628:1300): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.667499 kernel: audit: type=1103 audit(1696277874.648:1301): pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.667524 kernel: audit: type=1006 audit(1696277874.648:1302): pid=3354 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:17:54.678458 kernel: audit: type=1300 audit(1696277874.648:1302): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffebc4f470 a2=3 a3=0 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:54.648000 audit[3354]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffebc4f470 a2=3 a3=0 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:17:54.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:54.661000 audit[3354]: USER_START pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.722232 kernel: audit: type=1327 audit(1696277874.648:1302): proctitle=737368643A20636F7265205B707269765D Oct 2 20:17:54.722335 kernel: audit: type=1105 audit(1696277874.661:1303): pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.722362 kernel: audit: type=1103 audit(1696277874.662:1304): pid=3356 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:54.662000 audit[3356]: CRED_ACQ pid=3356 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:55.174459 sshd[3354]: pam_unix(sshd:session): session closed for user core Oct 2 20:17:55.174000 audit[3354]: USER_END pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:55.178443 systemd[1]: sshd@24-10.200.8.15:22-10.200.12.6:44414.service: Deactivated successfully. Oct 2 20:17:55.179331 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:17:55.180532 systemd-logind[1321]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:17:55.181541 systemd-logind[1321]: Removed session 27. Oct 2 20:17:55.175000 audit[3354]: CRED_DISP pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:55.213279 kernel: audit: type=1106 audit(1696277875.174:1305): pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:55.213457 kernel: audit: type=1104 audit(1696277875.175:1306): pid=3354 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:17:55.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:17:57.615938 kubelet[2475]: E1002 20:17:57.615904 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:17:58.471621 kubelet[2475]: E1002 20:17:58.471575 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:17:58.652000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.652000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00137cb40 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:58.652000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:58.654000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.654000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d723e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:17:58.654000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:17:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00b756510 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.751000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00b756570 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.753000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.753000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00b756720 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.753000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.751000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c4f32e0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.751000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.833000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.833000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:17:58.833000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00c42dfc0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.833000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00b2eea20 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:17:58.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:17:58.942288 update_engine[1322]: I1002 20:17:58.942176 1322 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:17:58.942288 update_engine[1322]: I1002 20:17:58.942281 1322 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:17:58.943190 update_engine[1322]: I1002 20:17:58.942673 1322 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:17:58.943370 update_engine[1322]: I1002 20:17:58.943325 1322 omaha_request_params.cc:62] Current group set to lts Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943532 1322 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943548 1322 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943567 1322 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943603 1322 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943681 1322 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943687 1322 omaha_request_action.cc:269] Request: <?xml version="1.0" encoding="UTF-8"?> Oct 2 20:17:58.944428 update_engine[1322]: <request protocol="3.0" version="update_engine-0.4.10" updaterversion="update_engine-0.4.10" installsource="scheduler" ismachine="1"> Oct 2 20:17:58.944428 update_engine[1322]: <os version="Chateau" platform="CoreOS" sp="3510.3.0_x86_64"></os> Oct 2 20:17:58.944428 update_engine[1322]: <app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" version="3510.3.0" track="lts" bootid="{4287e0ef-03b7-4093-88b5-7bafcedff9aa}" oem="azure" oemversion="2.6.0.2-r1" alephversion="3510.3.0" machineid="f34d2374d89b43bd9cd8ccc41bc993e0" machinealias="" lang="en-US" board="amd64-usr" hardware_class="" delta_okay="false" > Oct 2 20:17:58.944428 update_engine[1322]: <ping active="1"></ping> Oct 2 20:17:58.944428 update_engine[1322]: <updatecheck></updatecheck> Oct 2 20:17:58.944428 update_engine[1322]: <event eventtype="3" eventresult="2" previousversion="0.0.0.0"></event> Oct 2 20:17:58.944428 update_engine[1322]: </app> Oct 2 20:17:58.944428 update_engine[1322]: </request> Oct 2 20:17:58.944428 update_engine[1322]: I1002 20:17:58.943694 1322 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:17:58.945108 locksmithd[1421]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:17:58.945331 update_engine[1322]: I1002 20:17:58.945180 1322 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:17:58.945433 update_engine[1322]: I1002 20:17:58.945380 1322 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:18:00.000029 update_engine[1322]: I1002 20:17:59.999984 1322 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:18:00.000494 update_engine[1322]: I1002 20:18:00.000252 1322 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:18:00.000494 update_engine[1322]: I1002 20:18:00.000454 1322 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:18:00.104194 update_engine[1322]: I1002 20:18:00.104152 1322 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:18:00.105517 update_engine[1322]: I1002 20:18:00.105481 1322 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:18:00.105517 update_engine[1322]: I1002 20:18:00.105504 1322 omaha_request_action.cc:619] Omaha request response: <?xml version="1.0" encoding="UTF-8"?> Oct 2 20:18:00.105517 update_engine[1322]: <response protocol="3.0" server="nebraska"><daystart elapsed_seconds="0"></daystart><app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" status="ok"><ping status="ok"></ping><updatecheck status="noupdate"><urls></urls></updatecheck><event status="ok"></event></app></response> Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255859 1322 omaha_request_action.cc:409] No update. Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255903 1322 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255909 1322 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255914 1322 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255918 1322 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255923 1322 update_attempter.cc:302] Processing Done. Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255942 1322 update_attempter.cc:338] No update. Oct 2 20:18:00.255984 update_engine[1322]: I1002 20:18:00.255957 1322 update_check_scheduler.cc:74] Next update check in 40m10s Oct 2 20:18:00.256755 locksmithd[1421]: LastCheckedTime=1696277880 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:18:02.617695 kubelet[2475]: E1002 20:18:02.617662 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:05.290549 systemd[1]: Started sshd@25-10.200.8.15:22-10.200.12.6:51458.service. Oct 2 20:18:05.313858 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:18:05.314030 kernel: audit: type=1130 audit(1696277885.290:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:05.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:05.963000 audit[3367]: USER_ACCT pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:05.964979 sshd[3367]: Accepted publickey for core from 10.200.12.6 port 51458 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:05.982000 audit[3367]: CRED_ACQ pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:05.984812 sshd[3367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:05.989765 systemd[1]: Started session-28.scope. Oct 2 20:18:05.990719 systemd-logind[1321]: New session 28 of user core. Oct 2 20:18:06.001080 kernel: audit: type=1101 audit(1696277885.963:1317): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.001162 kernel: audit: type=1103 audit(1696277885.982:1318): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.001191 kernel: audit: type=1006 audit(1696277885.983:1319): pid=3367 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:18:05.983000 audit[3367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5277cd20 a2=3 a3=0 items=0 ppid=1 pid=3367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:06.029755 kernel: audit: type=1300 audit(1696277885.983:1319): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5277cd20 a2=3 a3=0 items=0 ppid=1 pid=3367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:06.029846 kernel: audit: type=1327 audit(1696277885.983:1319): proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:05.983000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:06.039438 kernel: audit: type=1105 audit(1696277885.994:1320): pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:05.994000 audit[3367]: USER_START pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:05.996000 audit[3369]: CRED_ACQ pid=3369 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.071607 kernel: audit: type=1103 audit(1696277885.996:1321): pid=3369 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.507838 sshd[3367]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:06.508000 audit[3367]: USER_END pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.514242 systemd[1]: sshd@25-10.200.8.15:22-10.200.12.6:51458.service: Deactivated successfully. Oct 2 20:18:06.515171 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:18:06.516927 systemd-logind[1321]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:18:06.517886 systemd-logind[1321]: Removed session 28. Oct 2 20:18:06.510000 audit[3367]: CRED_DISP pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.547282 kernel: audit: type=1106 audit(1696277886.508:1322): pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.547458 kernel: audit: type=1104 audit(1696277886.510:1323): pid=3367 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:06.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:51458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:07.618903 kubelet[2475]: E1002 20:18:07.618858 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:12.475236 env[1341]: time="2023-10-02T20:18:12.475183051Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 20:18:12.506288 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount283986400.mount: Deactivated successfully. Oct 2 20:18:12.508956 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount671539262.mount: Deactivated successfully. Oct 2 20:18:12.518213 env[1341]: time="2023-10-02T20:18:12.518162510Z" level=info msg="CreateContainer within sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\"" Oct 2 20:18:12.518912 env[1341]: time="2023-10-02T20:18:12.518882811Z" level=info msg="StartContainer for \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\"" Oct 2 20:18:12.544125 systemd[1]: Started cri-containerd-69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6.scope. Oct 2 20:18:12.554147 systemd[1]: cri-containerd-69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6.scope: Deactivated successfully. Oct 2 20:18:12.554509 systemd[1]: Stopped cri-containerd-69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6.scope. Oct 2 20:18:12.594175 env[1341]: time="2023-10-02T20:18:12.594114414Z" level=info msg="shim disconnected" id=69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6 Oct 2 20:18:12.594175 env[1341]: time="2023-10-02T20:18:12.594177914Z" level=warning msg="cleaning up after shim disconnected" id=69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6 namespace=k8s.io Oct 2 20:18:12.594490 env[1341]: time="2023-10-02T20:18:12.594191114Z" level=info msg="cleaning up dead shim" Oct 2 20:18:12.602042 env[1341]: time="2023-10-02T20:18:12.601999225Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3400 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:12.602331 env[1341]: time="2023-10-02T20:18:12.602271225Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:18:12.602559 env[1341]: time="2023-10-02T20:18:12.602516825Z" level=error msg="Failed to pipe stdout of container \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\"" error="reading from a closed fifo" Oct 2 20:18:12.603065 env[1341]: time="2023-10-02T20:18:12.603027026Z" level=error msg="Failed to pipe stderr of container \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\"" error="reading from a closed fifo" Oct 2 20:18:12.607499 env[1341]: time="2023-10-02T20:18:12.607457432Z" level=error msg="StartContainer for \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:12.607704 kubelet[2475]: E1002 20:18:12.607683 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6" Oct 2 20:18:12.608056 kubelet[2475]: E1002 20:18:12.607813 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:12.608056 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:12.608056 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:18:12.608056 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-ggz9x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:12.608056 kubelet[2475]: E1002 20:18:12.607861 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:18:12.619752 kubelet[2475]: E1002 20:18:12.619728 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:12.672451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:18:12.672593 kernel: audit: type=1400 audit(1696277892.664:1325): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.664000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.664000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b2060 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.688456 kernel: audit: type=1300 audit(1696277892.664:1325): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b2060 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.710478 kernel: audit: type=1327 audit(1696277892.664:1325): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.664000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.730247 kernel: audit: type=1400 audit(1696277892.670:1326): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.670000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.670000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b21c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.770383 kernel: audit: type=1300 audit(1696277892.670:1326): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b21c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.770520 kernel: audit: type=1327 audit(1696277892.670:1326): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.670000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.811396 kernel: audit: type=1400 audit(1696277892.670:1327): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.670000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b21e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.812607 kernel: audit: type=1300 audit(1696277892.670:1327): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b21e0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.861034 kernel: audit: type=1327 audit(1696277892.670:1327): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:12.862297 kernel: audit: type=1400 audit(1696277892.675:1328): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.675000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:12.675000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011a8c80 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:12.675000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:13.235145 kubelet[2475]: I1002 20:18:13.235110 2475 scope.go:117] "RemoveContainer" containerID="6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42" Oct 2 20:18:13.235753 kubelet[2475]: I1002 20:18:13.235646 2475 scope.go:117] "RemoveContainer" containerID="6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42" Oct 2 20:18:13.237371 env[1341]: time="2023-10-02T20:18:13.237058493Z" level=info msg="RemoveContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" Oct 2 20:18:13.237974 env[1341]: time="2023-10-02T20:18:13.237943394Z" level=info msg="RemoveContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\"" Oct 2 20:18:13.238176 env[1341]: time="2023-10-02T20:18:13.238056394Z" level=error msg="RemoveContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\" failed" error="failed to set removing state for container \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\": container is already in removing state" Oct 2 20:18:13.238245 kubelet[2475]: E1002 20:18:13.238204 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\": container is already in removing state" containerID="6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42" Oct 2 20:18:13.238245 kubelet[2475]: E1002 20:18:13.238238 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42": container is already in removing state; Skipping pod "cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)" Oct 2 20:18:13.238541 kubelet[2475]: E1002 20:18:13.238521 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:18:13.247182 env[1341]: time="2023-10-02T20:18:13.247136507Z" level=info msg="RemoveContainer for \"6661199a4feb5b682518734925fb0a3b0971378b07d60c9d00decf0c170abe42\" returns successfully" Oct 2 20:18:13.502969 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6-rootfs.mount: Deactivated successfully. Oct 2 20:18:15.699506 kubelet[2475]: W1002 20:18:15.699458 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice/cri-containerd-69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6.scope WatchSource:0}: task 69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6 not found: not found Oct 2 20:18:16.629104 systemd[1]: Started sshd@26-10.200.8.15:22-10.200.12.6:42790.service. Oct 2 20:18:16.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:42790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:17.291000 audit[3415]: USER_ACCT pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.292741 sshd[3415]: Accepted publickey for core from 10.200.12.6 port 42790 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:17.292000 audit[3415]: CRED_ACQ pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.292000 audit[3415]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedea674a0 a2=3 a3=0 items=0 ppid=1 pid=3415 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:17.292000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:17.294206 sshd[3415]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:17.297924 systemd-logind[1321]: New session 29 of user core. Oct 2 20:18:17.299993 systemd[1]: Started session-29.scope. Oct 2 20:18:17.303000 audit[3415]: USER_START pid=3415 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.304000 audit[3417]: CRED_ACQ pid=3417 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.621486 kubelet[2475]: E1002 20:18:17.621454 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:17.846099 sshd[3415]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:17.853144 kernel: kauditd_printk_skb: 10 callbacks suppressed Oct 2 20:18:17.853212 kernel: audit: type=1106 audit(1696277897.846:1335): pid=3415 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.846000 audit[3415]: USER_END pid=3415 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.849549 systemd[1]: sshd@26-10.200.8.15:22-10.200.12.6:42790.service: Deactivated successfully. Oct 2 20:18:17.850271 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:18:17.851156 systemd-logind[1321]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:18:17.852022 systemd-logind[1321]: Removed session 29. Oct 2 20:18:17.846000 audit[3415]: CRED_DISP pid=3415 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.894332 kernel: audit: type=1104 audit(1696277897.846:1336): pid=3415 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:17.895667 kernel: audit: type=1131 audit(1696277897.846:1337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:42790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:17.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:42790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:22.622745 kubelet[2475]: E1002 20:18:22.622699 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:25.472450 kubelet[2475]: E1002 20:18:25.472175 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-228p4_kube-system(b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b)\"" pod="kube-system/cilium-228p4" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" Oct 2 20:18:27.624213 kubelet[2475]: E1002 20:18:27.624175 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:27.939246 systemd[1]: Started sshd@27-10.200.8.15:22-10.200.12.6:59584.service. Oct 2 20:18:27.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:59584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:27.959438 kernel: audit: type=1130 audit(1696277907.938:1338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:59584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:28.916000 audit[3429]: USER_ACCT pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:28.937961 sshd[3429]: Accepted publickey for core from 10.200.12.6 port 59584 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:28.936000 audit[3429]: CRED_ACQ pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:28.938393 sshd[3429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:28.943505 systemd[1]: Started session-30.scope. Oct 2 20:18:28.944808 systemd-logind[1321]: New session 30 of user core. Oct 2 20:18:28.956019 kernel: audit: type=1101 audit(1696277908.916:1339): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:28.956123 kernel: audit: type=1103 audit(1696277908.936:1340): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:28.956180 kernel: audit: type=1006 audit(1696277908.936:1341): pid=3429 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:18:28.936000 audit[3429]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb50c12a0 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:28.985718 kernel: audit: type=1300 audit(1696277908.936:1341): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb50c12a0 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:28.987376 kernel: audit: type=1327 audit(1696277908.936:1341): proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:28.936000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:28.947000 audit[3429]: USER_START pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.013761 kernel: audit: type=1105 audit(1696277908.947:1342): pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.013871 kernel: audit: type=1103 audit(1696277908.947:1343): pid=3431 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:28.947000 audit[3431]: CRED_ACQ pid=3431 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.425996 sshd[3429]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:29.426000 audit[3429]: USER_END pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.429677 systemd-logind[1321]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:18:29.431071 systemd[1]: sshd@27-10.200.8.15:22-10.200.12.6:59584.service: Deactivated successfully. Oct 2 20:18:29.431803 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:18:29.433174 systemd-logind[1321]: Removed session 30. Oct 2 20:18:29.426000 audit[3429]: CRED_DISP pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.463070 kernel: audit: type=1106 audit(1696277909.426:1344): pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.463206 kernel: audit: type=1104 audit(1696277909.426:1345): pid=3429 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:29.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:59584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:29.531332 systemd[1]: Started sshd@28-10.200.8.15:22-10.200.12.6:59586.service. Oct 2 20:18:29.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:59586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:30.396000 audit[3440]: USER_ACCT pid=3440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:30.398054 sshd[3440]: Accepted publickey for core from 10.200.12.6 port 59586 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:30.397000 audit[3440]: CRED_ACQ pid=3440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:30.397000 audit[3440]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd9915e010 a2=3 a3=0 items=0 ppid=1 pid=3440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:30.397000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:30.399753 sshd[3440]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:30.404619 systemd-logind[1321]: New session 31 of user core. Oct 2 20:18:30.405428 systemd[1]: Started session-31.scope. Oct 2 20:18:30.408000 audit[3440]: USER_START pid=3440 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:30.410000 audit[3442]: CRED_ACQ pid=3442 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:32.014178 env[1341]: time="2023-10-02T20:18:32.014133975Z" level=info msg="StopPodSandbox for \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\"" Oct 2 20:18:32.014641 env[1341]: time="2023-10-02T20:18:32.014208775Z" level=info msg="Container to stop \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:18:32.016826 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050-shm.mount: Deactivated successfully. Oct 2 20:18:32.028833 systemd[1]: cri-containerd-20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050.scope: Deactivated successfully. Oct 2 20:18:32.027000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:18:32.030000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:18:32.057777 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050-rootfs.mount: Deactivated successfully. Oct 2 20:18:32.077217 env[1341]: time="2023-10-02T20:18:32.077159265Z" level=info msg="StopContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" with timeout 30 (s)" Oct 2 20:18:32.077740 env[1341]: time="2023-10-02T20:18:32.077703966Z" level=info msg="Stop container \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" with signal terminated" Oct 2 20:18:32.089470 systemd[1]: cri-containerd-deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51.scope: Deactivated successfully. Oct 2 20:18:32.088000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:18:32.092000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:18:32.110063 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51-rootfs.mount: Deactivated successfully. Oct 2 20:18:32.136673 env[1341]: time="2023-10-02T20:18:32.136612250Z" level=info msg="shim disconnected" id=20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050 Oct 2 20:18:32.136673 env[1341]: time="2023-10-02T20:18:32.136672850Z" level=warning msg="cleaning up after shim disconnected" id=20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050 namespace=k8s.io Oct 2 20:18:32.136963 env[1341]: time="2023-10-02T20:18:32.136685250Z" level=info msg="cleaning up dead shim" Oct 2 20:18:32.137249 env[1341]: time="2023-10-02T20:18:32.137198651Z" level=info msg="shim disconnected" id=deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51 Oct 2 20:18:32.137249 env[1341]: time="2023-10-02T20:18:32.137243051Z" level=warning msg="cleaning up after shim disconnected" id=deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51 namespace=k8s.io Oct 2 20:18:32.137389 env[1341]: time="2023-10-02T20:18:32.137254751Z" level=info msg="cleaning up dead shim" Oct 2 20:18:32.148917 env[1341]: time="2023-10-02T20:18:32.148865868Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3489 runtime=io.containerd.runc.v2\n" Oct 2 20:18:32.152782 env[1341]: time="2023-10-02T20:18:32.152743573Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3488 runtime=io.containerd.runc.v2\n" Oct 2 20:18:32.153054 env[1341]: time="2023-10-02T20:18:32.153021074Z" level=info msg="TearDown network for sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" successfully" Oct 2 20:18:32.153144 env[1341]: time="2023-10-02T20:18:32.153053374Z" level=info msg="StopPodSandbox for \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" returns successfully" Oct 2 20:18:32.153593 env[1341]: time="2023-10-02T20:18:32.153562775Z" level=info msg="StopContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" returns successfully" Oct 2 20:18:32.155081 env[1341]: time="2023-10-02T20:18:32.154582776Z" level=info msg="StopPodSandbox for \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\"" Oct 2 20:18:32.155713 env[1341]: time="2023-10-02T20:18:32.155685478Z" level=info msg="Container to stop \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:18:32.157901 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420-shm.mount: Deactivated successfully. Oct 2 20:18:32.166431 systemd[1]: cri-containerd-9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420.scope: Deactivated successfully. Oct 2 20:18:32.165000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:18:32.169000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:18:32.172390 kubelet[2475]: I1002 20:18:32.172365 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hostproc\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172439 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cni-path\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172471 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-cgroup\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172508 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-clustermesh-secrets\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172542 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-config-path\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172567 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-bpf-maps\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172595 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-net\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172620 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-lib-modules\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172647 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-run\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172674 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hubble-tls\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172704 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ggz9x\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172728 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-xtables-lock\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.172768 kubelet[2475]: I1002 20:18:32.172754 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-kernel\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.173258 kubelet[2475]: I1002 20:18:32.172778 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-etc-cni-netd\") pod \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\" (UID: \"b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b\") " Oct 2 20:18:32.173258 kubelet[2475]: I1002 20:18:32.172837 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.173258 kubelet[2475]: I1002 20:18:32.172873 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hostproc" (OuterVolumeSpecName: "hostproc") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.173258 kubelet[2475]: I1002 20:18:32.172895 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cni-path" (OuterVolumeSpecName: "cni-path") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.173258 kubelet[2475]: I1002 20:18:32.172914 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.174961 kubelet[2475]: I1002 20:18:32.173460 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.174961 kubelet[2475]: I1002 20:18:32.173952 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.174961 kubelet[2475]: I1002 20:18:32.173988 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.174961 kubelet[2475]: I1002 20:18:32.174010 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.174961 kubelet[2475]: I1002 20:18:32.174034 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.175932 kubelet[2475]: I1002 20:18:32.175907 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:18:32.177004 kubelet[2475]: I1002 20:18:32.176963 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:18:32.179466 systemd[1]: var-lib-kubelet-pods-b954ee30\x2d9ea1\x2d4d6e\x2dbfb9\x2dcc81536a4a5b-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:18:32.180990 kubelet[2475]: I1002 20:18:32.180964 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:18:32.187815 kubelet[2475]: I1002 20:18:32.187784 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:32.190024 kubelet[2475]: I1002 20:18:32.189935 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x" (OuterVolumeSpecName: "kube-api-access-ggz9x") pod "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" (UID: "b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b"). InnerVolumeSpecName "kube-api-access-ggz9x". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:32.223765 env[1341]: time="2023-10-02T20:18:32.223687275Z" level=info msg="shim disconnected" id=9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420 Oct 2 20:18:32.223765 env[1341]: time="2023-10-02T20:18:32.223749575Z" level=warning msg="cleaning up after shim disconnected" id=9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420 namespace=k8s.io Oct 2 20:18:32.223765 env[1341]: time="2023-10-02T20:18:32.223762275Z" level=info msg="cleaning up dead shim" Oct 2 20:18:32.232081 env[1341]: time="2023-10-02T20:18:32.232039087Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3534 runtime=io.containerd.runc.v2\n" Oct 2 20:18:32.232455 env[1341]: time="2023-10-02T20:18:32.232379787Z" level=info msg="TearDown network for sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" successfully" Oct 2 20:18:32.232455 env[1341]: time="2023-10-02T20:18:32.232425987Z" level=info msg="StopPodSandbox for \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" returns successfully" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.272932 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85903ade-29bb-4f88-91c7-57626ec9ada0-cilium-config-path\") pod \"85903ade-29bb-4f88-91c7-57626ec9ada0\" (UID: \"85903ade-29bb-4f88-91c7-57626ec9ada0\") " Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.272990 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-s6v9h\" (UniqueName: \"kubernetes.io/projected/85903ade-29bb-4f88-91c7-57626ec9ada0-kube-api-access-s6v9h\") pod \"85903ade-29bb-4f88-91c7-57626ec9ada0\" (UID: \"85903ade-29bb-4f88-91c7-57626ec9ada0\") " Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273037 2475 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-clustermesh-secrets\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273051 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-config-path\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273065 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-cgroup\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273078 2475 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-bpf-maps\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273092 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-net\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273105 2475 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-lib-modules\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273115 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cilium-run\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273125 2475 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hubble-tls\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273135 2475 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-xtables-lock\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273146 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-ggz9x\" (UniqueName: \"kubernetes.io/projected/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-kube-api-access-ggz9x\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273157 2475 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-etc-cni-netd\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273169 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273179 2475 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-cni-path\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.273628 kubelet[2475]: I1002 20:18:32.273190 2475 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b-hostproc\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.278477 kubelet[2475]: I1002 20:18:32.278439 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/85903ade-29bb-4f88-91c7-57626ec9ada0-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "85903ade-29bb-4f88-91c7-57626ec9ada0" (UID: "85903ade-29bb-4f88-91c7-57626ec9ada0"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:18:32.279521 kubelet[2475]: I1002 20:18:32.279489 2475 scope.go:117] "RemoveContainer" containerID="69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6" Oct 2 20:18:32.284518 systemd[1]: Removed slice kubepods-burstable-podb954ee30_9ea1_4d6e_bfb9_cc81536a4a5b.slice. Oct 2 20:18:32.286042 env[1341]: time="2023-10-02T20:18:32.286006564Z" level=info msg="RemoveContainer for \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\"" Oct 2 20:18:32.296921 kubelet[2475]: I1002 20:18:32.296891 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85903ade-29bb-4f88-91c7-57626ec9ada0-kube-api-access-s6v9h" (OuterVolumeSpecName: "kube-api-access-s6v9h") pod "85903ade-29bb-4f88-91c7-57626ec9ada0" (UID: "85903ade-29bb-4f88-91c7-57626ec9ada0"). InnerVolumeSpecName "kube-api-access-s6v9h". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:18:32.300725 env[1341]: time="2023-10-02T20:18:32.300687985Z" level=info msg="RemoveContainer for \"69e0eb73009336b600e2d5b56220e1e0e6a7f8547b7f191a341730d889163bb6\" returns successfully" Oct 2 20:18:32.300906 kubelet[2475]: I1002 20:18:32.300883 2475 scope.go:117] "RemoveContainer" containerID="deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51" Oct 2 20:18:32.302431 env[1341]: time="2023-10-02T20:18:32.302383787Z" level=info msg="RemoveContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\"" Oct 2 20:18:32.312579 env[1341]: time="2023-10-02T20:18:32.312541202Z" level=info msg="RemoveContainer for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" returns successfully" Oct 2 20:18:32.312746 kubelet[2475]: I1002 20:18:32.312725 2475 scope.go:117] "RemoveContainer" containerID="deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51" Oct 2 20:18:32.313032 env[1341]: time="2023-10-02T20:18:32.312959002Z" level=error msg="ContainerStatus for \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\": not found" Oct 2 20:18:32.313223 kubelet[2475]: E1002 20:18:32.313202 2475 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\": not found" containerID="deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51" Oct 2 20:18:32.313313 kubelet[2475]: I1002 20:18:32.313246 2475 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51"} err="failed to get container status \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\": rpc error: code = NotFound desc = an error occurred when try to find container \"deae151775ec6f2150ed9f381cbbb924fd1253875dd1b02a2b362c2d3cfd4f51\": not found" Oct 2 20:18:32.373654 kubelet[2475]: I1002 20:18:32.373613 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/85903ade-29bb-4f88-91c7-57626ec9ada0-cilium-config-path\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.373654 kubelet[2475]: I1002 20:18:32.373653 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-s6v9h\" (UniqueName: \"kubernetes.io/projected/85903ade-29bb-4f88-91c7-57626ec9ada0-kube-api-access-s6v9h\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:18:32.473695 kubelet[2475]: I1002 20:18:32.473658 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" path="/var/lib/kubelet/pods/b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b/volumes" Oct 2 20:18:32.477839 systemd[1]: Removed slice kubepods-besteffort-pod85903ade_29bb_4f88_91c7_57626ec9ada0.slice. Oct 2 20:18:32.625424 kubelet[2475]: E1002 20:18:32.625372 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:33.016994 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420-rootfs.mount: Deactivated successfully. Oct 2 20:18:33.017109 systemd[1]: var-lib-kubelet-pods-b954ee30\x2d9ea1\x2d4d6e\x2dbfb9\x2dcc81536a4a5b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dggz9x.mount: Deactivated successfully. Oct 2 20:18:33.017204 systemd[1]: var-lib-kubelet-pods-85903ade\x2d29bb\x2d4f88\x2d91c7\x2d57626ec9ada0-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ds6v9h.mount: Deactivated successfully. Oct 2 20:18:33.017284 systemd[1]: var-lib-kubelet-pods-b954ee30\x2d9ea1\x2d4d6e\x2dbfb9\x2dcc81536a4a5b-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:18:34.085040 sshd[3440]: pam_unix(sshd:session): session closed for user core Oct 2 20:18:34.085000 audit[3440]: USER_END pid=3440 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.088186 systemd[1]: sshd@28-10.200.8.15:22-10.200.12.6:59586.service: Deactivated successfully. Oct 2 20:18:34.088877 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:18:34.090319 systemd-logind[1321]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:18:34.091572 systemd-logind[1321]: Removed session 31. Oct 2 20:18:34.092181 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:18:34.092249 kernel: audit: type=1106 audit(1696277914.085:1359): pid=3440 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.085000 audit[3440]: CRED_DISP pid=3440 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.128510 kernel: audit: type=1104 audit(1696277914.085:1360): pid=3440 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.128598 kernel: audit: type=1131 audit(1696277914.086:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:59586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:34.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:59586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:34.191384 systemd[1]: Started sshd@29-10.200.8.15:22-10.200.12.6:59600.service. Oct 2 20:18:34.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:59600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:34.211443 kernel: audit: type=1130 audit(1696277914.190:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:59600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:18:34.474104 kubelet[2475]: I1002 20:18:34.473982 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="85903ade-29bb-4f88-91c7-57626ec9ada0" path="/var/lib/kubelet/pods/85903ade-29bb-4f88-91c7-57626ec9ada0/volumes" Oct 2 20:18:34.842746 kernel: audit: type=1101 audit(1696277914.819:1363): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.819000 audit[3549]: USER_ACCT pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.843025 sshd[3549]: Accepted publickey for core from 10.200.12.6 port 59600 ssh2: RSA SHA256:KIiExkupVt9+OlYxOfi+eGqXikcuJTXnmWcgoY/ZaKE Oct 2 20:18:34.842928 sshd[3549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:18:34.840000 audit[3549]: CRED_ACQ pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.848158 systemd[1]: Started session-32.scope. Oct 2 20:18:34.849237 systemd-logind[1321]: New session 32 of user core. Oct 2 20:18:34.871292 kernel: audit: type=1103 audit(1696277914.840:1364): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.871527 kernel: audit: type=1006 audit(1696277914.841:1365): pid=3549 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:18:34.871561 kernel: audit: type=1300 audit(1696277914.841:1365): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5dfac690 a2=3 a3=0 items=0 ppid=1 pid=3549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:34.841000 audit[3549]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5dfac690 a2=3 a3=0 items=0 ppid=1 pid=3549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:34.841000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:34.895591 kernel: audit: type=1327 audit(1696277914.841:1365): proctitle=737368643A20636F7265205B707269765D Oct 2 20:18:34.895681 kernel: audit: type=1105 audit(1696277914.853:1366): pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.853000 audit[3549]: USER_START pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:34.855000 audit[3551]: CRED_ACQ pid=3551 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:18:35.595601 kubelet[2475]: I1002 20:18:35.595530 2475 topology_manager.go:215] "Topology Admit Handler" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" podNamespace="kube-system" podName="cilium-7vh7z" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595648 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595665 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595675 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595686 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="85903ade-29bb-4f88-91c7-57626ec9ada0" containerName="cilium-operator" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595697 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595722 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595737 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595778 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595814 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595825 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595836 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595846 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="85903ade-29bb-4f88-91c7-57626ec9ada0" containerName="cilium-operator" Oct 2 20:18:35.596272 kubelet[2475]: E1002 20:18:35.595894 2475 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595926 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595940 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.596272 kubelet[2475]: I1002 20:18:35.595952 2475 memory_manager.go:346] "RemoveStaleState removing state" podUID="b954ee30-9ea1-4d6e-bfb9-cc81536a4a5b" containerName="mount-cgroup" Oct 2 20:18:35.603370 systemd[1]: Created slice kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice. Oct 2 20:18:35.606339 kubelet[2475]: W1002 20:18:35.606315 2475 reflector.go:535] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-7abbcb6e32" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7abbcb6e32' and this object Oct 2 20:18:35.606476 kubelet[2475]: E1002 20:18:35.606350 2475 reflector.go:147] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ci-3510.3.0-a-7abbcb6e32" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7abbcb6e32' and this object Oct 2 20:18:35.606476 kubelet[2475]: W1002 20:18:35.606417 2475 reflector.go:535] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ci-3510.3.0-a-7abbcb6e32" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7abbcb6e32' and this object Oct 2 20:18:35.606476 kubelet[2475]: E1002 20:18:35.606432 2475 reflector.go:147] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ci-3510.3.0-a-7abbcb6e32" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510.3.0-a-7abbcb6e32' and this object Oct 2 20:18:35.789349 kubelet[2475]: I1002 20:18:35.789309 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hostproc\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.789708 kubelet[2475]: I1002 20:18:35.789690 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-net\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.789883 kubelet[2475]: I1002 20:18:35.789859 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hubble-tls\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790071 kubelet[2475]: I1002 20:18:35.790058 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-config-path\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790225 kubelet[2475]: I1002 20:18:35.790213 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790385 kubelet[2475]: I1002 20:18:35.790372 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-bpf-maps\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790567 kubelet[2475]: I1002 20:18:35.790553 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-cgroup\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790719 kubelet[2475]: I1002 20:18:35.790707 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-etc-cni-netd\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.790875 kubelet[2475]: I1002 20:18:35.790864 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gfrfp\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-kube-api-access-gfrfp\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791014 kubelet[2475]: I1002 20:18:35.791003 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-kernel\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791147 kubelet[2475]: I1002 20:18:35.791134 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-run\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791285 kubelet[2475]: I1002 20:18:35.791272 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-xtables-lock\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791451 kubelet[2475]: I1002 20:18:35.791438 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-lib-modules\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791608 kubelet[2475]: I1002 20:18:35.791590 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cni-path\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:35.791744 kubelet[2475]: I1002 20:18:35.791730 2475 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-clustermesh-secrets\") pod \"cilium-7vh7z\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " pod="kube-system/cilium-7vh7z" Oct 2 20:18:36.898483 kubelet[2475]: E1002 20:18:36.898437 2475 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:36.898917 kubelet[2475]: E1002 20:18:36.898555 2475 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets podName:89a1f80b-fa48-49a0-afe2-3cafc8590e9e nodeName:}" failed. No retries permitted until 2023-10-02 20:18:37.398533382 +0000 UTC m=+395.061166598 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets") pod "cilium-7vh7z" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e") : failed to sync secret cache: timed out waiting for the condition Oct 2 20:18:37.627298 kubelet[2475]: E1002 20:18:37.627259 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:37.712389 env[1341]: time="2023-10-02T20:18:37.712340856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7vh7z,Uid:89a1f80b-fa48-49a0-afe2-3cafc8590e9e,Namespace:kube-system,Attempt:0,}" Oct 2 20:18:37.742317 env[1341]: time="2023-10-02T20:18:37.742245099Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:18:37.742317 env[1341]: time="2023-10-02T20:18:37.742280499Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:18:37.742317 env[1341]: time="2023-10-02T20:18:37.742294999Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:18:37.742798 env[1341]: time="2023-10-02T20:18:37.742740699Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812 pid=3567 runtime=io.containerd.runc.v2 Oct 2 20:18:37.775717 systemd[1]: Started cri-containerd-c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812.scope. Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.786000 audit: BPF prog-id=132 op=LOAD Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3567 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:37.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338646330616339633731653033373461306363326532316438376166 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3567 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:37.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338646330616339633731653033373461306363326532316438376166 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit: BPF prog-id=133 op=LOAD Oct 2 20:18:37.787000 audit[3577]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024ab0 items=0 ppid=3567 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:37.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338646330616339633731653033373461306363326532316438376166 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit: BPF prog-id=134 op=LOAD Oct 2 20:18:37.787000 audit[3577]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024af8 items=0 ppid=3567 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:37.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338646330616339633731653033373461306363326532316438376166 Oct 2 20:18:37.787000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:18:37.787000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { perfmon } for pid=3577 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit[3577]: AVC avc: denied { bpf } for pid=3577 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:18:37.787000 audit: BPF prog-id=135 op=LOAD Oct 2 20:18:37.787000 audit[3577]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000024f08 items=0 ppid=3567 pid=3577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:18:37.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338646330616339633731653033373461306363326532316438376166 Oct 2 20:18:37.800729 env[1341]: time="2023-10-02T20:18:37.800691483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7vh7z,Uid:89a1f80b-fa48-49a0-afe2-3cafc8590e9e,Namespace:kube-system,Attempt:0,} returns sandbox id \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\"" Oct 2 20:18:37.808516 env[1341]: time="2023-10-02T20:18:37.808477094Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:18:37.845429 env[1341]: time="2023-10-02T20:18:37.845337047Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" Oct 2 20:18:37.846243 env[1341]: time="2023-10-02T20:18:37.846205749Z" level=info msg="StartContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" Oct 2 20:18:37.863657 systemd[1]: Started cri-containerd-7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a.scope. Oct 2 20:18:37.874656 systemd[1]: cri-containerd-7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a.scope: Deactivated successfully. Oct 2 20:18:37.874907 systemd[1]: Stopped cri-containerd-7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a.scope. Oct 2 20:18:37.936498 env[1341]: time="2023-10-02T20:18:37.934116475Z" level=info msg="shim disconnected" id=7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a Oct 2 20:18:37.936498 env[1341]: time="2023-10-02T20:18:37.934177375Z" level=warning msg="cleaning up after shim disconnected" id=7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a namespace=k8s.io Oct 2 20:18:37.936498 env[1341]: time="2023-10-02T20:18:37.934191276Z" level=info msg="cleaning up dead shim" Oct 2 20:18:37.943824 env[1341]: time="2023-10-02T20:18:37.943774189Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3623 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:37.944106 env[1341]: time="2023-10-02T20:18:37.944047190Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:18:37.944526 env[1341]: time="2023-10-02T20:18:37.944476290Z" level=error msg="Failed to pipe stdout of container \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" error="reading from a closed fifo" Oct 2 20:18:37.944697 env[1341]: time="2023-10-02T20:18:37.944652391Z" level=error msg="Failed to pipe stderr of container \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" error="reading from a closed fifo" Oct 2 20:18:37.948448 env[1341]: time="2023-10-02T20:18:37.948395096Z" level=error msg="StartContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:37.948883 kubelet[2475]: E1002 20:18:37.948688 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a" Oct 2 20:18:37.948883 kubelet[2475]: E1002 20:18:37.948810 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:37.948883 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:37.948883 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:18:37.948883 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gfrfp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:37.948883 kubelet[2475]: E1002 20:18:37.948858 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:18:38.306153 env[1341]: time="2023-10-02T20:18:38.306107813Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:18:38.335217 env[1341]: time="2023-10-02T20:18:38.335163855Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" Oct 2 20:18:38.335937 env[1341]: time="2023-10-02T20:18:38.335895356Z" level=info msg="StartContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" Oct 2 20:18:38.354893 systemd[1]: Started cri-containerd-637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411.scope. Oct 2 20:18:38.365708 systemd[1]: cri-containerd-637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411.scope: Deactivated successfully. Oct 2 20:18:38.366017 systemd[1]: Stopped cri-containerd-637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411.scope. Oct 2 20:18:38.381174 env[1341]: time="2023-10-02T20:18:38.381120121Z" level=info msg="shim disconnected" id=637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411 Oct 2 20:18:38.381174 env[1341]: time="2023-10-02T20:18:38.381174721Z" level=warning msg="cleaning up after shim disconnected" id=637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411 namespace=k8s.io Oct 2 20:18:38.381499 env[1341]: time="2023-10-02T20:18:38.381187321Z" level=info msg="cleaning up dead shim" Oct 2 20:18:38.389265 env[1341]: time="2023-10-02T20:18:38.389209233Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3661 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:38.389603 env[1341]: time="2023-10-02T20:18:38.389542833Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:18:38.389790 env[1341]: time="2023-10-02T20:18:38.389753034Z" level=error msg="Failed to pipe stdout of container \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" error="reading from a closed fifo" Oct 2 20:18:38.389953 env[1341]: time="2023-10-02T20:18:38.389922234Z" level=error msg="Failed to pipe stderr of container \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" error="reading from a closed fifo" Oct 2 20:18:38.393938 env[1341]: time="2023-10-02T20:18:38.393891040Z" level=error msg="StartContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:38.394203 kubelet[2475]: E1002 20:18:38.394174 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411" Oct 2 20:18:38.394355 kubelet[2475]: E1002 20:18:38.394312 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:38.394355 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:38.394355 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:18:38.394355 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gfrfp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:38.394655 kubelet[2475]: E1002 20:18:38.394365 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:18:38.408381 systemd[1]: run-containerd-runc-k8s.io-c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812-runc.z5kOoz.mount: Deactivated successfully. Oct 2 20:18:39.306958 kubelet[2475]: I1002 20:18:39.306929 2475 scope.go:117] "RemoveContainer" containerID="7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a" Oct 2 20:18:39.307606 kubelet[2475]: I1002 20:18:39.307580 2475 scope.go:117] "RemoveContainer" containerID="7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a" Oct 2 20:18:39.309179 env[1341]: time="2023-10-02T20:18:39.309056563Z" level=info msg="RemoveContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" Oct 2 20:18:39.316864 env[1341]: time="2023-10-02T20:18:39.316822374Z" level=info msg="RemoveContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\"" Oct 2 20:18:39.317152 env[1341]: time="2023-10-02T20:18:39.317106374Z" level=error msg="RemoveContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\" failed" error="failed to set removing state for container \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\": container is already in removing state" Oct 2 20:18:39.318041 kubelet[2475]: E1002 20:18:39.317396 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\": container is already in removing state" containerID="7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a" Oct 2 20:18:39.318041 kubelet[2475]: E1002 20:18:39.317449 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a": container is already in removing state; Skipping pod "cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)" Oct 2 20:18:39.318041 kubelet[2475]: E1002 20:18:39.317822 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:18:39.324234 env[1341]: time="2023-10-02T20:18:39.324203284Z" level=info msg="RemoveContainer for \"7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a\" returns successfully" Oct 2 20:18:41.038741 kubelet[2475]: W1002 20:18:41.038690 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice/cri-containerd-7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a.scope WatchSource:0}: container "7d4065bad3e5b46201459a5aeb68c8af3234bd63923b6cb54040f36f720ac82a" in namespace "k8s.io": not found Oct 2 20:18:42.628745 kubelet[2475]: E1002 20:18:42.628705 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:44.146067 kubelet[2475]: W1002 20:18:44.146009 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice/cri-containerd-637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411.scope WatchSource:0}: task 637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411 not found: not found Oct 2 20:18:47.630399 kubelet[2475]: E1002 20:18:47.630361 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:50.476783 env[1341]: time="2023-10-02T20:18:50.476713963Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:18:50.506670 env[1341]: time="2023-10-02T20:18:50.506619907Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" Oct 2 20:18:50.509794 env[1341]: time="2023-10-02T20:18:50.507501508Z" level=info msg="StartContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" Oct 2 20:18:50.535820 systemd[1]: Started cri-containerd-c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc.scope. Oct 2 20:18:50.546620 systemd[1]: cri-containerd-c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc.scope: Deactivated successfully. Oct 2 20:18:50.561050 env[1341]: time="2023-10-02T20:18:50.560999087Z" level=info msg="shim disconnected" id=c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc Oct 2 20:18:50.561050 env[1341]: time="2023-10-02T20:18:50.561050187Z" level=warning msg="cleaning up after shim disconnected" id=c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc namespace=k8s.io Oct 2 20:18:50.561369 env[1341]: time="2023-10-02T20:18:50.561061287Z" level=info msg="cleaning up dead shim" Oct 2 20:18:50.568656 env[1341]: time="2023-10-02T20:18:50.568616598Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:18:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3700 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:18:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:18:50.568932 env[1341]: time="2023-10-02T20:18:50.568875998Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:18:50.569128 env[1341]: time="2023-10-02T20:18:50.569082899Z" level=error msg="Failed to pipe stdout of container \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" error="reading from a closed fifo" Oct 2 20:18:50.573504 env[1341]: time="2023-10-02T20:18:50.573457805Z" level=error msg="Failed to pipe stderr of container \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" error="reading from a closed fifo" Oct 2 20:18:50.577226 env[1341]: time="2023-10-02T20:18:50.577186510Z" level=error msg="StartContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:18:50.577475 kubelet[2475]: E1002 20:18:50.577455 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc" Oct 2 20:18:50.577834 kubelet[2475]: E1002 20:18:50.577585 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:18:50.577834 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:18:50.577834 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:18:50.577834 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gfrfp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:18:50.577834 kubelet[2475]: E1002 20:18:50.577633 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:18:51.334298 kubelet[2475]: I1002 20:18:51.333905 2475 scope.go:117] "RemoveContainer" containerID="637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411" Oct 2 20:18:51.334298 kubelet[2475]: I1002 20:18:51.334266 2475 scope.go:117] "RemoveContainer" containerID="637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411" Oct 2 20:18:51.335385 env[1341]: time="2023-10-02T20:18:51.335341727Z" level=info msg="RemoveContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" Oct 2 20:18:51.336650 env[1341]: time="2023-10-02T20:18:51.336618729Z" level=info msg="RemoveContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\"" Oct 2 20:18:51.336748 env[1341]: time="2023-10-02T20:18:51.336709629Z" level=error msg="RemoveContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\" failed" error="failed to set removing state for container \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\": container is already in removing state" Oct 2 20:18:51.337557 kubelet[2475]: E1002 20:18:51.336864 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\": container is already in removing state" containerID="637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411" Oct 2 20:18:51.337557 kubelet[2475]: E1002 20:18:51.336905 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411": container is already in removing state; Skipping pod "cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)" Oct 2 20:18:51.337557 kubelet[2475]: E1002 20:18:51.337269 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:18:51.347177 env[1341]: time="2023-10-02T20:18:51.347123544Z" level=info msg="RemoveContainer for \"637b3b798a244e8c319d4e1c8b886a21befde03c6523f2802b7d788da5b9c411\" returns successfully" Oct 2 20:18:51.496719 systemd[1]: run-containerd-runc-k8s.io-c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc-runc.f2CZ5V.mount: Deactivated successfully. Oct 2 20:18:51.496873 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc-rootfs.mount: Deactivated successfully. Oct 2 20:18:52.631956 kubelet[2475]: E1002 20:18:52.631919 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:53.668346 kubelet[2475]: W1002 20:18:53.668302 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice/cri-containerd-c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc.scope WatchSource:0}: task c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc not found: not found Oct 2 20:18:57.633424 kubelet[2475]: E1002 20:18:57.633369 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:18:58.654000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.661036 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:18:58.661135 kernel: audit: type=1400 audit(1696277938.654:1386): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.654000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f35260 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:58.709505 kernel: audit: type=1300 audit(1696277938.654:1386): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001f35260 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:58.709830 kernel: audit: type=1327 audit(1696277938.654:1386): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.654000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.657000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.657000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c060 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:58.784195 kernel: audit: type=1400 audit(1696277938.657:1387): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.785162 kernel: audit: type=1300 audit(1696277938.657:1387): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6c060 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:18:58.786031 kernel: audit: type=1327 audit(1696277938.657:1387): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:18:58.803830 kernel: audit: type=1400 audit(1696277938.753:1388): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.753000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.753000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006db3230 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.839343 kernel: audit: type=1300 audit(1696277938.753:1388): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006db3230 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.839479 kernel: audit: type=1327 audit(1696277938.753:1388): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.753000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.859136 kernel: audit: type=1400 audit(1696277938.753:1389): avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.753000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.753000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006db3260 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.753000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.755000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.755000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006fbab10 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.755000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.757000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.757000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c009dd7de0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.757000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.833000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.833000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0031c6760 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:18:58.833000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:18:58.833000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006db3590 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:18:58.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:02.502049 env[1341]: time="2023-10-02T20:19:02.502008698Z" level=info msg="StopPodSandbox for \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\"" Oct 2 20:19:02.502530 env[1341]: time="2023-10-02T20:19:02.502098898Z" level=info msg="TearDown network for sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" successfully" Oct 2 20:19:02.502530 env[1341]: time="2023-10-02T20:19:02.502139998Z" level=info msg="StopPodSandbox for \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" returns successfully" Oct 2 20:19:02.502653 env[1341]: time="2023-10-02T20:19:02.502534899Z" level=info msg="RemovePodSandbox for \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\"" Oct 2 20:19:02.502653 env[1341]: time="2023-10-02T20:19:02.502568899Z" level=info msg="Forcibly stopping sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\"" Oct 2 20:19:02.502740 env[1341]: time="2023-10-02T20:19:02.502651399Z" level=info msg="TearDown network for sandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" successfully" Oct 2 20:19:02.512440 env[1341]: time="2023-10-02T20:19:02.512394013Z" level=info msg="RemovePodSandbox \"9eb09bfde02ea29290815db930f357b41935f6bc8b6b3c59dc961ac0e16bf420\" returns successfully" Oct 2 20:19:02.512816 env[1341]: time="2023-10-02T20:19:02.512784514Z" level=info msg="StopPodSandbox for \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\"" Oct 2 20:19:02.512914 env[1341]: time="2023-10-02T20:19:02.512860814Z" level=info msg="TearDown network for sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" successfully" Oct 2 20:19:02.512914 env[1341]: time="2023-10-02T20:19:02.512899714Z" level=info msg="StopPodSandbox for \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" returns successfully" Oct 2 20:19:02.513225 env[1341]: time="2023-10-02T20:19:02.513197215Z" level=info msg="RemovePodSandbox for \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\"" Oct 2 20:19:02.513313 env[1341]: time="2023-10-02T20:19:02.513229715Z" level=info msg="Forcibly stopping sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\"" Oct 2 20:19:02.513364 env[1341]: time="2023-10-02T20:19:02.513304915Z" level=info msg="TearDown network for sandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" successfully" Oct 2 20:19:02.523625 env[1341]: time="2023-10-02T20:19:02.523597030Z" level=info msg="RemovePodSandbox \"20cbf9d382b6e11a725ef70ef88e5a1070f4d23dcb121dac75363aa3d74ee050\" returns successfully" Oct 2 20:19:02.634191 kubelet[2475]: E1002 20:19:02.634161 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:04.472985 kubelet[2475]: E1002 20:19:04.472955 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:19:07.635690 kubelet[2475]: E1002 20:19:07.635651 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:12.636741 kubelet[2475]: E1002 20:19:12.636702 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:12.665000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.674238 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:19:12.675281 kernel: audit: type=1400 audit(1696277952.665:1394): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.665000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d73340 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.721280 kernel: audit: type=1300 audit(1696277952.665:1394): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d73340 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.721348 kernel: audit: type=1327 audit(1696277952.665:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.670000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.757219 kernel: audit: type=1400 audit(1696277952.670:1395): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.670000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d73380 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.780595 kernel: audit: type=1300 audit(1696277952.670:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d73380 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.780663 kernel: audit: type=1327 audit(1696277952.670:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.670000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.798466 kernel: audit: type=1400 audit(1696277952.670:1396): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.670000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d733c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.837112 kernel: audit: type=1300 audit(1696277952.670:1396): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d733c0 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.837780 kernel: audit: type=1327 audit(1696277952.670:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:12.677000 audit[2297]: AVC avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.872129 kernel: audit: type=1400 audit(1696277952.677:1397): avc: denied { watch } for pid=2297 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:12.677000 audit[2297]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00135c540 a2=fc6 a3=0 items=0 ppid=2163 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:12.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:17.475040 env[1341]: time="2023-10-02T20:19:17.474985842Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:19:17.505297 env[1341]: time="2023-10-02T20:19:17.505245887Z" level=info msg="CreateContainer within sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\"" Oct 2 20:19:17.506036 env[1341]: time="2023-10-02T20:19:17.506000789Z" level=info msg="StartContainer for \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\"" Oct 2 20:19:17.527364 systemd[1]: Started cri-containerd-829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f.scope. Oct 2 20:19:17.545760 systemd[1]: cri-containerd-829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f.scope: Deactivated successfully. Oct 2 20:19:17.549576 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f-rootfs.mount: Deactivated successfully. Oct 2 20:19:17.576138 env[1341]: time="2023-10-02T20:19:17.576088095Z" level=info msg="shim disconnected" id=829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f Oct 2 20:19:17.576436 env[1341]: time="2023-10-02T20:19:17.576138795Z" level=warning msg="cleaning up after shim disconnected" id=829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f namespace=k8s.io Oct 2 20:19:17.576436 env[1341]: time="2023-10-02T20:19:17.576149995Z" level=info msg="cleaning up dead shim" Oct 2 20:19:17.584659 env[1341]: time="2023-10-02T20:19:17.584624408Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3741 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:19:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:19:17.584932 env[1341]: time="2023-10-02T20:19:17.584868408Z" level=error msg="copy shim log" error="read /proc/self/fd/35: file already closed" Oct 2 20:19:17.587541 env[1341]: time="2023-10-02T20:19:17.587494212Z" level=error msg="Failed to pipe stdout of container \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\"" error="reading from a closed fifo" Oct 2 20:19:17.587801 env[1341]: time="2023-10-02T20:19:17.587765313Z" level=error msg="Failed to pipe stderr of container \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\"" error="reading from a closed fifo" Oct 2 20:19:17.592872 env[1341]: time="2023-10-02T20:19:17.592828120Z" level=error msg="StartContainer for \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:19:17.593236 kubelet[2475]: E1002 20:19:17.593215 2475 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f" Oct 2 20:19:17.593636 kubelet[2475]: E1002 20:19:17.593346 2475 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:19:17.593636 kubelet[2475]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:19:17.593636 kubelet[2475]: rm /hostbin/cilium-mount Oct 2 20:19:17.593636 kubelet[2475]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gfrfp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:19:17.593636 kubelet[2475]: E1002 20:19:17.593398 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:19:17.638232 kubelet[2475]: E1002 20:19:17.638180 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:18.388891 kubelet[2475]: I1002 20:19:18.388845 2475 scope.go:117] "RemoveContainer" containerID="c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc" Oct 2 20:19:18.389319 kubelet[2475]: I1002 20:19:18.389292 2475 scope.go:117] "RemoveContainer" containerID="c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc" Oct 2 20:19:18.390959 env[1341]: time="2023-10-02T20:19:18.390900031Z" level=info msg="RemoveContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" Oct 2 20:19:18.391664 env[1341]: time="2023-10-02T20:19:18.391631732Z" level=info msg="RemoveContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\"" Oct 2 20:19:18.391789 env[1341]: time="2023-10-02T20:19:18.391750732Z" level=error msg="RemoveContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\" failed" error="failed to set removing state for container \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\": container is already in removing state" Oct 2 20:19:18.391959 kubelet[2475]: E1002 20:19:18.391942 2475 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\": container is already in removing state" containerID="c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc" Oct 2 20:19:18.392086 kubelet[2475]: E1002 20:19:18.392069 2475 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc": container is already in removing state; Skipping pod "cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)" Oct 2 20:19:18.392400 kubelet[2475]: E1002 20:19:18.392384 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:19:18.401179 env[1341]: time="2023-10-02T20:19:18.401134247Z" level=info msg="RemoveContainer for \"c6b279a528642d55a904e608210a113715eda822278966bb8e6c1374f89725bc\" returns successfully" Oct 2 20:19:20.681550 kubelet[2475]: W1002 20:19:20.681493 2475 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice/cri-containerd-829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f.scope WatchSource:0}: task 829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f not found: not found Oct 2 20:19:22.641103 kubelet[2475]: E1002 20:19:22.641071 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:27.642625 kubelet[2475]: E1002 20:19:27.642580 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:31.472191 kubelet[2475]: E1002 20:19:31.472143 2475 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7vh7z_kube-system(89a1f80b-fa48-49a0-afe2-3cafc8590e9e)\"" pod="kube-system/cilium-7vh7z" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" Oct 2 20:19:32.643933 kubelet[2475]: E1002 20:19:32.643896 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:36.814116 env[1341]: time="2023-10-02T20:19:36.813848493Z" level=info msg="StopPodSandbox for \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\"" Oct 2 20:19:36.814116 env[1341]: time="2023-10-02T20:19:36.813935493Z" level=info msg="Container to stop \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:19:36.816441 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812-shm.mount: Deactivated successfully. Oct 2 20:19:36.824000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:19:36.825485 systemd[1]: cri-containerd-c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812.scope: Deactivated successfully. Oct 2 20:19:36.830453 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:19:36.830551 kernel: audit: type=1334 audit(1696277976.824:1398): prog-id=132 op=UNLOAD Oct 2 20:19:36.838000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:19:36.846439 kernel: audit: type=1334 audit(1696277976.838:1399): prog-id=135 op=UNLOAD Oct 2 20:19:36.876808 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812-rootfs.mount: Deactivated successfully. Oct 2 20:19:36.908791 env[1341]: time="2023-10-02T20:19:36.908740439Z" level=info msg="shim disconnected" id=c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812 Oct 2 20:19:36.908791 env[1341]: time="2023-10-02T20:19:36.908790639Z" level=warning msg="cleaning up after shim disconnected" id=c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812 namespace=k8s.io Oct 2 20:19:36.909128 env[1341]: time="2023-10-02T20:19:36.908803039Z" level=info msg="cleaning up dead shim" Oct 2 20:19:36.917778 env[1341]: time="2023-10-02T20:19:36.917734353Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3775 runtime=io.containerd.runc.v2\n" Oct 2 20:19:36.918085 env[1341]: time="2023-10-02T20:19:36.918051353Z" level=info msg="TearDown network for sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" successfully" Oct 2 20:19:36.918183 env[1341]: time="2023-10-02T20:19:36.918081453Z" level=info msg="StopPodSandbox for \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" returns successfully" Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932623 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hubble-tls\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932666 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-bpf-maps\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932693 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-xtables-lock\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932719 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-lib-modules\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932748 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-clustermesh-secrets\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932779 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932806 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-cgroup\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932830 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-run\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932856 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hostproc\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932885 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-config-path\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932914 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-kernel\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932941 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-net\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932965 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-etc-cni-netd\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.932993 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gfrfp\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-kube-api-access-gfrfp\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.933019 2475 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cni-path\") pod \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\" (UID: \"89a1f80b-fa48-49a0-afe2-3cafc8590e9e\") " Oct 2 20:19:36.933393 kubelet[2475]: I1002 20:19:36.933071 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cni-path" (OuterVolumeSpecName: "cni-path") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.933887 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.933926 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.933963 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.933983 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.934458 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934511 kubelet[2475]: I1002 20:19:36.934505 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.934796 kubelet[2475]: I1002 20:19:36.934533 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hostproc" (OuterVolumeSpecName: "hostproc") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.941420 kubelet[2475]: I1002 20:19:36.935160 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.941420 kubelet[2475]: I1002 20:19:36.935199 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:19:36.942240 kubelet[2475]: I1002 20:19:36.942216 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:19:36.943550 systemd[1]: var-lib-kubelet-pods-89a1f80b\x2dfa48\x2d49a0\x2dafe2\x2d3cafc8590e9e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:19:36.947526 kubelet[2475]: I1002 20:19:36.947500 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:19:36.951983 systemd[1]: var-lib-kubelet-pods-89a1f80b\x2dfa48\x2d49a0\x2dafe2\x2d3cafc8590e9e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgfrfp.mount: Deactivated successfully. Oct 2 20:19:36.955894 kubelet[2475]: I1002 20:19:36.955868 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-kube-api-access-gfrfp" (OuterVolumeSpecName: "kube-api-access-gfrfp") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "kube-api-access-gfrfp". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:19:36.957843 systemd[1]: var-lib-kubelet-pods-89a1f80b\x2dfa48\x2d49a0\x2dafe2\x2d3cafc8590e9e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:19:36.958829 kubelet[2475]: I1002 20:19:36.958806 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:19:36.960521 kubelet[2475]: I1002 20:19:36.960498 2475 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "89a1f80b-fa48-49a0-afe2-3cafc8590e9e" (UID: "89a1f80b-fa48-49a0-afe2-3cafc8590e9e"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:19:36.991002 sshd[3549]: pam_unix(sshd:session): session closed for user core Oct 2 20:19:36.992000 audit[3549]: USER_END pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:37.017429 kernel: audit: type=1106 audit(1696277976.992:1400): pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:37.017774 systemd[1]: sshd@29-10.200.8.15:22-10.200.12.6:59600.service: Deactivated successfully. Oct 2 20:19:37.019077 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:19:37.019114 systemd-logind[1321]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:19:37.020708 systemd-logind[1321]: Removed session 32. Oct 2 20:19:36.992000 audit[3549]: CRED_DISP pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:37.042806 kubelet[2475]: I1002 20:19:37.042773 2475 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-gfrfp\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-kube-api-access-gfrfp\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.042806 kubelet[2475]: I1002 20:19:37.042812 2475 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cni-path\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042830 2475 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-clustermesh-secrets\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042843 2475 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hubble-tls\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042856 2475 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-bpf-maps\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042868 2475 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-xtables-lock\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042882 2475 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-lib-modules\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042895 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042907 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-cgroup\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042920 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-run\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042932 2475 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-hostproc\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042944 2475 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-cilium-config-path\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042957 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042969 2475 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-host-proc-sys-net\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.043028 kubelet[2475]: I1002 20:19:37.042985 2475 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/89a1f80b-fa48-49a0-afe2-3cafc8590e9e-etc-cni-netd\") on node \"ci-3510.3.0-a-7abbcb6e32\" DevicePath \"\"" Oct 2 20:19:37.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:59600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:19:37.060049 kernel: audit: type=1104 audit(1696277976.992:1401): pid=3549 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:19:37.060195 kernel: audit: type=1131 audit(1696277977.016:1402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:59600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:19:37.427437 kubelet[2475]: I1002 20:19:37.427392 2475 scope.go:117] "RemoveContainer" containerID="829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f" Oct 2 20:19:37.431846 systemd[1]: Removed slice kubepods-burstable-pod89a1f80b_fa48_49a0_afe2_3cafc8590e9e.slice. Oct 2 20:19:37.433308 env[1341]: time="2023-10-02T20:19:37.433270046Z" level=info msg="RemoveContainer for \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\"" Oct 2 20:19:37.442638 env[1341]: time="2023-10-02T20:19:37.442597460Z" level=info msg="RemoveContainer for \"829b3440b9b330ec9f576ffb2a2b47834d78e9d2cb1a6b80eae0eb737031bf3f\" returns successfully" Oct 2 20:19:37.645509 kubelet[2475]: E1002 20:19:37.645461 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:37.816779 systemd[1]: var-lib-kubelet-pods-89a1f80b\x2dfa48\x2d49a0\x2dafe2\x2d3cafc8590e9e-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:19:38.474392 kubelet[2475]: I1002 20:19:38.474363 2475 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="89a1f80b-fa48-49a0-afe2-3cafc8590e9e" path="/var/lib/kubelet/pods/89a1f80b-fa48-49a0-afe2-3cafc8590e9e/volumes" Oct 2 20:19:42.646706 kubelet[2475]: E1002 20:19:42.646669 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:47.647395 kubelet[2475]: E1002 20:19:47.647353 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:51.195454 systemd[1]: cri-containerd-f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d.scope: Deactivated successfully. Oct 2 20:19:51.195814 systemd[1]: cri-containerd-f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d.scope: Consumed 5.488s CPU time. Oct 2 20:19:51.197000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:19:51.209277 kernel: audit: type=1334 audit(1696277991.197:1403): prog-id=83 op=UNLOAD Oct 2 20:19:51.209386 kernel: audit: type=1334 audit(1696277991.197:1404): prog-id=102 op=UNLOAD Oct 2 20:19:51.197000 audit: BPF prog-id=102 op=UNLOAD Oct 2 20:19:51.227360 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d-rootfs.mount: Deactivated successfully. Oct 2 20:19:51.278458 env[1341]: time="2023-10-02T20:19:51.278382843Z" level=info msg="shim disconnected" id=f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d Oct 2 20:19:51.278458 env[1341]: time="2023-10-02T20:19:51.278456044Z" level=warning msg="cleaning up after shim disconnected" id=f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d namespace=k8s.io Oct 2 20:19:51.278458 env[1341]: time="2023-10-02T20:19:51.278468044Z" level=info msg="cleaning up dead shim" Oct 2 20:19:51.286980 env[1341]: time="2023-10-02T20:19:51.286935057Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3809 runtime=io.containerd.runc.v2\n" Oct 2 20:19:51.456179 kubelet[2475]: I1002 20:19:51.456033 2475 scope.go:117] "RemoveContainer" containerID="f02942048f7d158999e7da840ddc634f07dfb0fa59fbf5298a5dfcd130528c3d" Oct 2 20:19:51.460911 env[1341]: time="2023-10-02T20:19:51.460871427Z" level=info msg="CreateContainer within sandbox \"4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:19:51.495325 env[1341]: time="2023-10-02T20:19:51.495276680Z" level=info msg="CreateContainer within sandbox \"4b8ccca9f32896dbfed40d82a95011180a922aefad978bbfef0d8834e6fea6a6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"179883f9e06ed1344929eb0e9c51b063f06e67dae151edf589c45ed878ce9f0b\"" Oct 2 20:19:51.495837 env[1341]: time="2023-10-02T20:19:51.495808081Z" level=info msg="StartContainer for \"179883f9e06ed1344929eb0e9c51b063f06e67dae151edf589c45ed878ce9f0b\"" Oct 2 20:19:51.517517 kubelet[2475]: E1002 20:19:51.517230 2475 controller.go:193] "Failed to update lease" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io ci-3510.3.0-a-7abbcb6e32)" Oct 2 20:19:51.522445 systemd[1]: Started cri-containerd-179883f9e06ed1344929eb0e9c51b063f06e67dae151edf589c45ed878ce9f0b.scope. Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.567311 kernel: audit: type=1400 audit(1696277991.538:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.567504 kernel: audit: type=1400 audit(1696277991.538:1406): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.594977 kernel: audit: type=1400 audit(1696277991.538:1407): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.595109 kernel: audit: type=1400 audit(1696277991.538:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.608843 kernel: audit: type=1400 audit(1696277991.538:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.637748 kernel: audit: type=1400 audit(1696277991.538:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.637879 kernel: audit: type=1400 audit(1696277991.538:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit: BPF prog-id=136 op=LOAD Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2163 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393838336639653036656431333434393239656230653963353162 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2163 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:51.653492 kernel: audit: type=1400 audit(1696277991.538:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393838336639653036656431333434393239656230653963353162 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.566000 audit: BPF prog-id=137 op=LOAD Oct 2 20:19:51.566000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000300370 items=0 ppid=2163 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:51.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393838336639653036656431333434393239656230653963353162 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.579000 audit: BPF prog-id=138 op=LOAD Oct 2 20:19:51.579000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003003b8 items=0 ppid=2163 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:51.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393838336639653036656431333434393239656230653963353162 Oct 2 20:19:51.607000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:19:51.607000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { perfmon } for pid=3828 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit[3828]: AVC avc: denied { bpf } for pid=3828 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:51.607000 audit: BPF prog-id=139 op=LOAD Oct 2 20:19:51.607000 audit[3828]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003007c8 items=0 ppid=2163 pid=3828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:51.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137393838336639653036656431333434393239656230653963353162 Oct 2 20:19:51.691799 env[1341]: time="2023-10-02T20:19:51.691732585Z" level=info msg="StartContainer for \"179883f9e06ed1344929eb0e9c51b063f06e67dae151edf589c45ed878ce9f0b\" returns successfully" Oct 2 20:19:52.227508 systemd[1]: run-containerd-runc-k8s.io-179883f9e06ed1344929eb0e9c51b063f06e67dae151edf589c45ed878ce9f0b-runc.2YM7E8.mount: Deactivated successfully. Oct 2 20:19:52.374000 audit[3839]: AVC avc: denied { watch } for pid=3839 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:52.374000 audit[3839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006bc960 a2=fc6 a3=0 items=0 ppid=2163 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:52.374000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:52.375000 audit[3839]: AVC avc: denied { watch } for pid=3839 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:52.375000 audit[3839]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000bcc020 a2=fc6 a3=0 items=0 ppid=2163 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c818 key=(null) Oct 2 20:19:52.375000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:19:52.648312 kubelet[2475]: E1002 20:19:52.648279 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:56.244484 kubelet[2475]: E1002 20:19:56.244350 2475 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"kube-apiserver-ci-3510.3.0-a-7abbcb6e32.178a63d73e233abf", GenerateName:"", Namespace:"kube-system", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Pod", Namespace:"kube-system", Name:"kube-apiserver-ci-3510.3.0-a-7abbcb6e32", UID:"e36419ef0fe53b34626e94012a545c37", APIVersion:"v1", ResourceVersion:"", FieldPath:"spec.containers{kube-apiserver}"}, Reason:"Unhealthy", Message:"Readiness probe failed: HTTP probe failed with statuscode: 500", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-7abbcb6e32"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 19, 45, 770027711, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 19, 45, 770027711, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510.3.0-a-7abbcb6e32"}': 'rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.15:50260->10.200.8.13:2379: read: connection timed out' (will not retry!) Oct 2 20:19:56.252773 systemd[1]: cri-containerd-1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005.scope: Deactivated successfully. Oct 2 20:19:56.253093 systemd[1]: cri-containerd-1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005.scope: Consumed 2.487s CPU time. Oct 2 20:19:56.265475 kernel: kauditd_printk_skb: 55 callbacks suppressed Oct 2 20:19:56.265603 kernel: audit: type=1334 audit(1696277996.256:1425): prog-id=87 op=UNLOAD Oct 2 20:19:56.256000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:19:56.256000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:19:56.277437 kernel: audit: type=1334 audit(1696277996.256:1426): prog-id=109 op=UNLOAD Oct 2 20:19:56.287678 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005-rootfs.mount: Deactivated successfully. Oct 2 20:19:56.343369 env[1341]: time="2023-10-02T20:19:56.343317911Z" level=info msg="shim disconnected" id=1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005 Oct 2 20:19:56.343927 env[1341]: time="2023-10-02T20:19:56.343730411Z" level=warning msg="cleaning up after shim disconnected" id=1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005 namespace=k8s.io Oct 2 20:19:56.343927 env[1341]: time="2023-10-02T20:19:56.343766211Z" level=info msg="cleaning up dead shim" Oct 2 20:19:56.351721 env[1341]: time="2023-10-02T20:19:56.351680524Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:19:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3868 runtime=io.containerd.runc.v2\n" Oct 2 20:19:56.439471 kubelet[2475]: E1002 20:19:56.439260 2475 controller.go:193] "Failed to update lease" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.15:50414->10.200.8.13:2379: read: connection timed out" Oct 2 20:19:56.469273 kubelet[2475]: I1002 20:19:56.469242 2475 scope.go:117] "RemoveContainer" containerID="1f73f3784ce0aabfe261291cfe4721114666f895ad3ff40c4627cf9c5c403005" Oct 2 20:19:56.472318 env[1341]: time="2023-10-02T20:19:56.471683610Z" level=info msg="CreateContainer within sandbox \"0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:19:56.502341 env[1341]: time="2023-10-02T20:19:56.502185358Z" level=info msg="CreateContainer within sandbox \"0c7aef43e520aaaa749633207e8c12570062bc7f7499f2335bde9073d96c3f91\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"1b91fb717b0956806b4b1bef71822417516a28b922c90b9ab190c4f4f25b6449\"" Oct 2 20:19:56.503108 env[1341]: time="2023-10-02T20:19:56.503075659Z" level=info msg="StartContainer for \"1b91fb717b0956806b4b1bef71822417516a28b922c90b9ab190c4f4f25b6449\"" Oct 2 20:19:56.527455 systemd[1]: Started cri-containerd-1b91fb717b0956806b4b1bef71822417516a28b922c90b9ab190c4f4f25b6449.scope. Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.571745 kernel: audit: type=1400 audit(1696277996.542:1427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.571878 kernel: audit: type=1400 audit(1696277996.542:1428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.571913 kernel: audit: type=1400 audit(1696277996.542:1429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.613271 kernel: audit: type=1400 audit(1696277996.542:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.613401 kernel: audit: type=1400 audit(1696277996.542:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.639011 kernel: audit: type=1400 audit(1696277996.542:1432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.639142 kernel: audit: type=1400 audit(1696277996.542:1433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.653686 kernel: audit: type=1400 audit(1696277996.542:1434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.584000 audit: BPF prog-id=140 op=LOAD Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2223 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:56.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393166623731376230393536383036623462316265663731383232 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=2223 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:56.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393166623731376230393536383036623462316265663731383232 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit: BPF prog-id=141 op=LOAD Oct 2 20:19:56.585000 audit[3889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000b9790 items=0 ppid=2223 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:56.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393166623731376230393536383036623462316265663731383232 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit: BPF prog-id=142 op=LOAD Oct 2 20:19:56.585000 audit[3889]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000b97d8 items=0 ppid=2223 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:56.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393166623731376230393536383036623462316265663731383232 Oct 2 20:19:56.585000 audit: BPF prog-id=142 op=UNLOAD Oct 2 20:19:56.585000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { perfmon } for pid=3889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit[3889]: AVC avc: denied { bpf } for pid=3889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:19:56.585000 audit: BPF prog-id=143 op=LOAD Oct 2 20:19:56.585000 audit[3889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0000b9be8 items=0 ppid=2223 pid=3889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:19:56.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162393166623731376230393536383036623462316265663731383232 Oct 2 20:19:56.681554 env[1341]: time="2023-10-02T20:19:56.681512337Z" level=info msg="StartContainer for \"1b91fb717b0956806b4b1bef71822417516a28b922c90b9ab190c4f4f25b6449\" returns successfully" Oct 2 20:19:57.289718 systemd[1]: run-containerd-runc-k8s.io-1b91fb717b0956806b4b1bef71822417516a28b922c90b9ab190c4f4f25b6449-runc.tTY0w4.mount: Deactivated successfully. Oct 2 20:19:57.650473 kubelet[2475]: E1002 20:19:57.650440 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:19:58.754000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=269 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.754000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.754000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00c193650 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.754000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:58.754000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c005d2a330 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.754000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:58.758000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=4869 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.758000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.758000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00c1936e0 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.758000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:58.758000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c010793980 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.758000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:58.835000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=4858 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.835000 audit[2357]: AVC avc: denied { watch } for pid=2357 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=256 scontext=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:19:58.835000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00c7b8920 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:19:58.835000 audit[2357]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c005d2a540 a2=fc6 a3=0 items=0 ppid=2191 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c317,c873 key=(null) Oct 2 20:19:58.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:20:01.876437 kubelet[2475]: I1002 20:20:01.876370 2475 status_manager.go:853] "Failed to get status for pod" podUID="d3a18c5ae3da32eb4401a556de514f76" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-7abbcb6e32" err="rpc error: code = Unavailable desc = error reading from server: read tcp 10.200.8.15:50360->10.200.8.13:2379: read: connection timed out" Oct 2 20:20:02.526424 env[1341]: time="2023-10-02T20:20:02.526356739Z" level=info msg="StopPodSandbox for \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\"" Oct 2 20:20:02.526882 env[1341]: time="2023-10-02T20:20:02.526505539Z" level=info msg="TearDown network for sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" successfully" Oct 2 20:20:02.526882 env[1341]: time="2023-10-02T20:20:02.526562540Z" level=info msg="StopPodSandbox for \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" returns successfully" Oct 2 20:20:02.527317 env[1341]: time="2023-10-02T20:20:02.527280241Z" level=info msg="RemovePodSandbox for \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\"" Oct 2 20:20:02.527507 env[1341]: time="2023-10-02T20:20:02.527320641Z" level=info msg="Forcibly stopping sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\"" Oct 2 20:20:02.527595 env[1341]: time="2023-10-02T20:20:02.527527341Z" level=info msg="TearDown network for sandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" successfully" Oct 2 20:20:02.536789 env[1341]: time="2023-10-02T20:20:02.536748655Z" level=info msg="RemovePodSandbox \"c8dc0ac9c71e0374a0cc2e21d87afe7aee3eb25dd50f21f8370af8acea366812\" returns successfully" Oct 2 20:20:02.651975 kubelet[2475]: E1002 20:20:02.651930 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:20:06.440428 kubelet[2475]: E1002 20:20:06.440359 2475 controller.go:193] "Failed to update lease" err="the server was unable to return a response in the time allotted, but may still be processing the request (put leases.coordination.k8s.io ci-3510.3.0-a-7abbcb6e32)" Oct 2 20:20:07.653232 kubelet[2475]: E1002 20:20:07.653196 2475 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"