Oct 2 20:30:02.020156 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:30:02.020178 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:02.020187 kernel: BIOS-provided physical RAM map: Oct 2 20:30:02.020195 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Oct 2 20:30:02.020201 kernel: BIOS-e820: [mem 0x00000000000c0000-0x00000000000fffff] reserved Oct 2 20:30:02.020207 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000003ff40fff] usable Oct 2 20:30:02.020219 kernel: BIOS-e820: [mem 0x000000003ff41000-0x000000003ffc8fff] reserved Oct 2 20:30:02.020224 kernel: BIOS-e820: [mem 0x000000003ffc9000-0x000000003fffafff] ACPI data Oct 2 20:30:02.020231 kernel: BIOS-e820: [mem 0x000000003fffb000-0x000000003fffefff] ACPI NVS Oct 2 20:30:02.020239 kernel: BIOS-e820: [mem 0x000000003ffff000-0x000000003fffffff] usable Oct 2 20:30:02.020245 kernel: BIOS-e820: [mem 0x0000000100000000-0x00000002bfffffff] usable Oct 2 20:30:02.020253 kernel: printk: bootconsole [earlyser0] enabled Oct 2 20:30:02.020259 kernel: NX (Execute Disable) protection: active Oct 2 20:30:02.020264 kernel: efi: EFI v2.70 by Microsoft Oct 2 20:30:02.020276 kernel: efi: ACPI=0x3fffa000 ACPI 2.0=0x3fffa014 SMBIOS=0x3ff85000 SMBIOS 3.0=0x3ff83000 MEMATTR=0x3f5caa98 RNG=0x3ffd1018 Oct 2 20:30:02.020283 kernel: random: crng init done Oct 2 20:30:02.020291 kernel: SMBIOS 3.1.0 present. Oct 2 20:30:02.020299 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022 Oct 2 20:30:02.020305 kernel: Hypervisor detected: Microsoft Hyper-V Oct 2 20:30:02.020313 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0x64e24, misc 0xbed7b2 Oct 2 20:30:02.020320 kernel: Hyper-V Host Build:20348-10.0-1-0.1462 Oct 2 20:30:02.020328 kernel: Hyper-V: Nested features: 0x1e0101 Oct 2 20:30:02.020337 kernel: Hyper-V: LAPIC Timer Frequency: 0x30d40 Oct 2 20:30:02.020343 kernel: Hyper-V: Using hypercall for remote TLB flush Oct 2 20:30:02.020350 kernel: clocksource: hyperv_clocksource_tsc_page: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns Oct 2 20:30:02.020358 kernel: tsc: Marking TSC unstable due to running on Hyper-V Oct 2 20:30:02.020366 kernel: tsc: Detected 2593.907 MHz processor Oct 2 20:30:02.020374 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:30:02.020381 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:30:02.020388 kernel: last_pfn = 0x2c0000 max_arch_pfn = 0x400000000 Oct 2 20:30:02.020397 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:30:02.020403 kernel: e820: update [mem 0x40000000-0xffffffff] usable ==> reserved Oct 2 20:30:02.020414 kernel: last_pfn = 0x40000 max_arch_pfn = 0x400000000 Oct 2 20:30:02.020420 kernel: Using GB pages for direct mapping Oct 2 20:30:02.020427 kernel: Secure boot disabled Oct 2 20:30:02.020435 kernel: ACPI: Early table checksum verification disabled Oct 2 20:30:02.020442 kernel: ACPI: RSDP 0x000000003FFFA014 000024 (v02 VRTUAL) Oct 2 20:30:02.020451 kernel: ACPI: XSDT 0x000000003FFF90E8 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020457 kernel: ACPI: FACP 0x000000003FFF8000 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020463 kernel: ACPI: DSDT 0x000000003FFD6000 01E184 (v02 MSFTVM DSDT01 00000001 MSFT 05000000) Oct 2 20:30:02.020477 kernel: ACPI: FACS 0x000000003FFFE000 000040 Oct 2 20:30:02.020486 kernel: ACPI: OEM0 0x000000003FFF7000 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020494 kernel: ACPI: SPCR 0x000000003FFF6000 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020501 kernel: ACPI: WAET 0x000000003FFF5000 000028 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020511 kernel: ACPI: APIC 0x000000003FFD5000 000058 (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020518 kernel: ACPI: SRAT 0x000000003FFD4000 0002D0 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020530 kernel: ACPI: BGRT 0x000000003FFD3000 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020537 kernel: ACPI: FPDT 0x000000003FFD2000 000034 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Oct 2 20:30:02.020544 kernel: ACPI: Reserving FACP table memory at [mem 0x3fff8000-0x3fff8113] Oct 2 20:30:02.020553 kernel: ACPI: Reserving DSDT table memory at [mem 0x3ffd6000-0x3fff4183] Oct 2 20:30:02.020561 kernel: ACPI: Reserving FACS table memory at [mem 0x3fffe000-0x3fffe03f] Oct 2 20:30:02.020570 kernel: ACPI: Reserving OEM0 table memory at [mem 0x3fff7000-0x3fff7063] Oct 2 20:30:02.020577 kernel: ACPI: Reserving SPCR table memory at [mem 0x3fff6000-0x3fff604f] Oct 2 20:30:02.020585 kernel: ACPI: Reserving WAET table memory at [mem 0x3fff5000-0x3fff5027] Oct 2 20:30:02.020595 kernel: ACPI: Reserving APIC table memory at [mem 0x3ffd5000-0x3ffd5057] Oct 2 20:30:02.020604 kernel: ACPI: Reserving SRAT table memory at [mem 0x3ffd4000-0x3ffd42cf] Oct 2 20:30:02.020612 kernel: ACPI: Reserving BGRT table memory at [mem 0x3ffd3000-0x3ffd3037] Oct 2 20:30:02.020618 kernel: ACPI: Reserving FPDT table memory at [mem 0x3ffd2000-0x3ffd2033] Oct 2 20:30:02.020629 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:30:02.020635 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:30:02.020646 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Oct 2 20:30:02.020652 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x2bfffffff] hotplug Oct 2 20:30:02.020659 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2c0000000-0xfdfffffff] hotplug Oct 2 20:30:02.020670 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Oct 2 20:30:02.020678 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Oct 2 20:30:02.020687 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Oct 2 20:30:02.020694 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Oct 2 20:30:02.020702 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Oct 2 20:30:02.020710 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Oct 2 20:30:02.020719 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Oct 2 20:30:02.020727 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Oct 2 20:30:02.020734 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Oct 2 20:30:02.020745 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000000-0x1ffffffffffff] hotplug Oct 2 20:30:02.020753 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x2000000000000-0x3ffffffffffff] hotplug Oct 2 20:30:02.020762 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x4000000000000-0x7ffffffffffff] hotplug Oct 2 20:30:02.020769 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x8000000000000-0xfffffffffffff] hotplug Oct 2 20:30:02.020776 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x2bfffffff] -> [mem 0x00000000-0x2bfffffff] Oct 2 20:30:02.020786 kernel: NODE_DATA(0) allocated [mem 0x2bfffa000-0x2bfffffff] Oct 2 20:30:02.020793 kernel: Zone ranges: Oct 2 20:30:02.020802 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:30:02.020809 kernel: DMA32 [mem 0x0000000001000000-0x00000000ffffffff] Oct 2 20:30:02.020819 kernel: Normal [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:30:02.020828 kernel: Movable zone start for each node Oct 2 20:30:02.020836 kernel: Early memory node ranges Oct 2 20:30:02.020845 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Oct 2 20:30:02.020851 kernel: node 0: [mem 0x0000000000100000-0x000000003ff40fff] Oct 2 20:30:02.020860 kernel: node 0: [mem 0x000000003ffff000-0x000000003fffffff] Oct 2 20:30:02.020868 kernel: node 0: [mem 0x0000000100000000-0x00000002bfffffff] Oct 2 20:30:02.020877 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x00000002bfffffff] Oct 2 20:30:02.020884 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:30:02.020897 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Oct 2 20:30:02.020910 kernel: On node 0, zone DMA32: 190 pages in unavailable ranges Oct 2 20:30:02.020921 kernel: ACPI: PM-Timer IO Port: 0x408 Oct 2 20:30:02.020936 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] dfl dfl lint[0x1]) Oct 2 20:30:02.020946 kernel: IOAPIC[0]: apic_id 2, version 17, address 0xfec00000, GSI 0-23 Oct 2 20:30:02.020960 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:30:02.020973 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:30:02.020986 kernel: ACPI: SPCR: console: uart,io,0x3f8,115200 Oct 2 20:30:02.020999 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:30:02.021011 kernel: [mem 0x40000000-0xffffffff] available for PCI devices Oct 2 20:30:02.021018 kernel: Booting paravirtualized kernel on Hyper-V Oct 2 20:30:02.021025 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:30:02.021039 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:30:02.021053 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:30:02.021066 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:30:02.021081 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:30:02.021092 kernel: Hyper-V: PV spinlocks enabled Oct 2 20:30:02.021100 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:30:02.021108 kernel: Built 1 zonelists, mobility grouping on. Total pages: 2062618 Oct 2 20:30:02.021122 kernel: Policy zone: Normal Oct 2 20:30:02.021137 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:02.021149 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:30:02.021155 kernel: Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) Oct 2 20:30:02.021163 kernel: Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 20:30:02.021176 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:30:02.021190 kernel: Memory: 8073736K/8387460K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 313464K reserved, 0K cma-reserved) Oct 2 20:30:02.021204 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:30:02.021213 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:30:02.021227 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:30:02.021244 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:30:02.021259 kernel: rcu: RCU event tracing is enabled. Oct 2 20:30:02.021269 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:30:02.021276 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:30:02.021290 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:30:02.021304 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:30:02.021319 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:30:02.021331 kernel: Using NULL legacy PIC Oct 2 20:30:02.021341 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 0 Oct 2 20:30:02.021348 kernel: Console: colour dummy device 80x25 Oct 2 20:30:02.021366 kernel: printk: console [tty1] enabled Oct 2 20:30:02.021380 kernel: printk: console [ttyS0] enabled Oct 2 20:30:02.021392 kernel: printk: bootconsole [earlyser0] disabled Oct 2 20:30:02.021400 kernel: ACPI: Core revision 20210730 Oct 2 20:30:02.021410 kernel: Failed to register legacy timer interrupt Oct 2 20:30:02.021425 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:30:02.021440 kernel: Hyper-V: Using IPI hypercalls Oct 2 20:30:02.021454 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 5187.81 BogoMIPS (lpj=2593907) Oct 2 20:30:02.021468 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:30:02.021482 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:30:02.021495 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:30:02.021504 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:30:02.021511 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:30:02.021525 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:30:02.021538 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:30:02.021552 kernel: RETBleed: Vulnerable Oct 2 20:30:02.021565 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:30:02.021579 kernel: TAA: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:30:02.021593 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:30:02.021603 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:30:02.021610 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:30:02.021618 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:30:02.021635 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:30:02.021650 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:30:02.021657 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:30:02.021664 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:30:02.021677 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:30:02.021693 kernel: x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 Oct 2 20:30:02.021707 kernel: x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 Oct 2 20:30:02.021716 kernel: x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 Oct 2 20:30:02.021723 kernel: x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. Oct 2 20:30:02.021737 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:30:02.021753 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:30:02.021768 kernel: LSM: Security Framework initializing Oct 2 20:30:02.021779 kernel: SELinux: Initializing. Oct 2 20:30:02.021788 kernel: Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:30:02.021800 kernel: Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:30:02.021814 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8272CL CPU @ 2.60GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:30:02.021828 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:30:02.021841 kernel: signal: max sigframe size: 3632 Oct 2 20:30:02.021848 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:30:02.021856 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:30:02.021871 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:30:02.021884 kernel: x86: Booting SMP configuration: Oct 2 20:30:02.021892 kernel: .... node #0, CPUs: #1 Oct 2 20:30:02.021903 kernel: TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. Oct 2 20:30:02.021918 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:30:02.021932 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:30:02.021940 kernel: smpboot: Max logical packages: 1 Oct 2 20:30:02.021956 kernel: smpboot: Total of 2 processors activated (10375.62 BogoMIPS) Oct 2 20:30:02.021967 kernel: devtmpfs: initialized Oct 2 20:30:02.021975 kernel: x86/mm: Memory block size: 128MB Oct 2 20:30:02.021983 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x3fffb000-0x3fffefff] (16384 bytes) Oct 2 20:30:02.022001 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:30:02.022012 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:30:02.022019 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:30:02.022028 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:30:02.022042 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:30:02.022052 kernel: audit: type=2000 audit(1696278600.023:1): state=initialized audit_enabled=0 res=1 Oct 2 20:30:02.022059 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:30:02.022066 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:30:02.022073 kernel: cpuidle: using governor menu Oct 2 20:30:02.022090 kernel: ACPI: bus type PCI registered Oct 2 20:30:02.022106 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:30:02.022114 kernel: dca service started, version 1.12.1 Oct 2 20:30:02.022121 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:30:02.022133 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:30:02.022149 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:30:02.022162 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:30:02.022171 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:30:02.022178 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:30:02.022193 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:30:02.022208 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:30:02.022221 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:30:02.022229 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:30:02.022236 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 20:30:02.022247 kernel: ACPI: Interpreter enabled Oct 2 20:30:02.022261 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:30:02.022269 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:30:02.022276 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:30:02.022296 kernel: ACPI: Enabled 1 GPEs in block 00 to 0F Oct 2 20:30:02.022309 kernel: iommu: Default domain type: Translated Oct 2 20:30:02.022316 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:30:02.022324 kernel: vgaarb: loaded Oct 2 20:30:02.022339 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:30:02.022351 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:30:02.022363 kernel: PTP clock support registered Oct 2 20:30:02.022374 kernel: Registered efivars operations Oct 2 20:30:02.022386 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:30:02.022398 kernel: PCI: System does not support PCI Oct 2 20:30:02.022412 kernel: clocksource: Switched to clocksource hyperv_clocksource_tsc_page Oct 2 20:30:02.022425 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:30:02.022435 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:30:02.022443 kernel: pnp: PnP ACPI init Oct 2 20:30:02.022454 kernel: pnp: PnP ACPI: found 3 devices Oct 2 20:30:02.022462 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:30:02.022472 kernel: NET: Registered PF_INET protocol family Oct 2 20:30:02.022479 kernel: IP idents hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:30:02.022492 kernel: tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) Oct 2 20:30:02.022499 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:30:02.022507 kernel: TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 20:30:02.022517 kernel: TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) Oct 2 20:30:02.022524 kernel: TCP: Hash tables configured (established 65536 bind 65536) Oct 2 20:30:02.022532 kernel: UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:30:02.022541 kernel: UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) Oct 2 20:30:02.022548 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:30:02.022557 kernel: NET: Registered PF_XDP protocol family Oct 2 20:30:02.022567 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:30:02.022575 kernel: PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Oct 2 20:30:02.022584 kernel: software IO TLB: mapped [mem 0x000000003a8ad000-0x000000003e8ad000] (64MB) Oct 2 20:30:02.022592 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:30:02.022600 kernel: Initialise system trusted keyrings Oct 2 20:30:02.022609 kernel: workingset: timestamp_bits=39 max_order=21 bucket_order=0 Oct 2 20:30:02.022616 kernel: Key type asymmetric registered Oct 2 20:30:02.022625 kernel: Asymmetric key parser 'x509' registered Oct 2 20:30:02.022634 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:30:02.022645 kernel: io scheduler mq-deadline registered Oct 2 20:30:02.022654 kernel: io scheduler kyber registered Oct 2 20:30:02.022661 kernel: io scheduler bfq registered Oct 2 20:30:02.022670 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:30:02.022680 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:30:02.022687 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:30:02.022697 kernel: 00:01: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A Oct 2 20:30:02.022705 kernel: i8042: PNP: No PS/2 controller found. Oct 2 20:30:02.022829 kernel: rtc_cmos 00:02: registered as rtc0 Oct 2 20:30:02.022920 kernel: rtc_cmos 00:02: setting system clock to 2023-10-02T20:30:01 UTC (1696278601) Oct 2 20:30:02.029058 kernel: rtc_cmos 00:02: alarms up to one month, 114 bytes nvram Oct 2 20:30:02.029074 kernel: fail to initialize ptp_kvm Oct 2 20:30:02.029084 kernel: intel_pstate: CPU model not supported Oct 2 20:30:02.029092 kernel: efifb: probing for efifb Oct 2 20:30:02.029103 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Oct 2 20:30:02.029111 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Oct 2 20:30:02.029121 kernel: efifb: scrolling: redraw Oct 2 20:30:02.029132 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Oct 2 20:30:02.029143 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:30:02.029151 kernel: fb0: EFI VGA frame buffer device Oct 2 20:30:02.029160 kernel: pstore: Registered efi as persistent store backend Oct 2 20:30:02.029168 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:30:02.029177 kernel: Segment Routing with IPv6 Oct 2 20:30:02.029185 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:30:02.029195 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:30:02.029203 kernel: Key type dns_resolver registered Oct 2 20:30:02.029212 kernel: IPI shorthand broadcast: enabled Oct 2 20:30:02.029222 kernel: sched_clock: Marking stable (744191500, 22501800)->(962030600, -195337300) Oct 2 20:30:02.029231 kernel: registered taskstats version 1 Oct 2 20:30:02.029240 kernel: Loading compiled-in X.509 certificates Oct 2 20:30:02.029247 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:30:02.029256 kernel: Key type .fscrypt registered Oct 2 20:30:02.029265 kernel: Key type fscrypt-provisioning registered Oct 2 20:30:02.029275 kernel: pstore: Using crash dump compression: deflate Oct 2 20:30:02.029284 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:30:02.029294 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:30:02.029302 kernel: ima: No architecture policies found Oct 2 20:30:02.029313 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:30:02.029321 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:30:02.029328 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:30:02.029339 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:30:02.029347 kernel: Run /init as init process Oct 2 20:30:02.029356 kernel: with arguments: Oct 2 20:30:02.029364 kernel: /init Oct 2 20:30:02.029376 kernel: with environment: Oct 2 20:30:02.029383 kernel: HOME=/ Oct 2 20:30:02.029393 kernel: TERM=linux Oct 2 20:30:02.029400 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:30:02.029411 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:30:02.029421 systemd[1]: Detected virtualization microsoft. Oct 2 20:30:02.029432 systemd[1]: Detected architecture x86-64. Oct 2 20:30:02.029441 systemd[1]: Running in initrd. Oct 2 20:30:02.029450 systemd[1]: No hostname configured, using default hostname. Oct 2 20:30:02.029459 systemd[1]: Hostname set to . Oct 2 20:30:02.029470 systemd[1]: Initializing machine ID from random generator. Oct 2 20:30:02.029478 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:30:02.029486 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:30:02.029496 systemd[1]: Reached target cryptsetup.target. Oct 2 20:30:02.029505 systemd[1]: Reached target paths.target. Oct 2 20:30:02.029514 systemd[1]: Reached target slices.target. Oct 2 20:30:02.029523 systemd[1]: Reached target swap.target. Oct 2 20:30:02.029533 systemd[1]: Reached target timers.target. Oct 2 20:30:02.029542 systemd[1]: Listening on iscsid.socket. Oct 2 20:30:02.029552 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:30:02.029559 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:30:02.029571 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:30:02.029579 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:30:02.029591 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:30:02.029599 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:30:02.029610 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:30:02.029618 systemd[1]: Reached target sockets.target. Oct 2 20:30:02.029628 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:30:02.029636 systemd[1]: Finished network-cleanup.service. Oct 2 20:30:02.029646 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:30:02.029655 systemd[1]: Starting systemd-journald.service... Oct 2 20:30:02.029666 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:30:02.029675 systemd[1]: Starting systemd-resolved.service... Oct 2 20:30:02.029685 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:30:02.029693 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:30:02.029704 kernel: audit: type=1130 audit(1696278602.024:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.029715 systemd-journald[183]: Journal started Oct 2 20:30:02.029763 systemd-journald[183]: Runtime Journal (/run/log/journal/f37ccce70a3b47fdaa950faeeaf2550e) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:30:02.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.006998 systemd-modules-load[184]: Inserted module 'overlay' Oct 2 20:30:02.045637 systemd[1]: Started systemd-journald.service. Oct 2 20:30:02.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.059200 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:30:02.063220 kernel: audit: type=1130 audit(1696278602.047:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.063970 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:30:02.075896 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:30:02.076810 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:30:02.085753 kernel: Bridge firewalling registered Oct 2 20:30:02.079497 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:30:02.085447 systemd-modules-load[184]: Inserted module 'br_netfilter' Oct 2 20:30:02.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.106951 kernel: audit: type=1130 audit(1696278602.063:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.124264 kernel: audit: type=1130 audit(1696278602.075:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.123484 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:30:02.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.133420 systemd-resolved[185]: Positive Trust Anchors: Oct 2 20:30:02.141835 kernel: audit: type=1130 audit(1696278602.127:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.133562 systemd-resolved[185]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:30:02.133596 systemd-resolved[185]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:30:02.136169 systemd-resolved[185]: Defaulting to hostname 'linux'. Oct 2 20:30:02.161824 systemd[1]: Started systemd-resolved.service. Oct 2 20:30:02.173261 kernel: SCSI subsystem initialized Oct 2 20:30:02.166823 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:30:02.169077 systemd[1]: Reached target nss-lookup.target. Oct 2 20:30:02.196711 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:30:02.196744 kernel: audit: type=1130 audit(1696278602.166:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.196758 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:30:02.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.196978 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:30:02.218712 kernel: audit: type=1130 audit(1696278602.168:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.218735 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:30:02.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.224141 dracut-cmdline[200]: dracut-dracut-053 Oct 2 20:30:02.226484 systemd-modules-load[184]: Inserted module 'dm_multipath' Oct 2 20:30:02.228546 dracut-cmdline[200]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlyprintk=ttyS0,115200 flatcar.first_boot=detected flatcar.oem.id=azure flatcar.autologin verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:30:02.243339 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:30:02.248828 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:30:02.265597 kernel: audit: type=1130 audit(1696278602.247:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.267135 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:30:02.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.282962 kernel: audit: type=1130 audit(1696278602.269:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.313946 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:30:02.326948 kernel: iscsi: registered transport (tcp) Oct 2 20:30:02.351619 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:30:02.351665 kernel: QLogic iSCSI HBA Driver Oct 2 20:30:02.380431 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:30:02.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.385762 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:30:02.435948 kernel: raid6: avx512x4 gen() 18644 MB/s Oct 2 20:30:02.455944 kernel: raid6: avx512x4 xor() 8439 MB/s Oct 2 20:30:02.475939 kernel: raid6: avx512x2 gen() 18798 MB/s Oct 2 20:30:02.496945 kernel: raid6: avx512x2 xor() 29867 MB/s Oct 2 20:30:02.516941 kernel: raid6: avx512x1 gen() 18812 MB/s Oct 2 20:30:02.536942 kernel: raid6: avx512x1 xor() 26865 MB/s Oct 2 20:30:02.557942 kernel: raid6: avx2x4 gen() 18632 MB/s Oct 2 20:30:02.577942 kernel: raid6: avx2x4 xor() 7992 MB/s Oct 2 20:30:02.597941 kernel: raid6: avx2x2 gen() 18585 MB/s Oct 2 20:30:02.618945 kernel: raid6: avx2x2 xor() 21757 MB/s Oct 2 20:30:02.638942 kernel: raid6: avx2x1 gen() 13901 MB/s Oct 2 20:30:02.658941 kernel: raid6: avx2x1 xor() 19049 MB/s Oct 2 20:30:02.679941 kernel: raid6: sse2x4 gen() 11557 MB/s Oct 2 20:30:02.699939 kernel: raid6: sse2x4 xor() 7228 MB/s Oct 2 20:30:02.719939 kernel: raid6: sse2x2 gen() 12733 MB/s Oct 2 20:30:02.740941 kernel: raid6: sse2x2 xor() 7573 MB/s Oct 2 20:30:02.760939 kernel: raid6: sse2x1 gen() 11418 MB/s Oct 2 20:30:02.784492 kernel: raid6: sse2x1 xor() 5890 MB/s Oct 2 20:30:02.784517 kernel: raid6: using algorithm avx512x1 gen() 18812 MB/s Oct 2 20:30:02.784529 kernel: raid6: .... xor() 26865 MB/s, rmw enabled Oct 2 20:30:02.787754 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:30:02.806947 kernel: xor: automatically using best checksumming function avx Oct 2 20:30:02.902951 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:30:02.910800 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:30:02.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.914000 audit: BPF prog-id=7 op=LOAD Oct 2 20:30:02.914000 audit: BPF prog-id=8 op=LOAD Oct 2 20:30:02.915794 systemd[1]: Starting systemd-udevd.service... Oct 2 20:30:02.929764 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 20:30:02.934398 systemd[1]: Started systemd-udevd.service. Oct 2 20:30:02.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.943455 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:30:02.958337 dracut-pre-trigger[404]: rd.md=0: removing MD RAID activation Oct 2 20:30:02.988089 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:30:02.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:02.993453 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:30:03.026418 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:30:03.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:03.072946 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:30:03.089947 kernel: hv_vmbus: Vmbus version:5.2 Oct 2 20:30:03.098948 kernel: hv_vmbus: registering driver hyperv_keyboard Oct 2 20:30:03.114918 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/VMBUS:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input0 Oct 2 20:30:03.114964 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:30:03.118944 kernel: AES CTR mode by8 optimization enabled Oct 2 20:30:03.145236 kernel: hv_vmbus: registering driver hv_netvsc Oct 2 20:30:03.147266 kernel: hv_vmbus: registering driver hv_storvsc Oct 2 20:30:03.152951 kernel: scsi host0: storvsc_host_t Oct 2 20:30:03.153134 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 20:30:03.153146 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Oct 2 20:30:03.159942 kernel: scsi host1: storvsc_host_t Oct 2 20:30:03.160101 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 0 Oct 2 20:30:03.182944 kernel: hv_vmbus: registering driver hid_hyperv Oct 2 20:30:03.200698 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Oct 2 20:30:03.200881 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Oct 2 20:30:03.201028 kernel: sd 0:0:0:0: [sda] Write Protect is off Oct 2 20:30:03.203946 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Oct 2 20:30:03.204110 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input1 Oct 2 20:30:03.214764 kernel: hid 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Oct 2 20:30:03.214899 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Oct 2 20:30:03.225955 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:03.229949 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Oct 2 20:30:03.237008 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Oct 2 20:30:03.237211 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Oct 2 20:30:03.238950 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Oct 2 20:30:03.288949 kernel: hv_netvsc 000d3ab2-7eec-000d-3ab2-7eec000d3ab2 eth0: VF slot 1 added Oct 2 20:30:03.299105 kernel: hv_vmbus: registering driver hv_pci Oct 2 20:30:03.304953 kernel: hv_pci 8ef4f928-421b-4da8-b304-647b12dd37c7: PCI VMBus probing: Using version 0x10004 Oct 2 20:30:03.316695 kernel: hv_pci 8ef4f928-421b-4da8-b304-647b12dd37c7: PCI host bridge to bus 421b:00 Oct 2 20:30:03.316836 kernel: pci_bus 421b:00: root bus resource [mem 0xfe0000000-0xfe00fffff window] Oct 2 20:30:03.316975 kernel: pci_bus 421b:00: No busn resource found for root bus, will use [bus 00-ff] Oct 2 20:30:03.327194 kernel: pci 421b:00:02.0: [15b3:1016] type 00 class 0x020000 Oct 2 20:30:03.336146 kernel: pci 421b:00:02.0: reg 0x10: [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:30:03.351374 kernel: pci 421b:00:02.0: enabling Extended Tags Oct 2 20:30:03.365023 kernel: pci 421b:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at 421b:00:02.0 (capable of 63.008 Gb/s with 8.0 GT/s PCIe x8 link) Oct 2 20:30:03.373874 kernel: pci_bus 421b:00: busn_res: [bus 00-ff] end is updated to 00 Oct 2 20:30:03.374025 kernel: pci 421b:00:02.0: BAR 0: assigned [mem 0xfe0000000-0xfe00fffff 64bit pref] Oct 2 20:30:03.475955 kernel: mlx5_core 421b:00:02.0: firmware version: 14.30.1224 Oct 2 20:30:03.557310 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:30:03.607947 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by (udev-worker) (440) Oct 2 20:30:03.628274 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:30:03.639944 kernel: mlx5_core 421b:00:02.0: MLX5E: StrdRq(0) RqSz(1024) StrdSz(256) RxCqeCmprss(0) Oct 2 20:30:03.695574 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:30:03.706901 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:30:03.709925 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:30:03.716779 systemd[1]: Starting disk-uuid.service... Oct 2 20:30:03.814768 kernel: mlx5_core 421b:00:02.0: Supported tc offload range - chains: 1, prios: 1 Oct 2 20:30:03.815027 kernel: mlx5_core 421b:00:02.0: mlx5e_tc_post_act_init:40:(pid 7): firmware level support is missing Oct 2 20:30:03.829288 kernel: hv_netvsc 000d3ab2-7eec-000d-3ab2-7eec000d3ab2 eth0: VF registering: eth1 Oct 2 20:30:03.835162 kernel: mlx5_core 421b:00:02.0 eth1: joined to eth0 Oct 2 20:30:03.851952 kernel: mlx5_core 421b:00:02.0 enP16923s1: renamed from eth1 Oct 2 20:30:04.744951 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Oct 2 20:30:04.745922 disk-uuid[546]: The operation has completed successfully. Oct 2 20:30:04.812233 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:30:04.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:04.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:04.812345 systemd[1]: Finished disk-uuid.service. Oct 2 20:30:04.824633 systemd[1]: Starting verity-setup.service... Oct 2 20:30:04.871964 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:30:05.052695 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:30:05.057031 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:30:05.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.062040 systemd[1]: Finished verity-setup.service. Oct 2 20:30:05.139910 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:30:05.145289 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:30:05.142126 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:30:05.142842 systemd[1]: Starting ignition-setup.service... Oct 2 20:30:05.178707 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:05.178733 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:05.178749 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:05.150431 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:30:05.222683 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:30:05.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.227000 audit: BPF prog-id=9 op=LOAD Oct 2 20:30:05.229167 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:05.242567 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:30:05.258610 systemd-networkd[821]: lo: Link UP Oct 2 20:30:05.259970 systemd-networkd[821]: lo: Gained carrier Oct 2 20:30:05.260693 systemd-networkd[821]: Enumeration completed Oct 2 20:30:05.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.262636 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:05.264671 systemd[1]: Reached target network.target. Oct 2 20:30:05.269339 systemd[1]: Starting iscsiuio.service... Oct 2 20:30:05.270033 systemd-networkd[821]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:05.283659 systemd[1]: Started iscsiuio.service. Oct 2 20:30:05.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.286472 systemd[1]: Starting iscsid.service... Oct 2 20:30:05.294946 iscsid[830]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:30:05.294946 iscsid[830]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:30:05.294946 iscsid[830]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:30:05.294946 iscsid[830]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:30:05.294946 iscsid[830]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:30:05.294946 iscsid[830]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:30:05.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.293639 systemd[1]: Started iscsid.service. Oct 2 20:30:05.324901 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:30:05.335334 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:30:05.342998 kernel: mlx5_core 421b:00:02.0 enP16923s1: Link up Oct 2 20:30:05.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.343045 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:30:05.345097 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:30:05.347242 systemd[1]: Reached target remote-fs.target. Oct 2 20:30:05.349961 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:30:05.361056 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:30:05.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.418162 kernel: hv_netvsc 000d3ab2-7eec-000d-3ab2-7eec000d3ab2 eth0: Data path switched to VF: enP16923s1 Oct 2 20:30:05.418424 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:30:05.418813 systemd-networkd[821]: enP16923s1: Link UP Oct 2 20:30:05.420857 systemd-networkd[821]: eth0: Link UP Oct 2 20:30:05.421080 systemd-networkd[821]: eth0: Gained carrier Oct 2 20:30:05.425476 systemd-networkd[821]: enP16923s1: Gained carrier Oct 2 20:30:05.428752 systemd[1]: Finished ignition-setup.service. Oct 2 20:30:05.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:05.433234 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:30:05.459003 systemd-networkd[821]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:07.119135 systemd-networkd[821]: eth0: Gained IPv6LL Oct 2 20:30:08.197069 ignition[845]: Ignition 2.14.0 Oct 2 20:30:08.197088 ignition[845]: Stage: fetch-offline Oct 2 20:30:08.197176 ignition[845]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:08.197236 ignition[845]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:08.226158 ignition[845]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:08.289049 ignition[845]: parsed url from cmdline: "" Oct 2 20:30:08.289067 ignition[845]: no config URL provided Oct 2 20:30:08.289086 ignition[845]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:30:08.309652 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:30:08.309691 kernel: audit: type=1130 audit(1696278608.294:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.290510 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:30:08.289111 ignition[845]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:30:08.311469 systemd[1]: Starting ignition-fetch.service... Oct 2 20:30:08.289126 ignition[845]: failed to fetch config: resource requires networking Oct 2 20:30:08.289462 ignition[845]: Ignition finished successfully Oct 2 20:30:08.322311 ignition[851]: Ignition 2.14.0 Oct 2 20:30:08.324233 ignition[851]: Stage: fetch Oct 2 20:30:08.324381 ignition[851]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:08.324407 ignition[851]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:08.332159 ignition[851]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:08.332322 ignition[851]: parsed url from cmdline: "" Oct 2 20:30:08.332326 ignition[851]: no config URL provided Oct 2 20:30:08.332331 ignition[851]: reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:30:08.332338 ignition[851]: no config at "/usr/lib/ignition/user.ign" Oct 2 20:30:08.332370 ignition[851]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Oct 2 20:30:08.353749 ignition[851]: GET result: OK Oct 2 20:30:08.353770 ignition[851]: failed to retrieve userdata from IMDS, falling back to custom data: not a config (empty) Oct 2 20:30:08.511411 ignition[851]: opening config device: "/dev/sr0" Oct 2 20:30:08.511825 ignition[851]: getting drive status for "/dev/sr0" Oct 2 20:30:08.511895 ignition[851]: drive status: OK Oct 2 20:30:08.511955 ignition[851]: mounting config device Oct 2 20:30:08.511969 ignition[851]: op(1): [started] mounting "/dev/sr0" at "/tmp/ignition-azure3346188115" Oct 2 20:30:08.537941 kernel: UDF-fs: INFO Mounting volume 'UDF Volume', timestamp 2023/10/03 00:00 (1000) Oct 2 20:30:08.538267 ignition[851]: op(1): [finished] mounting "/dev/sr0" at "/tmp/ignition-azure3346188115" Oct 2 20:30:08.538275 ignition[851]: checking for config drive Oct 2 20:30:08.540751 systemd[1]: tmp-ignition\x2dazure3346188115.mount: Deactivated successfully. Oct 2 20:30:08.538590 ignition[851]: reading config Oct 2 20:30:08.538996 ignition[851]: op(2): [started] unmounting "/dev/sr0" at "/tmp/ignition-azure3346188115" Oct 2 20:30:08.539080 ignition[851]: op(2): [finished] unmounting "/dev/sr0" at "/tmp/ignition-azure3346188115" Oct 2 20:30:08.539093 ignition[851]: config has been read from custom data Oct 2 20:30:08.539163 ignition[851]: parsing config with SHA512: c4e1435583b63f6498bd32c42078e5b5c64bd612b79a8d284de26d963722a3a1859f599fd3a5b8c34cac1cc809f1a5705c8dc5f84845ffe78336968441038b3c Oct 2 20:30:08.572663 unknown[851]: fetched base config from "system" Oct 2 20:30:08.574002 unknown[851]: fetched base config from "system" Oct 2 20:30:08.574745 ignition[851]: fetch: fetch complete Oct 2 20:30:08.574013 unknown[851]: fetched user config from "azure" Oct 2 20:30:08.574750 ignition[851]: fetch: fetch passed Oct 2 20:30:08.574789 ignition[851]: Ignition finished successfully Oct 2 20:30:08.585213 systemd[1]: Finished ignition-fetch.service. Oct 2 20:30:08.586000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.600956 kernel: audit: type=1130 audit(1696278608.586:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.600085 systemd[1]: Starting ignition-kargs.service... Oct 2 20:30:08.610827 ignition[859]: Ignition 2.14.0 Oct 2 20:30:08.610837 ignition[859]: Stage: kargs Oct 2 20:30:08.610985 ignition[859]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:08.611018 ignition[859]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:08.621322 ignition[859]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:08.625097 ignition[859]: kargs: kargs passed Oct 2 20:30:08.625162 ignition[859]: Ignition finished successfully Oct 2 20:30:08.629206 systemd[1]: Finished ignition-kargs.service. Oct 2 20:30:08.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.641716 ignition[865]: Ignition 2.14.0 Oct 2 20:30:08.646072 kernel: audit: type=1130 audit(1696278608.632:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.634049 systemd[1]: Starting ignition-disks.service... Oct 2 20:30:08.641723 ignition[865]: Stage: disks Oct 2 20:30:08.641825 ignition[865]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:08.641849 ignition[865]: parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:08.656783 ignition[865]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:08.660574 ignition[865]: disks: disks passed Oct 2 20:30:08.660614 ignition[865]: Ignition finished successfully Oct 2 20:30:08.663494 systemd[1]: Finished ignition-disks.service. Oct 2 20:30:08.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.668071 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:30:08.684250 kernel: audit: type=1130 audit(1696278608.667:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.684347 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:30:08.688384 systemd[1]: Reached target local-fs.target. Oct 2 20:30:08.692147 systemd[1]: Reached target sysinit.target. Oct 2 20:30:08.695743 systemd[1]: Reached target basic.target. Oct 2 20:30:08.700114 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:30:08.746887 systemd-fsck[873]: ROOT: clean, 603/7326000 files, 481068/7359488 blocks Oct 2 20:30:08.752613 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:30:08.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.758202 systemd[1]: Mounting sysroot.mount... Oct 2 20:30:08.773120 kernel: audit: type=1130 audit(1696278608.757:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:08.784960 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:30:08.785494 systemd[1]: Mounted sysroot.mount. Oct 2 20:30:08.787192 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:30:08.811581 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:30:08.817329 systemd[1]: Starting flatcar-metadata-hostname.service... Oct 2 20:30:08.823000 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:30:08.823039 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:30:08.832410 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:30:08.858432 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:30:08.861579 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:30:08.878952 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/sda6 scanned by mount (883) Oct 2 20:30:08.878991 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:08.885153 initrd-setup-root[888]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:30:08.894496 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:08.894516 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:08.898126 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:30:08.905381 initrd-setup-root[914]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:30:08.948596 initrd-setup-root[922]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:30:08.955644 initrd-setup-root[930]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:30:09.388339 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:30:09.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.391798 systemd[1]: Starting ignition-mount.service... Oct 2 20:30:09.414865 kernel: audit: type=1130 audit(1696278609.390:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.406585 systemd[1]: Starting sysroot-boot.service... Oct 2 20:30:09.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.432394 systemd[1]: Finished sysroot-boot.service. Oct 2 20:30:09.449560 kernel: audit: type=1130 audit(1696278609.433:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.449591 ignition[952]: INFO : Ignition 2.14.0 Oct 2 20:30:09.449591 ignition[952]: INFO : Stage: mount Oct 2 20:30:09.449591 ignition[952]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:09.449591 ignition[952]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:09.449591 ignition[952]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:09.476534 kernel: audit: type=1130 audit(1696278609.457:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:09.454503 systemd[1]: Finished ignition-mount.service. Oct 2 20:30:09.478549 ignition[952]: INFO : mount: mount passed Oct 2 20:30:09.478549 ignition[952]: INFO : Ignition finished successfully Oct 2 20:30:09.539964 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:30:09.540075 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:30:10.122169 coreos-metadata[882]: Oct 02 20:30:10.122 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Oct 2 20:30:10.136129 coreos-metadata[882]: Oct 02 20:30:10.136 INFO Fetch successful Oct 2 20:30:10.171317 coreos-metadata[882]: Oct 02 20:30:10.171 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Oct 2 20:30:10.183520 coreos-metadata[882]: Oct 02 20:30:10.183 INFO Fetch successful Oct 2 20:30:10.198051 coreos-metadata[882]: Oct 02 20:30:10.198 INFO wrote hostname ci-3510.3.0-a-976d86eccd to /sysroot/etc/hostname Oct 2 20:30:10.203414 systemd[1]: Finished flatcar-metadata-hostname.service. Oct 2 20:30:10.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.208942 systemd[1]: Starting ignition-files.service... Oct 2 20:30:10.221497 kernel: audit: type=1130 audit(1696278610.207:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:10.227048 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:30:10.237947 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/sda6 scanned by mount (961) Oct 2 20:30:10.246714 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:30:10.246743 kernel: BTRFS info (device sda6): using free space tree Oct 2 20:30:10.246757 kernel: BTRFS info (device sda6): has skinny extents Oct 2 20:30:10.255736 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:30:10.268761 ignition[980]: INFO : Ignition 2.14.0 Oct 2 20:30:10.268761 ignition[980]: INFO : Stage: files Oct 2 20:30:10.272755 ignition[980]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:10.272755 ignition[980]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:10.285524 ignition[980]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:10.300853 ignition[980]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:30:10.303923 ignition[980]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:30:10.303923 ignition[980]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:30:10.362264 ignition[980]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:30:10.366253 ignition[980]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:30:10.369750 unknown[980]: wrote ssh authorized keys file for user: core Oct 2 20:30:10.372541 ignition[980]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:30:10.372541 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:30:10.372541 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 20:30:10.916506 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Oct 2 20:30:11.551687 ignition[980]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 20:30:11.561339 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:30:11.561339 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:30:11.561339 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:30:11.838921 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Oct 2 20:30:11.924021 ignition[980]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 20:30:11.932359 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:30:11.932359 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:30:11.932359 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:30:12.074986 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Oct 2 20:30:14.104921 ignition[980]: DEBUG : files: createFilesystemsFiles: createFiles: op(5): file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 20:30:14.113712 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:30:14.113712 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:30:14.113712 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:30:14.237393 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Oct 2 20:30:18.197121 ignition[980]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 20:30:18.205636 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:30:18.205636 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:30:18.205636 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:30:18.341432 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Oct 2 20:30:20.311902 ignition[980]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 20:30:20.320920 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:30:20.320920 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:30:20.320920 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:30:20.320920 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:30:20.320920 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:30:20.667833 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(9): GET result: OK Oct 2 20:30:21.133755 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:30:21.133755 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(d): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2872688863" Oct 2 20:30:21.151080 ignition[980]: CRITICAL : files: createFilesystemsFiles: createFiles: op(c): op(d): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2872688863": device or resource busy Oct 2 20:30:21.151080 ignition[980]: ERROR : files: createFilesystemsFiles: createFiles: op(c): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2872688863", trying btrfs: device or resource busy Oct 2 20:30:21.151080 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2872688863" Oct 2 20:30:21.210392 kernel: BTRFS info: devid 1 device path /dev/sda6 changed to /dev/disk/by-label/OEM scanned by ignition (985) Oct 2 20:30:21.210414 kernel: audit: type=1130 audit(1696278621.192:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(e): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2872688863" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [started] unmounting "/mnt/oem2872688863" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): op(f): [finished] unmounting "/mnt/oem2872688863" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/systemd/system/waagent.service" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(11): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2932295998" Oct 2 20:30:21.210462 ignition[980]: CRITICAL : files: createFilesystemsFiles: createFiles: op(10): op(11): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2932295998": device or resource busy Oct 2 20:30:21.210462 ignition[980]: ERROR : files: createFilesystemsFiles: createFiles: op(10): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2932295998", trying btrfs: device or resource busy Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2932295998" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(12): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2932295998" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [started] unmounting "/mnt/oem2932295998" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): op(13): [finished] unmounting "/mnt/oem2932295998" Oct 2 20:30:21.210462 ignition[980]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:30:21.210462 ignition[980]: INFO : files: op(14): [started] processing unit "waagent.service" Oct 2 20:30:21.210462 ignition[980]: INFO : files: op(14): [finished] processing unit "waagent.service" Oct 2 20:30:21.156288 systemd[1]: mnt-oem2872688863.mount: Deactivated successfully. Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(15): [started] processing unit "nvidia.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(15): [finished] processing unit "nvidia.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(16): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(16): op(17): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(16): op(17): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(16): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(18): [started] processing unit "prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(18): op(19): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(18): op(19): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(18): [finished] processing unit "prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1a): [started] setting preset to enabled for "waagent.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1a): [finished] setting preset to enabled for "waagent.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:30:21.237091 ignition[980]: INFO : files: createResultFile: createFiles: op(1e): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:30:21.237091 ignition[980]: INFO : files: createResultFile: createFiles: op(1e): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:30:21.237091 ignition[980]: INFO : files: files passed Oct 2 20:30:21.408569 kernel: audit: type=1130 audit(1696278621.293:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.408607 kernel: audit: type=1130 audit(1696278621.364:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.408633 kernel: audit: type=1131 audit(1696278621.377:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.183191 systemd[1]: mnt-oem2932295998.mount: Deactivated successfully. Oct 2 20:30:21.435208 kernel: audit: type=1130 audit(1696278621.407:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.435234 kernel: audit: type=1131 audit(1696278621.407:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.435396 ignition[980]: INFO : Ignition finished successfully Oct 2 20:30:21.191056 systemd[1]: Finished ignition-files.service. Oct 2 20:30:21.441688 initrd-setup-root-after-ignition[1004]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:30:21.213044 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:30:21.217661 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:30:21.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.226000 systemd[1]: Starting ignition-quench.service... Oct 2 20:30:21.471144 kernel: audit: type=1130 audit(1696278621.456:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.238446 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:30:21.295457 systemd[1]: Reached target ignition-complete.target. Oct 2 20:30:21.350280 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:30:21.359460 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:30:21.359557 systemd[1]: Finished ignition-quench.service. Oct 2 20:30:21.387667 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:30:21.387765 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:30:21.408712 systemd[1]: Reached target initrd-fs.target. Oct 2 20:30:21.419952 systemd[1]: Reached target initrd.target. Oct 2 20:30:21.439735 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:30:21.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.440560 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:30:21.522786 kernel: audit: type=1131 audit(1696278621.497:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.454372 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:30:21.471033 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:30:21.482746 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:30:21.486311 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:30:21.490886 systemd[1]: Stopped target timers.target. Oct 2 20:30:21.494227 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:30:21.494355 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:30:21.498140 systemd[1]: Stopped target initrd.target. Oct 2 20:30:21.501507 systemd[1]: Stopped target basic.target. Oct 2 20:30:21.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.518600 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:30:21.572972 kernel: audit: type=1131 audit(1696278621.556:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.522896 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:30:21.526957 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:30:21.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.529156 systemd[1]: Stopped target remote-fs.target. Oct 2 20:30:21.593365 kernel: audit: type=1131 audit(1696278621.576:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.532910 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:30:21.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.537044 systemd[1]: Stopped target sysinit.target. Oct 2 20:30:21.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.540970 systemd[1]: Stopped target local-fs.target. Oct 2 20:30:21.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.544637 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:30:21.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.624012 ignition[1018]: INFO : Ignition 2.14.0 Oct 2 20:30:21.624012 ignition[1018]: INFO : Stage: umount Oct 2 20:30:21.624012 ignition[1018]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:30:21.624012 ignition[1018]: DEBUG : parsing config with SHA512: 4824fd4a4e57848da530dc2b56e2d3e9f5f19634d1c84ef29f8fc49255520728d0377a861a375d7c8cb5301ed861ff4ede4b440b074b1d6a86e23be9cefc2f63 Oct 2 20:30:21.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.643394 iscsid[830]: iscsid shutting down. Oct 2 20:30:21.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.549092 systemd[1]: Stopped target swap.target. Oct 2 20:30:21.650985 ignition[1018]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Oct 2 20:30:21.650985 ignition[1018]: INFO : umount: umount passed Oct 2 20:30:21.650985 ignition[1018]: INFO : Ignition finished successfully Oct 2 20:30:21.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.552729 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:30:21.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.552862 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:30:21.567610 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:30:21.573050 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:30:21.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.573180 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:30:21.588504 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:30:21.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.588653 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:30:21.593426 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:30:21.593559 systemd[1]: Stopped ignition-files.service. Oct 2 20:30:21.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.597395 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Oct 2 20:30:21.597516 systemd[1]: Stopped flatcar-metadata-hostname.service. Oct 2 20:30:21.602456 systemd[1]: Stopping ignition-mount.service... Oct 2 20:30:21.605413 systemd[1]: Stopping iscsid.service... Oct 2 20:30:21.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.607084 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:30:21.718000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:30:21.607227 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:30:21.610503 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:30:21.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.612370 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:30:21.612548 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:30:21.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.615477 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:30:21.615605 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:30:21.619925 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:30:21.620051 systemd[1]: Stopped iscsid.service. Oct 2 20:30:21.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.626771 systemd[1]: Stopping iscsiuio.service... Oct 2 20:30:21.633841 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:30:21.633950 systemd[1]: Stopped iscsiuio.service. Oct 2 20:30:21.639355 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:30:21.639425 systemd[1]: Stopped ignition-mount.service. Oct 2 20:30:21.644853 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:30:21.644948 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:30:21.647960 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:30:21.648005 systemd[1]: Stopped ignition-disks.service. Oct 2 20:30:21.651108 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:30:21.651152 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:30:21.657877 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:30:21.660082 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:30:21.664829 systemd[1]: Stopped target network.target. Oct 2 20:30:21.668575 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:30:21.668627 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:30:21.672531 systemd[1]: Stopped target paths.target. Oct 2 20:30:21.674635 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:30:21.679102 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:30:21.681343 systemd[1]: Stopped target slices.target. Oct 2 20:30:21.683231 systemd[1]: Stopped target sockets.target. Oct 2 20:30:21.684112 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:30:21.684151 systemd[1]: Closed iscsid.socket. Oct 2 20:30:21.684510 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:30:21.684537 systemd[1]: Closed iscsiuio.socket. Oct 2 20:30:21.684910 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:30:21.684951 systemd[1]: Stopped ignition-setup.service. Oct 2 20:30:21.685662 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:30:21.685983 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:30:21.687407 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 20:30:21.687866 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:30:21.687946 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:30:21.688149 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:30:21.688183 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:30:21.702416 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:30:21.702505 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:30:21.705562 systemd-networkd[821]: eth0: DHCPv6 lease lost Oct 2 20:30:21.762000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:30:21.716063 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:30:21.716162 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:30:21.718863 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:30:21.718902 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:30:21.723804 systemd[1]: Stopping network-cleanup.service... Oct 2 20:30:21.726971 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:30:21.727030 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:30:21.731132 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:30:21.731182 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:30:21.737322 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:30:21.741558 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:30:21.748994 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:30:21.841491 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:30:21.843765 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:30:21.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.848430 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:30:21.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.848508 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:30:21.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.850637 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:30:21.850685 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:30:21.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.853143 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:30:21.853218 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:30:21.858473 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:30:21.858524 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:30:21.862325 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:30:21.862373 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:30:21.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.881395 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:30:21.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.883667 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:30:21.883727 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:30:21.887802 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:30:21.887883 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:30:21.927989 kernel: hv_netvsc 000d3ab2-7eec-000d-3ab2-7eec000d3ab2 eth0: Data path switched from VF: enP16923s1 Oct 2 20:30:21.948779 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:30:21.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:21.949063 systemd[1]: Stopped network-cleanup.service. Oct 2 20:30:21.955796 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:30:21.960806 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:30:21.971541 systemd[1]: Switching root. Oct 2 20:30:21.995257 systemd-journald[183]: Journal stopped Oct 2 20:30:34.421816 systemd-journald[183]: Received SIGTERM from PID 1 (systemd). Oct 2 20:30:34.421841 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:30:34.421855 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:30:34.421864 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:30:34.421874 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:30:34.421882 kernel: SELinux: policy capability open_perms=1 Oct 2 20:30:34.421895 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:30:34.421906 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:30:34.421914 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:30:34.421922 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:30:34.421944 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:30:34.421954 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:30:34.421963 systemd[1]: Successfully loaded SELinux policy in 241.035ms. Oct 2 20:30:34.421975 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.704ms. Oct 2 20:30:34.421991 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:30:34.422001 systemd[1]: Detected virtualization microsoft. Oct 2 20:30:34.422013 systemd[1]: Detected architecture x86-64. Oct 2 20:30:34.422023 systemd[1]: Detected first boot. Oct 2 20:30:34.422036 systemd[1]: Hostname set to . Oct 2 20:30:34.422047 systemd[1]: Initializing machine ID from random generator. Oct 2 20:30:34.422057 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:30:34.422069 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:30:34.422079 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:30:34.422089 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:30:34.422098 kernel: kauditd_printk_skb: 41 callbacks suppressed Oct 2 20:30:34.422109 kernel: audit: type=1334 audit(1696278633.947:89): prog-id=12 op=LOAD Oct 2 20:30:34.422120 kernel: audit: type=1334 audit(1696278633.948:90): prog-id=3 op=UNLOAD Oct 2 20:30:34.422129 kernel: audit: type=1334 audit(1696278633.953:91): prog-id=13 op=LOAD Oct 2 20:30:34.422140 kernel: audit: type=1334 audit(1696278633.962:92): prog-id=14 op=LOAD Oct 2 20:30:34.422148 kernel: audit: type=1334 audit(1696278633.962:93): prog-id=4 op=UNLOAD Oct 2 20:30:34.422158 kernel: audit: type=1334 audit(1696278633.962:94): prog-id=5 op=UNLOAD Oct 2 20:30:34.422169 kernel: audit: type=1334 audit(1696278633.967:95): prog-id=15 op=LOAD Oct 2 20:30:34.422180 kernel: audit: type=1334 audit(1696278633.967:96): prog-id=12 op=UNLOAD Oct 2 20:30:34.422191 kernel: audit: type=1334 audit(1696278633.981:97): prog-id=16 op=LOAD Oct 2 20:30:34.422202 kernel: audit: type=1334 audit(1696278633.990:98): prog-id=17 op=LOAD Oct 2 20:30:34.422212 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:30:34.422223 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:30:34.422232 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:30:34.422245 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:30:34.422257 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:30:34.422269 systemd[1]: Created slice system-getty.slice. Oct 2 20:30:34.422283 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:30:34.422295 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:30:34.422305 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:30:34.422316 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:30:34.422327 systemd[1]: Created slice user.slice. Oct 2 20:30:34.422339 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:30:34.422348 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:30:34.422361 systemd[1]: Set up automount boot.automount. Oct 2 20:30:34.422372 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:30:34.422384 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:30:34.422396 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:30:34.422407 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:30:34.422419 systemd[1]: Reached target integritysetup.target. Oct 2 20:30:34.422428 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:30:34.422441 systemd[1]: Reached target remote-fs.target. Oct 2 20:30:34.422453 systemd[1]: Reached target slices.target. Oct 2 20:30:34.422465 systemd[1]: Reached target swap.target. Oct 2 20:30:34.422476 systemd[1]: Reached target torcx.target. Oct 2 20:30:34.422486 systemd[1]: Reached target veritysetup.target. Oct 2 20:30:34.422498 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:30:34.422508 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:30:34.422520 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:30:34.422535 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:30:34.422544 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:30:34.422557 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:30:34.422567 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:30:34.422579 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:30:34.422589 systemd[1]: Mounting media.mount... Oct 2 20:30:34.422601 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:30:34.422613 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:30:34.422627 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:30:34.422639 systemd[1]: Mounting tmp.mount... Oct 2 20:30:34.422649 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:30:34.422659 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:30:34.422669 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:30:34.422681 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:30:34.422698 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:30:34.422713 systemd[1]: Starting modprobe@drm.service... Oct 2 20:30:34.422723 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:30:34.422739 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:30:34.422757 systemd[1]: Starting modprobe@loop.service... Oct 2 20:30:34.422767 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:30:34.422779 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:30:34.422797 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:30:34.422807 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:30:34.422817 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:30:34.422836 systemd[1]: Stopped systemd-journald.service. Oct 2 20:30:34.422851 systemd[1]: Starting systemd-journald.service... Oct 2 20:30:34.422863 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:30:34.422876 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:30:34.422892 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:30:34.422902 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:30:34.422914 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:30:34.422939 systemd[1]: Stopped verity-setup.service. Oct 2 20:30:34.422950 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:30:34.422969 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:30:34.422990 kernel: loop: module loaded Oct 2 20:30:34.422999 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:30:34.423011 systemd[1]: Mounted media.mount. Oct 2 20:30:34.423036 systemd-journald[1142]: Journal started Oct 2 20:30:34.423087 systemd-journald[1142]: Runtime Journal (/run/log/journal/cbeb572a570e4a658739554e4e9f6773) is 8.0M, max 159.0M, 151.0M free. Oct 2 20:30:23.951000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:30:24.597000 audit[1]: AVC avc: denied { integrity } for pid=1 comm="systemd" lockdown_reason="/dev/mem,kmem,port" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:30:24.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:30:24.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:30:24.610000 audit: BPF prog-id=10 op=LOAD Oct 2 20:30:24.610000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:30:24.610000 audit: BPF prog-id=11 op=LOAD Oct 2 20:30:24.610000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:30:33.947000 audit: BPF prog-id=12 op=LOAD Oct 2 20:30:33.948000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:30:33.953000 audit: BPF prog-id=13 op=LOAD Oct 2 20:30:33.962000 audit: BPF prog-id=14 op=LOAD Oct 2 20:30:33.962000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:30:33.962000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:30:33.967000 audit: BPF prog-id=15 op=LOAD Oct 2 20:30:33.967000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:30:33.981000 audit: BPF prog-id=16 op=LOAD Oct 2 20:30:33.990000 audit: BPF prog-id=17 op=LOAD Oct 2 20:30:33.990000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:30:33.990000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:30:33.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.012000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:30:34.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.324000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.328000 audit: BPF prog-id=18 op=LOAD Oct 2 20:30:34.328000 audit: BPF prog-id=19 op=LOAD Oct 2 20:30:34.328000 audit: BPF prog-id=20 op=LOAD Oct 2 20:30:34.328000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:30:34.328000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:30:34.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.418000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:30:34.418000 audit[1142]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe7b20a440 a2=4000 a3=7ffe7b20a4dc items=0 ppid=1 pid=1142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:34.418000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:30:33.947488 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:30:25.873520 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:30:33.991912 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:30:25.874053 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:30:25.874074 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:30:25.874113 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:30:25.874125 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:30:25.874170 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:30:25.874185 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:30:25.874390 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:30:25.874444 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:30:25.874460 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:30:25.874863 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:30:25.874901 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:30:25.874923 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:30:25.874957 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:30:25.874976 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:30:25.874992 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:30:32.804184 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:32.804448 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:32.804561 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:32.804751 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:30:32.804805 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:30:32.804867 /usr/lib/systemd/system-generators/torcx-generator[1053]: time="2023-10-02T20:30:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:30:34.433071 systemd[1]: Started systemd-journald.service. Oct 2 20:30:34.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.433097 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:30:34.435147 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:30:34.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.446000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.453975 kernel: fuse: init (API version 7.34) Oct 2 20:30:34.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.437223 systemd[1]: Mounted tmp.mount. Oct 2 20:30:34.439290 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:30:34.441666 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:30:34.444087 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:30:34.444253 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:30:34.446680 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:30:34.446830 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:30:34.451308 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:30:34.451485 systemd[1]: Finished modprobe@drm.service. Oct 2 20:30:34.454321 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:30:34.454469 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:30:34.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.457019 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:30:34.457152 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:30:34.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.459542 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:30:34.459672 systemd[1]: Finished modprobe@loop.service. Oct 2 20:30:34.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.462166 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:30:34.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.464881 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:30:34.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.467555 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:30:34.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.470347 systemd[1]: Reached target network-pre.target. Oct 2 20:30:34.473657 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:30:34.477113 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:30:34.479289 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:30:34.492399 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:30:34.495941 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:30:34.498147 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:30:34.499535 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:30:34.501419 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:30:34.502794 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:30:34.506164 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:30:34.511617 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:30:34.515159 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:30:34.538684 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:30:34.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.541340 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:30:34.547206 systemd-journald[1142]: Time spent on flushing to /var/log/journal/cbeb572a570e4a658739554e4e9f6773 is 15.212ms for 1175 entries. Oct 2 20:30:34.547206 systemd-journald[1142]: System Journal (/var/log/journal/cbeb572a570e4a658739554e4e9f6773) is 8.0M, max 2.6G, 2.6G free. Oct 2 20:30:34.615977 systemd-journald[1142]: Received client request to flush runtime journal. Oct 2 20:30:34.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.554336 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:30:34.616420 udevadm[1176]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:30:34.557851 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:30:34.583765 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:30:34.617055 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:30:34.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:34.970657 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:30:35.657285 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:30:35.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:35.660000 audit: BPF prog-id=21 op=LOAD Oct 2 20:30:35.660000 audit: BPF prog-id=22 op=LOAD Oct 2 20:30:35.660000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:30:35.660000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:30:35.661742 systemd[1]: Starting systemd-udevd.service... Oct 2 20:30:35.679033 systemd-udevd[1179]: Using default interface naming scheme 'v252'. Oct 2 20:30:35.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:35.877000 audit: BPF prog-id=23 op=LOAD Oct 2 20:30:35.872564 systemd[1]: Started systemd-udevd.service. Oct 2 20:30:35.879808 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:35.913656 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:30:35.950000 audit: BPF prog-id=24 op=LOAD Oct 2 20:30:35.951000 audit: BPF prog-id=25 op=LOAD Oct 2 20:30:35.951000 audit: BPF prog-id=26 op=LOAD Oct 2 20:30:35.952914 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:30:35.971000 audit[1184]: AVC avc: denied { confidentiality } for pid=1184 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:30:35.978947 kernel: hv_vmbus: registering driver hv_balloon Oct 2 20:30:36.004886 kernel: hv_utils: Registering HyperV Utility Driver Oct 2 20:30:36.005035 kernel: hv_vmbus: registering driver hv_utils Oct 2 20:30:36.005060 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:30:36.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:36.015865 systemd[1]: Started systemd-userdbd.service. Oct 2 20:30:36.029504 kernel: hv_utils: Heartbeat IC version 3.0 Oct 2 20:30:36.029575 kernel: hv_utils: Shutdown IC version 3.2 Oct 2 20:30:36.029607 kernel: hv_utils: TimeSync IC version 4.0 Oct 2 20:30:36.029947 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Oct 2 20:30:36.770018 kernel: hv_vmbus: registering driver hyperv_fb Oct 2 20:30:35.971000 audit[1184]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=559f941cf600 a1=f884 a2=7fa8607aebc5 a3=5 items=10 ppid=1179 pid=1184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:35.971000 audit: CWD cwd="/" Oct 2 20:30:35.971000 audit: PATH item=0 name=(null) inode=15829 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=1 name=(null) inode=15830 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=2 name=(null) inode=15829 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=3 name=(null) inode=15831 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=4 name=(null) inode=15829 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=5 name=(null) inode=15832 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=6 name=(null) inode=15829 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=7 name=(null) inode=15833 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=8 name=(null) inode=15829 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PATH item=9 name=(null) inode=15834 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:30:35.971000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:30:36.801369 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Oct 2 20:30:36.801422 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Oct 2 20:30:36.813817 kernel: Console: switching to colour dummy device 80x25 Oct 2 20:30:36.815006 kernel: Console: switching to colour frame buffer device 128x48 Oct 2 20:30:36.961016 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/sda6 scanned by (udev-worker) (1196) Oct 2 20:30:37.015435 kernel: KVM: vmx: using Hyper-V Enlightened VMCS Oct 2 20:30:37.024378 systemd-networkd[1193]: lo: Link UP Oct 2 20:30:37.024683 systemd-networkd[1193]: lo: Gained carrier Oct 2 20:30:37.025351 systemd-networkd[1193]: Enumeration completed Oct 2 20:30:37.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.025528 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:37.029238 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:30:37.047769 systemd-networkd[1193]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:37.052556 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:30:37.112009 kernel: mlx5_core 421b:00:02.0 enP16923s1: Link up Oct 2 20:30:37.150024 kernel: hv_netvsc 000d3ab2-7eec-000d-3ab2-7eec000d3ab2 eth0: Data path switched to VF: enP16923s1 Oct 2 20:30:37.150268 systemd-networkd[1193]: enP16923s1: Link UP Oct 2 20:30:37.150418 systemd-networkd[1193]: eth0: Link UP Oct 2 20:30:37.150424 systemd-networkd[1193]: eth0: Gained carrier Oct 2 20:30:37.154318 systemd-networkd[1193]: enP16923s1: Gained carrier Oct 2 20:30:37.171369 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:30:37.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.174906 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:30:37.179149 systemd-networkd[1193]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:37.402304 lvm[1257]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:30:37.427920 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:30:37.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.430984 systemd[1]: Reached target cryptsetup.target. Oct 2 20:30:37.434475 systemd[1]: Starting lvm2-activation.service... Oct 2 20:30:37.440364 lvm[1258]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:30:37.460907 systemd[1]: Finished lvm2-activation.service. Oct 2 20:30:37.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.462797 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:30:37.464757 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:30:37.464792 systemd[1]: Reached target local-fs.target. Oct 2 20:30:37.466703 systemd[1]: Reached target machines.target. Oct 2 20:30:37.469771 systemd[1]: Starting ldconfig.service... Oct 2 20:30:37.482477 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:30:37.482680 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:37.483920 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:30:37.487136 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:30:37.490769 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:30:37.493172 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:30:37.493270 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:30:37.494332 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:30:37.796780 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:30:37.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:37.840398 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1260 (bootctl) Oct 2 20:30:37.841854 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:30:38.140329 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:30:38.480212 systemd-networkd[1193]: eth0: Gained IPv6LL Oct 2 20:30:38.485928 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:30:38.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:38.739608 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:30:39.340280 systemd-tmpfiles[1263]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:30:39.371853 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:30:39.372492 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:30:39.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:39.576020 systemd-fsck[1268]: fsck.fat 4.2 (2021-01-31) Oct 2 20:30:39.576020 systemd-fsck[1268]: /dev/sda1: 789 files, 115069/258078 clusters Oct 2 20:30:39.577490 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:30:39.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:39.582592 systemd[1]: Mounting boot.mount... Oct 2 20:30:39.593328 systemd[1]: Mounted boot.mount. Oct 2 20:30:39.608229 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:30:39.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.179507 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:30:40.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.184036 systemd[1]: Starting audit-rules.service... Oct 2 20:30:40.185827 kernel: kauditd_printk_skb: 76 callbacks suppressed Oct 2 20:30:40.185893 kernel: audit: type=1130 audit(1696278640.181:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.200322 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:30:40.204019 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:30:40.209220 systemd[1]: Starting systemd-resolved.service... Oct 2 20:30:40.214359 kernel: audit: type=1334 audit(1696278640.206:161): prog-id=27 op=LOAD Oct 2 20:30:40.206000 audit: BPF prog-id=27 op=LOAD Oct 2 20:30:40.216885 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:30:40.214000 audit: BPF prog-id=28 op=LOAD Oct 2 20:30:40.222113 kernel: audit: type=1334 audit(1696278640.214:162): prog-id=28 op=LOAD Oct 2 20:30:40.225303 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:30:40.259072 kernel: audit: type=1127 audit(1696278640.245:163): pid=1280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.245000 audit[1280]: SYSTEM_BOOT pid=1280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.265139 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:30:40.279466 kernel: audit: type=1130 audit(1696278640.266:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.268009 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:30:40.269586 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:30:40.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.296055 kernel: audit: type=1130 audit(1696278640.280:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.324026 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:30:40.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.339008 kernel: audit: type=1130 audit(1696278640.326:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.355372 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:30:40.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.357793 systemd[1]: Reached target time-set.target. Oct 2 20:30:40.370592 kernel: audit: type=1130 audit(1696278640.356:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:30:40.440798 systemd-resolved[1278]: Positive Trust Anchors: Oct 2 20:30:40.440839 systemd-resolved[1278]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:30:40.440980 systemd-resolved[1278]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:30:40.470000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:30:40.471958 systemd[1]: Finished audit-rules.service. Oct 2 20:30:40.472247 augenrules[1295]: No rules Oct 2 20:30:40.470000 audit[1295]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd63ae37a0 a2=420 a3=0 items=0 ppid=1274 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:40.497677 kernel: audit: type=1305 audit(1696278640.470:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:30:40.497782 kernel: audit: type=1300 audit(1696278640.470:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd63ae37a0 a2=420 a3=0 items=0 ppid=1274 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:30:40.470000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:30:40.546696 systemd-resolved[1278]: Using system hostname 'ci-3510.3.0-a-976d86eccd'. Oct 2 20:30:40.548336 systemd[1]: Started systemd-resolved.service. Oct 2 20:30:40.551214 systemd[1]: Reached target network.target. Oct 2 20:30:40.552858 systemd-timesyncd[1279]: Contacted time server 89.234.64.77:123 (0.flatcar.pool.ntp.org). Oct 2 20:30:40.552909 systemd-timesyncd[1279]: Initial clock synchronization to Mon 2023-10-02 20:30:40.553073 UTC. Oct 2 20:30:40.553620 systemd[1]: Reached target network-online.target. Oct 2 20:30:40.555966 systemd[1]: Reached target nss-lookup.target. Oct 2 20:30:44.792793 ldconfig[1259]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:30:44.802791 systemd[1]: Finished ldconfig.service. Oct 2 20:30:44.806895 systemd[1]: Starting systemd-update-done.service... Oct 2 20:30:44.826811 systemd[1]: Finished systemd-update-done.service. Oct 2 20:30:44.829501 systemd[1]: Reached target sysinit.target. Oct 2 20:30:44.831869 systemd[1]: Started motdgen.path. Oct 2 20:30:44.833827 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:30:44.837032 systemd[1]: Started logrotate.timer. Oct 2 20:30:44.839337 systemd[1]: Started mdadm.timer. Oct 2 20:30:44.841233 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:30:44.843404 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:30:44.843443 systemd[1]: Reached target paths.target. Oct 2 20:30:44.845237 systemd[1]: Reached target timers.target. Oct 2 20:30:44.847565 systemd[1]: Listening on dbus.socket. Oct 2 20:30:44.850433 systemd[1]: Starting docker.socket... Oct 2 20:30:44.864706 systemd[1]: Listening on sshd.socket. Oct 2 20:30:44.867029 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:44.867475 systemd[1]: Listening on docker.socket. Oct 2 20:30:44.869732 systemd[1]: Reached target sockets.target. Oct 2 20:30:44.871892 systemd[1]: Reached target basic.target. Oct 2 20:30:44.874052 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:30:44.874083 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:30:44.875031 systemd[1]: Starting containerd.service... Oct 2 20:30:44.878275 systemd[1]: Starting dbus.service... Oct 2 20:30:44.881020 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:30:44.884268 systemd[1]: Starting extend-filesystems.service... Oct 2 20:30:44.886620 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:30:44.887888 systemd[1]: Starting motdgen.service... Oct 2 20:30:44.891268 systemd[1]: Started nvidia.service. Oct 2 20:30:44.894888 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:30:44.898048 systemd[1]: Starting prepare-critools.service... Oct 2 20:30:44.901131 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:30:44.905967 systemd[1]: Starting sshd-keygen.service... Oct 2 20:30:44.913622 systemd[1]: Starting systemd-logind.service... Oct 2 20:30:44.915848 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:30:44.915931 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:30:44.916518 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:30:44.917327 systemd[1]: Starting update-engine.service... Oct 2 20:30:44.921838 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:30:44.931793 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:30:44.932078 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:30:44.985412 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:30:44.985681 systemd[1]: Finished motdgen.service. Oct 2 20:30:44.990605 extend-filesystems[1306]: Found sda Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda1 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda2 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda3 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found usr Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda4 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda6 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda7 Oct 2 20:30:44.993302 extend-filesystems[1306]: Found sda9 Oct 2 20:30:44.993302 extend-filesystems[1306]: Checking size of /dev/sda9 Oct 2 20:30:45.012210 jq[1305]: false Oct 2 20:30:45.011845 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:30:45.012066 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:30:45.012782 jq[1319]: true Oct 2 20:30:45.044724 env[1332]: time="2023-10-02T20:30:45.044345377Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:30:45.050401 jq[1337]: true Oct 2 20:30:45.065658 systemd-logind[1315]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:30:45.075703 systemd-logind[1315]: New seat seat0. Oct 2 20:30:45.078084 tar[1322]: ./ Oct 2 20:30:45.078084 tar[1322]: ./macvlan Oct 2 20:30:45.081043 tar[1323]: crictl Oct 2 20:30:45.088698 extend-filesystems[1306]: Old size kept for /dev/sda9 Oct 2 20:30:45.096336 extend-filesystems[1306]: Found sr0 Oct 2 20:30:45.108623 env[1332]: time="2023-10-02T20:30:45.102316018Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:30:45.108623 env[1332]: time="2023-10-02T20:30:45.102458220Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.097807 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:30:45.097962 systemd[1]: Finished extend-filesystems.service. Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115289506Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115330706Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115604010Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115625911Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115643011Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115655811Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115739512Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.115973216Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.116169418Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:30:45.116734 env[1332]: time="2023-10-02T20:30:45.116190319Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:30:45.117169 env[1332]: time="2023-10-02T20:30:45.116248820Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:30:45.117169 env[1332]: time="2023-10-02T20:30:45.116264720Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:30:45.122834 dbus-daemon[1304]: [system] SELinux support is enabled Oct 2 20:30:45.122980 systemd[1]: Started dbus.service. Oct 2 20:30:45.127448 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:30:45.127474 systemd[1]: Reached target system-config.target. Oct 2 20:30:45.129765 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:30:45.129789 systemd[1]: Reached target user-config.target. Oct 2 20:30:45.132956 systemd[1]: Started systemd-logind.service. Oct 2 20:30:45.135490 dbus-daemon[1304]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147455172Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147527573Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147547974Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147604374Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147626975Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147646075Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147675275Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147693176Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147714176Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147745376Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147763277Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.147897 env[1332]: time="2023-10-02T20:30:45.147781577Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:30:45.148611 env[1332]: time="2023-10-02T20:30:45.148419786Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:30:45.148611 env[1332]: time="2023-10-02T20:30:45.148566388Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:30:45.149100 env[1332]: time="2023-10-02T20:30:45.149065996Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:30:45.149226 env[1332]: time="2023-10-02T20:30:45.149212198Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149331 env[1332]: time="2023-10-02T20:30:45.149315299Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:30:45.149478 env[1332]: time="2023-10-02T20:30:45.149451001Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149564 env[1332]: time="2023-10-02T20:30:45.149536902Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149642 env[1332]: time="2023-10-02T20:30:45.149630504Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149719 env[1332]: time="2023-10-02T20:30:45.149691205Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149800 env[1332]: time="2023-10-02T20:30:45.149787006Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149884 env[1332]: time="2023-10-02T20:30:45.149872407Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.149962 env[1332]: time="2023-10-02T20:30:45.149948408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.150056 env[1332]: time="2023-10-02T20:30:45.150041310Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.150151 env[1332]: time="2023-10-02T20:30:45.150139611Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:30:45.150390 env[1332]: time="2023-10-02T20:30:45.150373115Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.151972 env[1332]: time="2023-10-02T20:30:45.151949237Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.152091 env[1332]: time="2023-10-02T20:30:45.152073939Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.152184 env[1332]: time="2023-10-02T20:30:45.152169141Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:30:45.152276 env[1332]: time="2023-10-02T20:30:45.152257142Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:30:45.152351 env[1332]: time="2023-10-02T20:30:45.152338343Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:30:45.152449 env[1332]: time="2023-10-02T20:30:45.152435044Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:30:45.158088 env[1332]: time="2023-10-02T20:30:45.158057126Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:30:45.162098 env[1332]: time="2023-10-02T20:30:45.161978183Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.169534792Z" level=info msg="Connect containerd service" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.169604393Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170402205Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170532907Z" level=info msg="Start subscribing containerd event" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170587108Z" level=info msg="Start recovering state" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170655209Z" level=info msg="Start event monitor" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170676909Z" level=info msg="Start snapshots syncer" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170688709Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.170698509Z" level=info msg="Start streaming server" Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.171124516Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:30:45.190264 env[1332]: time="2023-10-02T20:30:45.171219617Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:30:45.204578 env[1332]: time="2023-10-02T20:30:45.204553900Z" level=info msg="containerd successfully booted in 0.161715s" Oct 2 20:30:45.204624 systemd[1]: Started containerd.service. Oct 2 20:30:45.207812 tar[1322]: ./static Oct 2 20:30:45.248892 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:30:45.277167 tar[1322]: ./vlan Oct 2 20:30:45.354396 bash[1375]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:30:45.353167 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:30:45.371951 tar[1322]: ./portmap Oct 2 20:30:45.456495 tar[1322]: ./host-local Oct 2 20:30:45.523873 tar[1322]: ./vrf Oct 2 20:30:45.589721 tar[1322]: ./bridge Oct 2 20:30:45.676664 tar[1322]: ./tuning Oct 2 20:30:45.705681 update_engine[1317]: I1002 20:30:45.704953 1317 main.cc:92] Flatcar Update Engine starting Oct 2 20:30:45.734458 tar[1322]: ./firewall Oct 2 20:30:45.806605 systemd[1]: Started update-engine.service. Oct 2 20:30:45.808481 update_engine[1317]: I1002 20:30:45.808380 1317 update_check_scheduler.cc:74] Next update check in 8m43s Oct 2 20:30:45.811702 systemd[1]: Started locksmithd.service. Oct 2 20:30:45.821316 tar[1322]: ./host-device Oct 2 20:30:45.908604 tar[1322]: ./sbr Oct 2 20:30:45.982024 tar[1322]: ./loopback Oct 2 20:30:45.984563 systemd[1]: Finished prepare-critools.service. Oct 2 20:30:46.022846 tar[1322]: ./dhcp Oct 2 20:30:46.122426 tar[1322]: ./ptp Oct 2 20:30:46.164718 tar[1322]: ./ipvlan Oct 2 20:30:46.206245 tar[1322]: ./bandwidth Oct 2 20:30:46.269600 sshd_keygen[1326]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:30:46.284672 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:30:46.298212 systemd[1]: Finished sshd-keygen.service. Oct 2 20:30:46.302174 systemd[1]: Starting issuegen.service... Oct 2 20:30:46.306568 systemd[1]: Started waagent.service. Oct 2 20:30:46.311938 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:30:46.312101 systemd[1]: Finished issuegen.service. Oct 2 20:30:46.315778 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:30:46.333563 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:30:46.337812 systemd[1]: Started getty@tty1.service. Oct 2 20:30:46.341422 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:30:46.344199 systemd[1]: Reached target getty.target. Oct 2 20:30:46.346421 systemd[1]: Reached target multi-user.target. Oct 2 20:30:46.349770 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:30:46.357560 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:30:46.357723 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:30:46.360463 systemd[1]: Startup finished in 785ms (firmware) + 22.515s (loader) + 902ms (kernel) + 21.791s (initrd) + 22.152s (userspace) = 1min 8.148s. Oct 2 20:30:46.793601 login[1424]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:30:46.795086 login[1425]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Oct 2 20:30:46.824125 systemd[1]: Created slice user-500.slice. Oct 2 20:30:46.825936 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:30:46.829402 systemd-logind[1315]: New session 2 of user core. Oct 2 20:30:46.832378 systemd-logind[1315]: New session 1 of user core. Oct 2 20:30:46.844164 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:30:46.845791 systemd[1]: Starting user@500.service... Oct 2 20:30:46.849188 (systemd)[1432]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:30:46.990777 systemd[1432]: Queued start job for default target default.target. Oct 2 20:30:46.991506 systemd[1432]: Reached target paths.target. Oct 2 20:30:46.991701 systemd[1432]: Reached target sockets.target. Oct 2 20:30:46.991837 systemd[1432]: Reached target timers.target. Oct 2 20:30:46.991954 systemd[1432]: Reached target basic.target. Oct 2 20:30:46.992143 systemd[1]: Started user@500.service. Oct 2 20:30:46.992392 systemd[1432]: Reached target default.target. Oct 2 20:30:46.992566 systemd[1432]: Startup finished in 137ms. Oct 2 20:30:46.993764 systemd[1]: Started session-1.scope. Oct 2 20:30:46.994756 systemd[1]: Started session-2.scope. Oct 2 20:30:47.212797 locksmithd[1407]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:30:52.335009 waagent[1419]: 2023-10-02T20:30:52.334891Z INFO Daemon Daemon Azure Linux Agent Version:2.6.0.2 Oct 2 20:30:52.339486 waagent[1419]: 2023-10-02T20:30:52.339411Z INFO Daemon Daemon OS: flatcar 3510.3.0 Oct 2 20:30:52.342235 waagent[1419]: 2023-10-02T20:30:52.342171Z INFO Daemon Daemon Python: 3.9.16 Oct 2 20:30:52.344833 waagent[1419]: 2023-10-02T20:30:52.344761Z INFO Daemon Daemon Run daemon Oct 2 20:30:52.347530 waagent[1419]: 2023-10-02T20:30:52.347295Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='3510.3.0' Oct 2 20:30:52.360006 waagent[1419]: 2023-10-02T20:30:52.359875Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:30:52.368694 waagent[1419]: 2023-10-02T20:30:52.368593Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:30:52.374069 waagent[1419]: 2023-10-02T20:30:52.374008Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:30:52.384502 waagent[1419]: 2023-10-02T20:30:52.374255Z INFO Daemon Daemon Using waagent for provisioning Oct 2 20:30:52.384502 waagent[1419]: 2023-10-02T20:30:52.376063Z INFO Daemon Daemon Activate resource disk Oct 2 20:30:52.384502 waagent[1419]: 2023-10-02T20:30:52.376868Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Oct 2 20:30:52.384502 waagent[1419]: 2023-10-02T20:30:52.384431Z INFO Daemon Daemon Found device: None Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.384715Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.385505Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.387054Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.387980Z INFO Daemon Daemon Running default provisioning handler Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.397052Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 1. Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.399721Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.400639Z INFO Daemon Daemon cloud-init is enabled: False Oct 2 20:30:52.413118 waagent[1419]: 2023-10-02T20:30:52.401510Z INFO Daemon Daemon Copying ovf-env.xml Oct 2 20:30:52.422013 waagent[1419]: 2023-10-02T20:30:52.420433Z INFO Daemon Daemon Successfully mounted dvd Oct 2 20:30:52.531127 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Oct 2 20:30:52.548277 waagent[1419]: 2023-10-02T20:30:52.548155Z INFO Daemon Daemon Detect protocol endpoint Oct 2 20:30:52.551685 waagent[1419]: 2023-10-02T20:30:52.551612Z INFO Daemon Daemon Clean protocol and wireserver endpoint Oct 2 20:30:52.555276 waagent[1419]: 2023-10-02T20:30:52.555209Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Oct 2 20:30:52.558726 waagent[1419]: 2023-10-02T20:30:52.558663Z INFO Daemon Daemon Test for route to 168.63.129.16 Oct 2 20:30:52.568745 waagent[1419]: 2023-10-02T20:30:52.561687Z INFO Daemon Daemon Route to 168.63.129.16 exists Oct 2 20:30:52.568745 waagent[1419]: 2023-10-02T20:30:52.564497Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Oct 2 20:30:52.672545 waagent[1419]: 2023-10-02T20:30:52.672473Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Oct 2 20:30:52.677251 waagent[1419]: 2023-10-02T20:30:52.677203Z INFO Daemon Daemon Wire protocol version:2012-11-30 Oct 2 20:30:52.680071 waagent[1419]: 2023-10-02T20:30:52.680018Z INFO Daemon Daemon Server preferred version:2015-04-05 Oct 2 20:30:53.228423 waagent[1419]: 2023-10-02T20:30:53.228273Z INFO Daemon Daemon Initializing goal state during protocol detection Oct 2 20:30:53.237032 waagent[1419]: 2023-10-02T20:30:53.236946Z INFO Daemon Daemon Forcing an update of the goal state.. Oct 2 20:30:53.242465 waagent[1419]: 2023-10-02T20:30:53.237337Z INFO Daemon Daemon Fetching goal state [incarnation 1] Oct 2 20:30:53.313607 waagent[1419]: 2023-10-02T20:30:53.313491Z INFO Daemon Daemon Found private key matching thumbprint DEED6E241AC538C1D56D3AD881E265DB501F3219 Oct 2 20:30:53.318572 waagent[1419]: 2023-10-02T20:30:53.318504Z INFO Daemon Daemon Certificate with thumbprint 8592F291658F0D4EB28CFD2258B07279F7329CC5 has no matching private key. Oct 2 20:30:53.323982 waagent[1419]: 2023-10-02T20:30:53.323917Z INFO Daemon Daemon Fetch goal state completed Oct 2 20:30:53.365243 waagent[1419]: 2023-10-02T20:30:53.365162Z INFO Daemon Daemon Fetched new vmSettings [correlation ID: 49f4f7b7-1f37-4cbb-8828-d5f43d5ef97e New eTag: 9486845609990083369] Oct 2 20:30:53.372160 waagent[1419]: 2023-10-02T20:30:53.372080Z INFO Daemon Daemon Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:30:53.383861 waagent[1419]: 2023-10-02T20:30:53.383797Z INFO Daemon Daemon Starting provisioning Oct 2 20:30:53.386775 waagent[1419]: 2023-10-02T20:30:53.386713Z INFO Daemon Daemon Handle ovf-env.xml. Oct 2 20:30:53.389350 waagent[1419]: 2023-10-02T20:30:53.389290Z INFO Daemon Daemon Set hostname [ci-3510.3.0-a-976d86eccd] Oct 2 20:30:53.406308 waagent[1419]: 2023-10-02T20:30:53.406194Z INFO Daemon Daemon Publish hostname [ci-3510.3.0-a-976d86eccd] Oct 2 20:30:53.410136 waagent[1419]: 2023-10-02T20:30:53.410066Z INFO Daemon Daemon Examine /proc/net/route for primary interface Oct 2 20:30:53.413604 waagent[1419]: 2023-10-02T20:30:53.413538Z INFO Daemon Daemon Primary interface is [eth0] Oct 2 20:30:53.427929 systemd[1]: systemd-networkd-wait-online.service: Deactivated successfully. Oct 2 20:30:53.428200 systemd[1]: Stopped systemd-networkd-wait-online.service. Oct 2 20:30:53.428271 systemd[1]: Stopping systemd-networkd-wait-online.service... Oct 2 20:30:53.428580 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:30:53.433040 systemd-networkd[1193]: eth0: DHCPv6 lease lost Oct 2 20:30:53.434328 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:30:53.434471 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:30:53.436764 systemd[1]: Starting systemd-networkd.service... Oct 2 20:30:53.467035 systemd-networkd[1472]: enP16923s1: Link UP Oct 2 20:30:53.467044 systemd-networkd[1472]: enP16923s1: Gained carrier Oct 2 20:30:53.468335 systemd-networkd[1472]: eth0: Link UP Oct 2 20:30:53.468344 systemd-networkd[1472]: eth0: Gained carrier Oct 2 20:30:53.468763 systemd-networkd[1472]: lo: Link UP Oct 2 20:30:53.468772 systemd-networkd[1472]: lo: Gained carrier Oct 2 20:30:53.469157 systemd-networkd[1472]: eth0: Gained IPv6LL Oct 2 20:30:53.470234 systemd-networkd[1472]: Enumeration completed Oct 2 20:30:53.470329 systemd[1]: Started systemd-networkd.service. Oct 2 20:30:53.472373 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:30:53.477010 waagent[1419]: 2023-10-02T20:30:53.474500Z INFO Daemon Daemon Create user account if not exists Oct 2 20:30:53.479580 waagent[1419]: 2023-10-02T20:30:53.479452Z INFO Daemon Daemon User core already exists, skip useradd Oct 2 20:30:53.483576 waagent[1419]: 2023-10-02T20:30:53.483478Z INFO Daemon Daemon Configure sudoer Oct 2 20:30:53.484003 systemd-networkd[1472]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:30:53.494578 waagent[1419]: 2023-10-02T20:30:53.494389Z INFO Daemon Daemon Configure sshd Oct 2 20:30:53.497372 waagent[1419]: 2023-10-02T20:30:53.497305Z INFO Daemon Daemon Deploy ssh public key. Oct 2 20:30:53.513056 systemd-networkd[1472]: eth0: DHCPv4 address 10.200.8.15/24, gateway 10.200.8.1 acquired from 168.63.129.16 Oct 2 20:30:53.516000 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:30:53.531155 waagent[1419]: 2023-10-02T20:30:53.531058Z INFO Daemon Daemon Decode custom data Oct 2 20:30:53.534384 waagent[1419]: 2023-10-02T20:30:53.534323Z INFO Daemon Daemon Save custom data Oct 2 20:30:54.747356 waagent[1419]: 2023-10-02T20:30:54.747250Z INFO Daemon Daemon Provisioning complete Oct 2 20:30:54.762526 waagent[1419]: 2023-10-02T20:30:54.762447Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Oct 2 20:30:54.765974 waagent[1419]: 2023-10-02T20:30:54.765904Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Oct 2 20:30:54.771535 waagent[1419]: 2023-10-02T20:30:54.771470Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.6.0.2 is the most current agent Oct 2 20:30:55.033208 waagent[1481]: 2023-10-02T20:30:55.033039Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 is running as the goal state agent Oct 2 20:30:55.033899 waagent[1481]: 2023-10-02T20:30:55.033834Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:55.034057 waagent[1481]: 2023-10-02T20:30:55.034001Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:55.044859 waagent[1481]: 2023-10-02T20:30:55.044786Z INFO ExtHandler ExtHandler Forcing an update of the goal state.. Oct 2 20:30:55.045027 waagent[1481]: 2023-10-02T20:30:55.044961Z INFO ExtHandler ExtHandler Fetching goal state [incarnation 1] Oct 2 20:30:55.104798 waagent[1481]: 2023-10-02T20:30:55.104673Z INFO ExtHandler ExtHandler Found private key matching thumbprint DEED6E241AC538C1D56D3AD881E265DB501F3219 Oct 2 20:30:55.105029 waagent[1481]: 2023-10-02T20:30:55.104956Z INFO ExtHandler ExtHandler Certificate with thumbprint 8592F291658F0D4EB28CFD2258B07279F7329CC5 has no matching private key. Oct 2 20:30:55.105267 waagent[1481]: 2023-10-02T20:30:55.105215Z INFO ExtHandler ExtHandler Fetch goal state completed Oct 2 20:30:55.117987 waagent[1481]: 2023-10-02T20:30:55.117926Z INFO ExtHandler ExtHandler Fetched new vmSettings [correlation ID: 6f0152b1-5a5b-45fe-8178-bcd9912647cc New eTag: 9486845609990083369] Oct 2 20:30:55.118553 waagent[1481]: 2023-10-02T20:30:55.118496Z INFO ExtHandler ExtHandler Status Blob type 'None' is not valid, assuming BlockBlob Oct 2 20:30:55.205866 waagent[1481]: 2023-10-02T20:30:55.205702Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:30:55.215006 waagent[1481]: 2023-10-02T20:30:55.214918Z INFO ExtHandler ExtHandler WALinuxAgent-2.6.0.2 running as process 1481 Oct 2 20:30:55.218386 waagent[1481]: 2023-10-02T20:30:55.218322Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:30:55.219638 waagent[1481]: 2023-10-02T20:30:55.219581Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:30:55.287687 waagent[1481]: 2023-10-02T20:30:55.287552Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:30:55.288136 waagent[1481]: 2023-10-02T20:30:55.288061Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:30:55.296547 waagent[1481]: 2023-10-02T20:30:55.296490Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:30:55.297028 waagent[1481]: 2023-10-02T20:30:55.296957Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:30:55.298098 waagent[1481]: 2023-10-02T20:30:55.298034Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [False], cgroups enabled [False], python supported: [True] Oct 2 20:30:55.299343 waagent[1481]: 2023-10-02T20:30:55.299282Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:30:55.299922 waagent[1481]: 2023-10-02T20:30:55.299858Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:30:55.300463 waagent[1481]: 2023-10-02T20:30:55.300406Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:55.301261 waagent[1481]: 2023-10-02T20:30:55.301207Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:30:55.301438 waagent[1481]: 2023-10-02T20:30:55.301370Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:55.301506 waagent[1481]: 2023-10-02T20:30:55.301462Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:30:55.302135 waagent[1481]: 2023-10-02T20:30:55.302068Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:55.302463 waagent[1481]: 2023-10-02T20:30:55.302406Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:30:55.302943 waagent[1481]: 2023-10-02T20:30:55.302887Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:30:55.303188 waagent[1481]: 2023-10-02T20:30:55.303138Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:55.303519 waagent[1481]: 2023-10-02T20:30:55.303464Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:30:55.303662 waagent[1481]: 2023-10-02T20:30:55.303603Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:30:55.304316 waagent[1481]: 2023-10-02T20:30:55.304262Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:30:55.304618 waagent[1481]: 2023-10-02T20:30:55.304566Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:30:55.304773 waagent[1481]: 2023-10-02T20:30:55.304714Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:30:55.307696 waagent[1481]: 2023-10-02T20:30:55.307525Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:30:55.307696 waagent[1481]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:30:55.307696 waagent[1481]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:30:55.307696 waagent[1481]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:30:55.307696 waagent[1481]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:55.307696 waagent[1481]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:55.307696 waagent[1481]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:55.324281 waagent[1481]: 2023-10-02T20:30:55.324221Z INFO ExtHandler ExtHandler Checking for agent updates (family: Prod) Oct 2 20:30:55.324923 waagent[1481]: 2023-10-02T20:30:55.324873Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:30:55.326588 waagent[1481]: 2023-10-02T20:30:55.326537Z INFO ExtHandler ExtHandler [PERIODIC] Request failed using the direct channel. Error: 'NoneType' object has no attribute 'getheaders' Oct 2 20:30:55.335122 waagent[1481]: 2023-10-02T20:30:55.335060Z ERROR EnvHandler ExtHandler Failed to get the PID of the DHCP client: invalid literal for int() with base 10: 'MainPID=1472' Oct 2 20:30:55.375415 waagent[1481]: 2023-10-02T20:30:55.375346Z INFO ExtHandler ExtHandler Default channel changed to HostGA channel. Oct 2 20:30:55.421420 waagent[1481]: 2023-10-02T20:30:55.421290Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:30:55.421420 waagent[1481]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:30:55.421420 waagent[1481]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:30:55.421420 waagent[1481]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b2:7e:ec brd ff:ff:ff:ff:ff:ff Oct 2 20:30:55.421420 waagent[1481]: 3: enP16923s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b2:7e:ec brd ff:ff:ff:ff:ff:ff\ altname enP16923p0s2 Oct 2 20:30:55.421420 waagent[1481]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:30:55.421420 waagent[1481]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:30:55.421420 waagent[1481]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:30:55.421420 waagent[1481]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:30:55.421420 waagent[1481]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:30:55.421420 waagent[1481]: 2: eth0 inet6 fe80::20d:3aff:feb2:7eec/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:30:55.573484 waagent[1481]: 2023-10-02T20:30:55.571177Z INFO EnvHandler ExtHandler Successfully added Azure fabric firewall rules Oct 2 20:30:55.576227 waagent[1481]: 2023-10-02T20:30:55.576125Z INFO EnvHandler ExtHandler Firewall rules: Oct 2 20:30:55.576227 waagent[1481]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:55.576227 waagent[1481]: pkts bytes target prot opt in out source destination Oct 2 20:30:55.576227 waagent[1481]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:55.576227 waagent[1481]: pkts bytes target prot opt in out source destination Oct 2 20:30:55.576227 waagent[1481]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:55.576227 waagent[1481]: pkts bytes target prot opt in out source destination Oct 2 20:30:55.576227 waagent[1481]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:30:55.576227 waagent[1481]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:30:55.578658 waagent[1481]: 2023-10-02T20:30:55.578590Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Oct 2 20:30:55.800484 waagent[1481]: 2023-10-02T20:30:55.800409Z INFO ExtHandler ExtHandler Agent WALinuxAgent-2.6.0.2 discovered update WALinuxAgent-2.10.0.3 -- exiting Oct 2 20:30:56.776377 waagent[1419]: 2023-10-02T20:30:56.776209Z INFO Daemon Daemon Agent WALinuxAgent-2.6.0.2 launched with command '/usr/share/oem/python/bin/python -u /usr/share/oem/bin/waagent -run-exthandlers' is successfully running Oct 2 20:30:56.783620 waagent[1419]: 2023-10-02T20:30:56.783542Z INFO Daemon Daemon Determined Agent WALinuxAgent-2.10.0.3 to be the latest agent Oct 2 20:30:57.756554 waagent[1522]: 2023-10-02T20:30:57.756444Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.10.0.3) Oct 2 20:30:57.757248 waagent[1522]: 2023-10-02T20:30:57.757180Z INFO ExtHandler ExtHandler OS: flatcar 3510.3.0 Oct 2 20:30:57.757398 waagent[1522]: 2023-10-02T20:30:57.757344Z INFO ExtHandler ExtHandler Python: 3.9.16 Oct 2 20:30:57.766768 waagent[1522]: 2023-10-02T20:30:57.766671Z INFO ExtHandler ExtHandler Distro: flatcar-3510.3.0; OSUtil: CoreOSUtil; AgentService: waagent; Python: 3.9.16; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.20.1; Oct 2 20:30:57.767164 waagent[1522]: 2023-10-02T20:30:57.767109Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:57.767324 waagent[1522]: 2023-10-02T20:30:57.767275Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:57.778230 waagent[1522]: 2023-10-02T20:30:57.778157Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Oct 2 20:30:57.786491 waagent[1522]: 2023-10-02T20:30:57.786428Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.143 Oct 2 20:30:57.787394 waagent[1522]: 2023-10-02T20:30:57.787334Z INFO ExtHandler Oct 2 20:30:57.787542 waagent[1522]: 2023-10-02T20:30:57.787490Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: e79a4bb8-87ee-4dea-b5fe-6306f2aa9b06 eTag: 9486845609990083369 source: Fabric] Oct 2 20:30:57.788237 waagent[1522]: 2023-10-02T20:30:57.788180Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Oct 2 20:30:57.789305 waagent[1522]: 2023-10-02T20:30:57.789245Z INFO ExtHandler Oct 2 20:30:57.789437 waagent[1522]: 2023-10-02T20:30:57.789386Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Oct 2 20:30:57.795475 waagent[1522]: 2023-10-02T20:30:57.795424Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Oct 2 20:30:57.795879 waagent[1522]: 2023-10-02T20:30:57.795831Z WARNING ExtHandler ExtHandler Fetch failed: [HttpError] HTTPS is unavailable and required Oct 2 20:30:57.813754 waagent[1522]: 2023-10-02T20:30:57.813691Z INFO ExtHandler ExtHandler Default channel changed to HostGAPlugin channel. Oct 2 20:30:57.876163 waagent[1522]: 2023-10-02T20:30:57.876048Z INFO ExtHandler Downloaded certificate {'thumbprint': 'DEED6E241AC538C1D56D3AD881E265DB501F3219', 'hasPrivateKey': True} Oct 2 20:30:57.877064 waagent[1522]: 2023-10-02T20:30:57.876973Z INFO ExtHandler Downloaded certificate {'thumbprint': '8592F291658F0D4EB28CFD2258B07279F7329CC5', 'hasPrivateKey': False} Oct 2 20:30:57.877976 waagent[1522]: 2023-10-02T20:30:57.877916Z INFO ExtHandler Fetch goal state completed Oct 2 20:30:57.897960 waagent[1522]: 2023-10-02T20:30:57.897891Z INFO ExtHandler ExtHandler WALinuxAgent-2.10.0.3 running as process 1522 Oct 2 20:30:57.901175 waagent[1522]: 2023-10-02T20:30:57.901117Z INFO ExtHandler ExtHandler Cgroup monitoring is not supported on ['flatcar', '3510.3.0', '', 'Flatcar Container Linux by Kinvolk'] Oct 2 20:30:57.902639 waagent[1522]: 2023-10-02T20:30:57.902581Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Oct 2 20:30:57.907186 waagent[1522]: 2023-10-02T20:30:57.907131Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Oct 2 20:30:57.907527 waagent[1522]: 2023-10-02T20:30:57.907471Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Oct 2 20:30:57.915066 waagent[1522]: 2023-10-02T20:30:57.915011Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Oct 2 20:30:57.915517 waagent[1522]: 2023-10-02T20:30:57.915460Z ERROR ExtHandler ExtHandler Unable to setup the persistent firewall rules: [Errno 30] Read-only file system: '/lib/systemd/system/waagent-network-setup.service' Oct 2 20:30:57.935149 waagent[1522]: 2023-10-02T20:30:57.935049Z INFO ExtHandler ExtHandler Firewall rule to allow DNS TCP request to wireserver for a non root user unavailable. Setting it now. Oct 2 20:30:57.937797 waagent[1522]: 2023-10-02T20:30:57.937698Z INFO ExtHandler ExtHandler Succesfully added firewall rule to allow non root users to do a DNS TCP request to wireserver Oct 2 20:30:57.943085 waagent[1522]: 2023-10-02T20:30:57.943027Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: configuration enabled [True], cgroups enabled [False], python supported: [True] Oct 2 20:30:57.944418 waagent[1522]: 2023-10-02T20:30:57.944360Z INFO ExtHandler ExtHandler Starting env monitor service. Oct 2 20:30:57.945001 waagent[1522]: 2023-10-02T20:30:57.944936Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:57.945163 waagent[1522]: 2023-10-02T20:30:57.945113Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:57.945675 waagent[1522]: 2023-10-02T20:30:57.945620Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Oct 2 20:30:57.945947 waagent[1522]: 2023-10-02T20:30:57.945892Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Oct 2 20:30:57.945947 waagent[1522]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Oct 2 20:30:57.945947 waagent[1522]: eth0 00000000 0108C80A 0003 0 0 1024 00000000 0 0 0 Oct 2 20:30:57.945947 waagent[1522]: eth0 0008C80A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Oct 2 20:30:57.945947 waagent[1522]: eth0 0108C80A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:57.945947 waagent[1522]: eth0 10813FA8 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:57.945947 waagent[1522]: eth0 FEA9FEA9 0108C80A 0007 0 0 1024 FFFFFFFF 0 0 0 Oct 2 20:30:57.948150 waagent[1522]: 2023-10-02T20:30:57.948036Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Oct 2 20:30:57.950635 waagent[1522]: 2023-10-02T20:30:57.950483Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Oct 2 20:30:57.951248 waagent[1522]: 2023-10-02T20:30:57.951164Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Oct 2 20:30:57.951415 waagent[1522]: 2023-10-02T20:30:57.951358Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Oct 2 20:30:57.952306 waagent[1522]: 2023-10-02T20:30:57.952241Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Oct 2 20:30:57.952724 waagent[1522]: 2023-10-02T20:30:57.952665Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Oct 2 20:30:57.955248 waagent[1522]: 2023-10-02T20:30:57.955175Z INFO EnvHandler ExtHandler Configure routes Oct 2 20:30:57.955588 waagent[1522]: 2023-10-02T20:30:57.955534Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Oct 2 20:30:57.959105 waagent[1522]: 2023-10-02T20:30:57.959047Z INFO EnvHandler ExtHandler Gateway:None Oct 2 20:30:57.959349 waagent[1522]: 2023-10-02T20:30:57.959295Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Oct 2 20:30:57.959955 waagent[1522]: 2023-10-02T20:30:57.959897Z INFO MonitorHandler ExtHandler Network interfaces: Oct 2 20:30:57.959955 waagent[1522]: Executing ['ip', '-a', '-o', 'link']: Oct 2 20:30:57.959955 waagent[1522]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Oct 2 20:30:57.959955 waagent[1522]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b2:7e:ec brd ff:ff:ff:ff:ff:ff Oct 2 20:30:57.959955 waagent[1522]: 3: enP16923s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:0d:3a:b2:7e:ec brd ff:ff:ff:ff:ff:ff\ altname enP16923p0s2 Oct 2 20:30:57.959955 waagent[1522]: Executing ['ip', '-4', '-a', '-o', 'address']: Oct 2 20:30:57.959955 waagent[1522]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Oct 2 20:30:57.959955 waagent[1522]: 2: eth0 inet 10.200.8.15/24 metric 1024 brd 10.200.8.255 scope global eth0\ valid_lft forever preferred_lft forever Oct 2 20:30:57.959955 waagent[1522]: Executing ['ip', '-6', '-a', '-o', 'address']: Oct 2 20:30:57.959955 waagent[1522]: 1: lo inet6 ::1/128 scope host \ valid_lft forever preferred_lft forever Oct 2 20:30:57.959955 waagent[1522]: 2: eth0 inet6 fe80::20d:3aff:feb2:7eec/64 scope link \ valid_lft forever preferred_lft forever Oct 2 20:30:57.961293 waagent[1522]: 2023-10-02T20:30:57.961241Z INFO EnvHandler ExtHandler Routes:None Oct 2 20:30:57.970939 waagent[1522]: 2023-10-02T20:30:57.970858Z INFO ExtHandler ExtHandler Downloading agent manifest Oct 2 20:30:58.021159 waagent[1522]: 2023-10-02T20:30:58.021061Z INFO ExtHandler ExtHandler Oct 2 20:30:58.021778 waagent[1522]: 2023-10-02T20:30:58.021717Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 444bc5b2-6718-4b7d-a553-1a69a61b6621 correlation 8ce08e52-3d2b-4443-aff5-4719bf178ab0 created: 2023-10-02T20:29:27.727562Z] Oct 2 20:30:58.025073 waagent[1522]: 2023-10-02T20:30:58.024977Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Oct 2 20:30:58.032964 waagent[1522]: 2023-10-02T20:30:58.032902Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 11 ms] Oct 2 20:30:58.044463 waagent[1522]: 2023-10-02T20:30:58.044403Z INFO EnvHandler ExtHandler Current Firewall rules: Oct 2 20:30:58.044463 waagent[1522]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.044463 waagent[1522]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.044463 waagent[1522]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.044463 waagent[1522]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.044463 waagent[1522]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Oct 2 20:30:58.044463 waagent[1522]: pkts bytes target prot opt in out source destination Oct 2 20:30:58.044463 waagent[1522]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Oct 2 20:30:58.044463 waagent[1522]: 162 18717 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Oct 2 20:30:58.044463 waagent[1522]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Oct 2 20:30:58.059442 waagent[1522]: 2023-10-02T20:30:58.059377Z INFO ExtHandler ExtHandler Looking for existing remote access users. Oct 2 20:30:58.070357 waagent[1522]: 2023-10-02T20:30:58.070297Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.10.0.3 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 8E6E86B8-3E51-44A3-9345-9A8A3E7D87AC;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 1] Oct 2 20:31:24.866557 kernel: hv_balloon: Max. dynamic memory size: 8192 MB Oct 2 20:31:31.551600 update_engine[1317]: I1002 20:31:31.551460 1317 update_attempter.cc:505] Updating boot flags... Oct 2 20:31:34.697963 systemd[1]: Created slice system-sshd.slice. Oct 2 20:31:34.699828 systemd[1]: Started sshd@0-10.200.8.15:22-10.200.12.6:45524.service. Oct 2 20:31:35.530170 sshd[1627]: Accepted publickey for core from 10.200.12.6 port 45524 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:35.531767 sshd[1627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:35.536503 systemd-logind[1315]: New session 3 of user core. Oct 2 20:31:35.537411 systemd[1]: Started session-3.scope. Oct 2 20:31:36.191698 systemd[1]: Started sshd@1-10.200.8.15:22-10.200.12.6:45534.service. Oct 2 20:31:36.868437 sshd[1632]: Accepted publickey for core from 10.200.12.6 port 45534 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:36.870104 sshd[1632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:36.875411 systemd[1]: Started session-4.scope. Oct 2 20:31:36.875848 systemd-logind[1315]: New session 4 of user core. Oct 2 20:31:37.416514 sshd[1632]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:37.419326 systemd[1]: sshd@1-10.200.8.15:22-10.200.12.6:45534.service: Deactivated successfully. Oct 2 20:31:37.420256 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:31:37.420940 systemd-logind[1315]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:31:37.421733 systemd-logind[1315]: Removed session 4. Oct 2 20:31:37.529657 systemd[1]: Started sshd@2-10.200.8.15:22-10.200.12.6:45544.service. Oct 2 20:31:38.414437 sshd[1641]: Accepted publickey for core from 10.200.12.6 port 45544 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:38.416068 sshd[1641]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:38.421420 systemd[1]: Started session-5.scope. Oct 2 20:31:38.422105 systemd-logind[1315]: New session 5 of user core. Oct 2 20:31:38.958716 sshd[1641]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:38.961817 systemd[1]: sshd@2-10.200.8.15:22-10.200.12.6:45544.service: Deactivated successfully. Oct 2 20:31:38.962716 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:31:38.963337 systemd-logind[1315]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:31:38.964080 systemd-logind[1315]: Removed session 5. Oct 2 20:31:39.105376 systemd[1]: Started sshd@3-10.200.8.15:22-10.200.12.6:52346.service. Oct 2 20:31:40.527716 sshd[1647]: Accepted publickey for core from 10.200.12.6 port 52346 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:40.529352 sshd[1647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:40.534897 systemd[1]: Started session-6.scope. Oct 2 20:31:40.535766 systemd-logind[1315]: New session 6 of user core. Oct 2 20:31:41.411385 sshd[1647]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:41.414487 systemd[1]: sshd@3-10.200.8.15:22-10.200.12.6:52346.service: Deactivated successfully. Oct 2 20:31:41.415377 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:31:41.416019 systemd-logind[1315]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:31:41.416725 systemd-logind[1315]: Removed session 6. Oct 2 20:31:41.532006 systemd[1]: Started sshd@4-10.200.8.15:22-10.200.12.6:52350.service. Oct 2 20:31:42.257594 sshd[1653]: Accepted publickey for core from 10.200.12.6 port 52350 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:42.260331 sshd[1653]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:42.265102 systemd[1]: Started session-7.scope. Oct 2 20:31:42.265765 systemd-logind[1315]: New session 7 of user core. Oct 2 20:31:42.899255 sudo[1656]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:31:42.899599 sudo[1656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:42.920174 dbus-daemon[1304]: \xd0\xcdcq\xbdU: received setenforce notice (enforcing=-939412416) Oct 2 20:31:42.921883 sudo[1656]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:43.035316 sshd[1653]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:43.038763 systemd[1]: sshd@4-10.200.8.15:22-10.200.12.6:52350.service: Deactivated successfully. Oct 2 20:31:43.039643 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:31:43.040294 systemd-logind[1315]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:31:43.041092 systemd-logind[1315]: Removed session 7. Oct 2 20:31:43.150354 systemd[1]: Started sshd@5-10.200.8.15:22-10.200.12.6:52354.service. Oct 2 20:31:43.825620 sshd[1660]: Accepted publickey for core from 10.200.12.6 port 52354 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:43.827336 sshd[1660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:43.832907 systemd[1]: Started session-8.scope. Oct 2 20:31:43.833775 systemd-logind[1315]: New session 8 of user core. Oct 2 20:31:44.169744 sudo[1664]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:31:44.170025 sudo[1664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:44.172703 sudo[1664]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:44.177088 sudo[1663]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:31:44.177338 sudo[1663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:44.185665 systemd[1]: Stopping audit-rules.service... Oct 2 20:31:44.195355 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:31:44.195424 kernel: audit: type=1305 audit(1696278704.185:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:31:44.185000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:31:44.188342 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:31:44.195579 auditctl[1667]: No rules Oct 2 20:31:44.188486 systemd[1]: Stopped audit-rules.service. Oct 2 20:31:44.190585 systemd[1]: Starting audit-rules.service... Oct 2 20:31:44.185000 audit[1667]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffd6a700c0 a2=420 a3=0 items=0 ppid=1 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:44.211808 kernel: audit: type=1300 audit(1696278704.185:169): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffd6a700c0 a2=420 a3=0 items=0 ppid=1 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:44.211878 kernel: audit: type=1327 audit(1696278704.185:169): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:31:44.185000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:31:44.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.216934 augenrules[1684]: No rules Oct 2 20:31:44.217618 systemd[1]: Finished audit-rules.service. Oct 2 20:31:44.218471 sudo[1663]: pam_unix(sudo:session): session closed for user root Oct 2 20:31:44.226944 kernel: audit: type=1131 audit(1696278704.187:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.227012 kernel: audit: type=1130 audit(1696278704.216:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.217000 audit[1663]: USER_END pid=1663 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.249737 kernel: audit: type=1106 audit(1696278704.217:172): pid=1663 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.254012 kernel: audit: type=1104 audit(1696278704.217:173): pid=1663 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.217000 audit[1663]: CRED_DISP pid=1663 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.319220 sshd[1660]: pam_unix(sshd:session): session closed for user core Oct 2 20:31:44.319000 audit[1660]: USER_END pid=1660 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:44.322490 systemd[1]: sshd@5-10.200.8.15:22-10.200.12.6:52354.service: Deactivated successfully. Oct 2 20:31:44.323758 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:31:44.324764 systemd-logind[1315]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:31:44.325637 systemd-logind[1315]: Removed session 8. Oct 2 20:31:44.319000 audit[1660]: CRED_DISP pid=1660 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:44.348558 kernel: audit: type=1106 audit(1696278704.319:174): pid=1660 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:44.348620 kernel: audit: type=1104 audit(1696278704.319:175): pid=1660 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:44.348645 kernel: audit: type=1131 audit(1696278704.321:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:52354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.200.8.15:22-10.200.12.6:52354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:44.423775 systemd[1]: Started sshd@6-10.200.8.15:22-10.200.12.6:52358.service. Oct 2 20:31:44.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:52358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.121000 audit[1690]: USER_ACCT pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.123214 sshd[1690]: Accepted publickey for core from 10.200.12.6 port 52358 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:31:45.123000 audit[1690]: CRED_ACQ pid=1690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.123000 audit[1690]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb5560a10 a2=3 a3=0 items=0 ppid=1 pid=1690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:45.123000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:31:45.124852 sshd[1690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:31:45.130290 systemd[1]: Started session-9.scope. Oct 2 20:31:45.130948 systemd-logind[1315]: New session 9 of user core. Oct 2 20:31:45.134000 audit[1690]: USER_START pid=1690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.135000 audit[1692]: CRED_ACQ pid=1692 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:31:45.578000 audit[1693]: USER_ACCT pid=1693 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.578000 audit[1693]: CRED_REFR pid=1693 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:45.579674 sudo[1693]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:31:45.579934 sudo[1693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:31:45.580000 audit[1693]: USER_START pid=1693 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:31:46.699384 systemd[1]: Starting docker.service... Oct 2 20:31:46.735075 env[1708]: time="2023-10-02T20:31:46.735019437Z" level=info msg="Starting up" Oct 2 20:31:46.736378 env[1708]: time="2023-10-02T20:31:46.736354066Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:31:46.736509 env[1708]: time="2023-10-02T20:31:46.736496369Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:31:46.736570 env[1708]: time="2023-10-02T20:31:46.736558471Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:31:46.736609 env[1708]: time="2023-10-02T20:31:46.736601372Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:31:46.738500 env[1708]: time="2023-10-02T20:31:46.738482313Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:31:46.738584 env[1708]: time="2023-10-02T20:31:46.738574415Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:31:46.738638 env[1708]: time="2023-10-02T20:31:46.738627616Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:31:46.738678 env[1708]: time="2023-10-02T20:31:46.738670917Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:31:46.744803 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3036818727-merged.mount: Deactivated successfully. Oct 2 20:31:46.842725 env[1708]: time="2023-10-02T20:31:46.842671211Z" level=info msg="Loading containers: start." Oct 2 20:31:46.875000 audit[1736]: NETFILTER_CFG table=nat:6 family=2 entries=2 op=nft_register_chain pid=1736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.875000 audit[1736]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd86d42e80 a2=0 a3=7ffd86d42e6c items=0 ppid=1708 pid=1736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:31:46.877000 audit[1738]: NETFILTER_CFG table=filter:7 family=2 entries=2 op=nft_register_chain pid=1738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.877000 audit[1738]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc67346d50 a2=0 a3=7ffc67346d3c items=0 ppid=1708 pid=1738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:31:46.879000 audit[1740]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1740 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.879000 audit[1740]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffca2913200 a2=0 a3=7ffca29131ec items=0 ppid=1708 pid=1740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.879000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:31:46.881000 audit[1742]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=1742 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.881000 audit[1742]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc5a5e5e20 a2=0 a3=7ffc5a5e5e0c items=0 ppid=1708 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.881000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:31:46.882000 audit[1744]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_rule pid=1744 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.882000 audit[1744]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcf5586cc0 a2=0 a3=7ffcf5586cac items=0 ppid=1708 pid=1744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.882000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:31:46.884000 audit[1746]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_rule pid=1746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.884000 audit[1746]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff226c2f90 a2=0 a3=7fff226c2f7c items=0 ppid=1708 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:31:46.900000 audit[1748]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_chain pid=1748 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.900000 audit[1748]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffda2805c50 a2=0 a3=7ffda2805c3c items=0 ppid=1708 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.900000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:31:46.902000 audit[1750]: NETFILTER_CFG table=filter:13 family=2 entries=1 op=nft_register_rule pid=1750 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.902000 audit[1750]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe9c5d4360 a2=0 a3=7ffe9c5d434c items=0 ppid=1708 pid=1750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:31:46.904000 audit[1752]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=1752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.904000 audit[1752]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd3a4808a0 a2=0 a3=7ffd3a48088c items=0 ppid=1708 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:46.919000 audit[1756]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_unregister_rule pid=1756 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.919000 audit[1756]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff8daaa7f0 a2=0 a3=7fff8daaa7dc items=0 ppid=1708 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.919000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:46.920000 audit[1757]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:46.920000 audit[1757]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff14243b30 a2=0 a3=7fff14243b1c items=0 ppid=1708 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:46.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:46.954146 kernel: Initializing XFRM netlink socket Oct 2 20:31:47.003498 env[1708]: time="2023-10-02T20:31:47.003453955Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:31:47.084000 audit[1765]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1765 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.084000 audit[1765]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd65c06710 a2=0 a3=7ffd65c066fc items=0 ppid=1708 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:31:47.130000 audit[1768]: NETFILTER_CFG table=nat:18 family=2 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.130000 audit[1768]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc9c3fb150 a2=0 a3=7ffc9c3fb13c items=0 ppid=1708 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.130000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:31:47.134000 audit[1771]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.134000 audit[1771]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffa6db1480 a2=0 a3=7fffa6db146c items=0 ppid=1708 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.134000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:31:47.136000 audit[1773]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.136000 audit[1773]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe646ea820 a2=0 a3=7ffe646ea80c items=0 ppid=1708 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:31:47.138000 audit[1775]: NETFILTER_CFG table=nat:21 family=2 entries=2 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.138000 audit[1775]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe9a325270 a2=0 a3=7ffe9a32525c items=0 ppid=1708 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.138000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:31:47.140000 audit[1777]: NETFILTER_CFG table=nat:22 family=2 entries=2 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.140000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff3f4b4e70 a2=0 a3=7fff3f4b4e5c items=0 ppid=1708 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:31:47.142000 audit[1779]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.142000 audit[1779]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc0d8e85c0 a2=0 a3=7ffc0d8e85ac items=0 ppid=1708 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:31:47.144000 audit[1781]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_register_rule pid=1781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.144000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffcea092a20 a2=0 a3=7ffcea092a0c items=0 ppid=1708 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.144000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:31:47.146000 audit[1783]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.146000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd6a5ff380 a2=0 a3=7ffd6a5ff36c items=0 ppid=1708 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.146000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:31:47.147000 audit[1785]: NETFILTER_CFG table=filter:26 family=2 entries=1 op=nft_register_rule pid=1785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.147000 audit[1785]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd88d67cd0 a2=0 a3=7ffd88d67cbc items=0 ppid=1708 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.147000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:31:47.149000 audit[1787]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_rule pid=1787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.149000 audit[1787]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc889f42a0 a2=0 a3=7ffc889f428c items=0 ppid=1708 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.149000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:31:47.151295 systemd-networkd[1472]: docker0: Link UP Oct 2 20:31:47.165000 audit[1791]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_unregister_rule pid=1791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.165000 audit[1791]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffccc326770 a2=0 a3=7ffccc32675c items=0 ppid=1708 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.165000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.166000 audit[1792]: NETFILTER_CFG table=filter:29 family=2 entries=1 op=nft_register_rule pid=1792 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:31:47.166000 audit[1792]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcdf882d00 a2=0 a3=7ffcdf882cec items=0 ppid=1708 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:31:47.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:31:47.168239 env[1708]: time="2023-10-02T20:31:47.168204087Z" level=info msg="Loading containers: done." Oct 2 20:31:47.182190 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3641630775-merged.mount: Deactivated successfully. Oct 2 20:31:47.211165 env[1708]: time="2023-10-02T20:31:47.211105607Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:31:47.211372 env[1708]: time="2023-10-02T20:31:47.211348412Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:31:47.211506 env[1708]: time="2023-10-02T20:31:47.211474315Z" level=info msg="Daemon has completed initialization" Oct 2 20:31:47.240917 systemd[1]: Started docker.service. Oct 2 20:31:47.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:47.250708 env[1708]: time="2023-10-02T20:31:47.250552953Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:31:47.267278 systemd[1]: Reloading. Oct 2 20:31:47.351515 /usr/lib/systemd/system-generators/torcx-generator[1838]: time="2023-10-02T20:31:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:31:47.351979 /usr/lib/systemd/system-generators/torcx-generator[1838]: time="2023-10-02T20:31:47Z" level=info msg="torcx already run" Oct 2 20:31:47.429459 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:31:47.429478 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:31:47.445514 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.514000 audit: BPF prog-id=35 op=LOAD Oct 2 20:31:47.514000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit: BPF prog-id=36 op=LOAD Oct 2 20:31:47.515000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit: BPF prog-id=37 op=LOAD Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.516000 audit: BPF prog-id=38 op=LOAD Oct 2 20:31:47.516000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:31:47.516000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.518000 audit: BPF prog-id=39 op=LOAD Oct 2 20:31:47.518000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit: BPF prog-id=40 op=LOAD Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.519000 audit: BPF prog-id=41 op=LOAD Oct 2 20:31:47.519000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:31:47.519000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.521000 audit: BPF prog-id=42 op=LOAD Oct 2 20:31:47.521000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:31:47.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit: BPF prog-id=43 op=LOAD Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit: BPF prog-id=44 op=LOAD Oct 2 20:31:47.522000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:31:47.522000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.522000 audit: BPF prog-id=45 op=LOAD Oct 2 20:31:47.522000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit: BPF prog-id=46 op=LOAD Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.523000 audit: BPF prog-id=47 op=LOAD Oct 2 20:31:47.523000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:31:47.523000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit: BPF prog-id=48 op=LOAD Oct 2 20:31:47.525000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:31:47.525000 audit: BPF prog-id=49 op=LOAD Oct 2 20:31:47.525000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:31:47.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:47.538579 systemd[1]: Started kubelet.service. Oct 2 20:31:47.607966 kubelet[1899]: E1002 20:31:47.607909 1899 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:31:47.609731 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:31:47.609884 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:31:47.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:51.367565 env[1332]: time="2023-10-02T20:31:51.367516030Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 20:31:52.245133 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4025559229.mount: Deactivated successfully. Oct 2 20:31:54.854973 env[1332]: time="2023-10-02T20:31:54.854914400Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.862260 env[1332]: time="2023-10-02T20:31:54.862220929Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.865941 env[1332]: time="2023-10-02T20:31:54.865910694Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.869935 env[1332]: time="2023-10-02T20:31:54.869904165Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:54.870587 env[1332]: time="2023-10-02T20:31:54.870558577Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 20:31:54.880515 env[1332]: time="2023-10-02T20:31:54.880486552Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 20:31:57.842215 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:31:57.842488 systemd[1]: Stopped kubelet.service. Oct 2 20:31:57.859739 kernel: kauditd_printk_skb: 258 callbacks suppressed Oct 2 20:31:57.859845 kernel: audit: type=1130 audit(1696278717.841:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.858495 systemd[1]: Started kubelet.service. Oct 2 20:31:57.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.888708 kernel: audit: type=1131 audit(1696278717.841:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.888810 kernel: audit: type=1130 audit(1696278717.857:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:31:57.931417 kubelet[1924]: E1002 20:31:57.931368 1924 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:31:57.934466 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:31:57.934627 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:31:57.933000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:57.950020 kernel: audit: type=1131 audit(1696278717.933:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:31:57.982822 env[1332]: time="2023-10-02T20:31:57.982769615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:57.993477 env[1332]: time="2023-10-02T20:31:57.993439588Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:58.000853 env[1332]: time="2023-10-02T20:31:58.000819309Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:58.005396 env[1332]: time="2023-10-02T20:31:58.005360481Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:58.006092 env[1332]: time="2023-10-02T20:31:58.006060192Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 20:31:58.017689 env[1332]: time="2023-10-02T20:31:58.017663776Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 20:31:59.660233 env[1332]: time="2023-10-02T20:31:59.660165457Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.668951 env[1332]: time="2023-10-02T20:31:59.668913492Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.673518 env[1332]: time="2023-10-02T20:31:59.673486763Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.677487 env[1332]: time="2023-10-02T20:31:59.677395123Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:31:59.678471 env[1332]: time="2023-10-02T20:31:59.678437739Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 20:31:59.691351 env[1332]: time="2023-10-02T20:31:59.691322838Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 20:32:00.698220 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3412982674.mount: Deactivated successfully. Oct 2 20:32:01.189478 env[1332]: time="2023-10-02T20:32:01.189421625Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.200366 env[1332]: time="2023-10-02T20:32:01.200323784Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.204889 env[1332]: time="2023-10-02T20:32:01.204851051Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.209638 env[1332]: time="2023-10-02T20:32:01.209604920Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.210071 env[1332]: time="2023-10-02T20:32:01.210041227Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 20:32:01.220456 env[1332]: time="2023-10-02T20:32:01.220423979Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:32:01.704213 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1922095852.mount: Deactivated successfully. Oct 2 20:32:01.726715 env[1332]: time="2023-10-02T20:32:01.726662596Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.733813 env[1332]: time="2023-10-02T20:32:01.733771500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.738089 env[1332]: time="2023-10-02T20:32:01.738044863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.742548 env[1332]: time="2023-10-02T20:32:01.742520128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:01.743124 env[1332]: time="2023-10-02T20:32:01.743074336Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:32:01.753548 env[1332]: time="2023-10-02T20:32:01.753514389Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 20:32:02.606901 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2216531340.mount: Deactivated successfully. Oct 2 20:32:06.748110 env[1332]: time="2023-10-02T20:32:06.747998462Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.757197 env[1332]: time="2023-10-02T20:32:06.757157880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.762837 env[1332]: time="2023-10-02T20:32:06.762772652Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.767846 env[1332]: time="2023-10-02T20:32:06.767811717Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:06.768550 env[1332]: time="2023-10-02T20:32:06.768509826Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 20:32:06.778639 env[1332]: time="2023-10-02T20:32:06.778608956Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 20:32:07.384017 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1839530193.mount: Deactivated successfully. Oct 2 20:32:08.092217 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:32:08.092505 systemd[1]: Stopped kubelet.service. Oct 2 20:32:08.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.094612 systemd[1]: Started kubelet.service. Oct 2 20:32:08.108033 kernel: audit: type=1130 audit(1696278728.091:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.123019 kernel: audit: type=1131 audit(1696278728.091:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.138007 kernel: audit: type=1130 audit(1696278728.094:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:08.163091 kubelet[1956]: E1002 20:32:08.163051 1956 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:32:08.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:32:08.165474 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:32:08.165630 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:32:08.182010 kernel: audit: type=1131 audit(1696278728.164:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:32:08.619178 env[1332]: time="2023-10-02T20:32:08.619132128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:08.634958 env[1332]: time="2023-10-02T20:32:08.634922421Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:08.640958 env[1332]: time="2023-10-02T20:32:08.640879294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:08.649350 env[1332]: time="2023-10-02T20:32:08.649306897Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:08.649967 env[1332]: time="2023-10-02T20:32:08.649931304Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 20:32:11.296899 systemd[1]: Stopped kubelet.service. Oct 2 20:32:11.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:11.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:11.318768 systemd[1]: Reloading. Oct 2 20:32:11.327936 kernel: audit: type=1130 audit(1696278731.296:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:11.328026 kernel: audit: type=1131 audit(1696278731.296:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:11.404077 /usr/lib/systemd/system-generators/torcx-generator[2041]: time="2023-10-02T20:32:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:32:11.404113 /usr/lib/systemd/system-generators/torcx-generator[2041]: time="2023-10-02T20:32:11Z" level=info msg="torcx already run" Oct 2 20:32:11.494718 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:32:11.494736 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:32:11.510545 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.606482 kernel: audit: type=1400 audit(1696278731.578:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.606592 kernel: audit: type=1400 audit(1696278731.578:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.619402 kernel: audit: type=1400 audit(1696278731.578:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632971 kernel: audit: type=1400 audit(1696278731.578:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit: BPF prog-id=50 op=LOAD Oct 2 20:32:11.605000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit: BPF prog-id=51 op=LOAD Oct 2 20:32:11.618000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit: BPF prog-id=52 op=LOAD Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit: BPF prog-id=53 op=LOAD Oct 2 20:32:11.632000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:32:11.632000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.633000 audit: BPF prog-id=54 op=LOAD Oct 2 20:32:11.633000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:32:11.633000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit: BPF prog-id=55 op=LOAD Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.634000 audit: BPF prog-id=56 op=LOAD Oct 2 20:32:11.634000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:32:11.634000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit: BPF prog-id=57 op=LOAD Oct 2 20:32:11.636000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.636000 audit: BPF prog-id=58 op=LOAD Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit: BPF prog-id=59 op=LOAD Oct 2 20:32:11.637000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:32:11.637000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit: BPF prog-id=60 op=LOAD Oct 2 20:32:11.637000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.637000 audit: BPF prog-id=61 op=LOAD Oct 2 20:32:11.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.638000 audit: BPF prog-id=62 op=LOAD Oct 2 20:32:11.638000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:32:11.638000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.639000 audit: BPF prog-id=63 op=LOAD Oct 2 20:32:11.639000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:11.640000 audit: BPF prog-id=64 op=LOAD Oct 2 20:32:11.640000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:32:11.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:11.658079 systemd[1]: Started kubelet.service. Oct 2 20:32:11.709623 kubelet[2104]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:11.709623 kubelet[2104]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:11.710035 kubelet[2104]: I1002 20:32:11.709678 2104 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:32:11.710888 kubelet[2104]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:11.710888 kubelet[2104]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:12.068382 kubelet[2104]: I1002 20:32:12.068280 2104 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:32:12.068382 kubelet[2104]: I1002 20:32:12.068314 2104 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:32:12.068858 kubelet[2104]: I1002 20:32:12.068839 2104 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:32:12.074546 kubelet[2104]: E1002 20:32:12.074517 2104 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.074647 kubelet[2104]: I1002 20:32:12.074567 2104 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:12.076126 kubelet[2104]: I1002 20:32:12.076098 2104 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:32:12.076352 kubelet[2104]: I1002 20:32:12.076334 2104 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:32:12.076436 kubelet[2104]: I1002 20:32:12.076421 2104 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:32:12.076564 kubelet[2104]: I1002 20:32:12.076466 2104 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:32:12.076564 kubelet[2104]: I1002 20:32:12.076485 2104 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:32:12.076653 kubelet[2104]: I1002 20:32:12.076589 2104 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:12.079429 kubelet[2104]: I1002 20:32:12.079412 2104 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:32:12.079507 kubelet[2104]: I1002 20:32:12.079436 2104 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:32:12.079507 kubelet[2104]: I1002 20:32:12.079466 2104 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:32:12.079507 kubelet[2104]: I1002 20:32:12.079492 2104 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:32:12.080435 kubelet[2104]: W1002 20:32:12.080267 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-976d86eccd&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.080435 kubelet[2104]: E1002 20:32:12.080319 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-976d86eccd&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.080435 kubelet[2104]: W1002 20:32:12.080382 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.080435 kubelet[2104]: E1002 20:32:12.080433 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.080653 kubelet[2104]: I1002 20:32:12.080521 2104 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:32:12.080791 kubelet[2104]: W1002 20:32:12.080774 2104 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:32:12.081256 kubelet[2104]: I1002 20:32:12.081234 2104 server.go:1186] "Started kubelet" Oct 2 20:32:12.081000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:12.081000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:12.081000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d2c3c0 a1=c0007a3308 a2=c000d2c390 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.081000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:12.081000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:12.081000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:12.081000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d144c0 a1=c0007a3320 a2=c000d2c450 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.081000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:12.083398 kubelet[2104]: I1002 20:32:12.082798 2104 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:32:12.083398 kubelet[2104]: I1002 20:32:12.082842 2104 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:32:12.083398 kubelet[2104]: I1002 20:32:12.082916 2104 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:32:12.085000 audit[2115]: NETFILTER_CFG table=mangle:30 family=2 entries=2 op=nft_register_chain pid=2115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.085000 audit[2115]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc7a3726e0 a2=0 a3=7ffc7a3726cc items=0 ppid=2104 pid=2115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.085000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:32:12.086351 kubelet[2104]: I1002 20:32:12.086277 2104 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:32:12.087010 kubelet[2104]: I1002 20:32:12.086979 2104 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:32:12.088140 kubelet[2104]: E1002 20:32:12.088059 2104 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a648501c01f7b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 81209211, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 81209211, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.200.8.15:6443/api/v1/namespaces/default/events": dial tcp 10.200.8.15:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:32:12.088803 kubelet[2104]: E1002 20:32:12.088786 2104 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:32:12.088915 kubelet[2104]: E1002 20:32:12.088906 2104 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:32:12.090276 kubelet[2104]: I1002 20:32:12.090262 2104 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:32:12.090462 kubelet[2104]: I1002 20:32:12.090453 2104 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:32:12.090887 kubelet[2104]: W1002 20:32:12.090851 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.091040 kubelet[2104]: E1002 20:32:12.091026 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.091762 kubelet[2104]: E1002 20:32:12.091742 2104 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-976d86eccd?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.091000 audit[2116]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=2116 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.091000 audit[2116]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd6a03d370 a2=0 a3=7ffd6a03d35c items=0 ppid=2104 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:32:12.094000 audit[2118]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2118 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.094000 audit[2118]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff822c58a0 a2=0 a3=7fff822c588c items=0 ppid=2104 pid=2118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:12.096000 audit[2120]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.096000 audit[2120]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffe8e48b00 a2=0 a3=7fffe8e48aec items=0 ppid=2104 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:32:12.145623 kubelet[2104]: I1002 20:32:12.145593 2104 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:32:12.145782 kubelet[2104]: I1002 20:32:12.145762 2104 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:32:12.145885 kubelet[2104]: I1002 20:32:12.145789 2104 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:12.154112 kubelet[2104]: I1002 20:32:12.154083 2104 policy_none.go:49] "None policy: Start" Oct 2 20:32:12.154720 kubelet[2104]: I1002 20:32:12.154700 2104 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:32:12.154806 kubelet[2104]: I1002 20:32:12.154724 2104 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:32:12.160000 audit[2125]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.160000 audit[2125]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd08011240 a2=0 a3=7ffd0801122c items=0 ppid=2104 pid=2125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.160000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:32:12.161000 audit[2126]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2126 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.161000 audit[2126]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd65453720 a2=0 a3=7ffd6545370c items=0 ppid=2104 pid=2126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.161000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:32:12.166421 systemd[1]: Created slice kubepods.slice. Oct 2 20:32:12.170154 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:32:12.172675 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:32:12.178580 kubelet[2104]: I1002 20:32:12.178567 2104 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:32:12.177000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:12.177000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:12.177000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e34300 a1=c0007a3278 a2=c000e342d0 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.177000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:12.179047 kubelet[2104]: I1002 20:32:12.179012 2104 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:32:12.179233 kubelet[2104]: I1002 20:32:12.179213 2104 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:32:12.180638 kubelet[2104]: E1002 20:32:12.180392 2104 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510.3.0-a-976d86eccd\" not found" Oct 2 20:32:12.191646 kubelet[2104]: I1002 20:32:12.191632 2104 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.191970 kubelet[2104]: E1002 20:32:12.191954 2104 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.197000 audit[2130]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2130 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.197000 audit[2130]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc1c943c90 a2=0 a3=7ffc1c943c7c items=0 ppid=2104 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.197000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:32:12.214000 audit[2133]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=2133 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.214000 audit[2133]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff5c1df600 a2=0 a3=7fff5c1df5ec items=0 ppid=2104 pid=2133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:32:12.215000 audit[2134]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_chain pid=2134 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.215000 audit[2134]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdae628ff0 a2=0 a3=7ffdae628fdc items=0 ppid=2104 pid=2134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.215000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:32:12.216000 audit[2135]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2135 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.216000 audit[2135]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2bd1cf00 a2=0 a3=7fff2bd1ceec items=0 ppid=2104 pid=2135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.216000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:32:12.218000 audit[2137]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2137 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.218000 audit[2137]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffec27e22b0 a2=0 a3=7ffec27e229c items=0 ppid=2104 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.218000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:32:12.220000 audit[2139]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_rule pid=2139 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.220000 audit[2139]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffeb30a7360 a2=0 a3=7ffeb30a734c items=0 ppid=2104 pid=2139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.220000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:32:12.222000 audit[2141]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_rule pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.222000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe3f173a70 a2=0 a3=7ffe3f173a5c items=0 ppid=2104 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:32:12.224000 audit[2143]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_rule pid=2143 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.224000 audit[2143]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffed7b46a30 a2=0 a3=7ffed7b46a1c items=0 ppid=2104 pid=2143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.224000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:32:12.227000 audit[2145]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_rule pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.227000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffc512795c0 a2=0 a3=7ffc512795ac items=0 ppid=2104 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.227000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:32:12.228438 kubelet[2104]: I1002 20:32:12.228419 2104 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:32:12.228000 audit[2146]: NETFILTER_CFG table=mangle:45 family=10 entries=2 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.228000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe771757e0 a2=0 a3=7ffe771757cc items=0 ppid=2104 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.228000 audit[2147]: NETFILTER_CFG table=mangle:46 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.228000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe483c0fe0 a2=0 a3=7ffe483c0fcc items=0 ppid=2104 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.228000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:32:12.228000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:32:12.229000 audit[2148]: NETFILTER_CFG table=nat:47 family=2 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.229000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc51b3ee0 a2=0 a3=7ffcc51b3ecc items=0 ppid=2104 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:32:12.230000 audit[2149]: NETFILTER_CFG table=nat:48 family=10 entries=2 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.230000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc44884380 a2=0 a3=7ffc4488436c items=0 ppid=2104 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.230000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:32:12.230000 audit[2150]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:12.230000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdc75d61b0 a2=0 a3=7ffdc75d619c items=0 ppid=2104 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.230000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:32:12.232000 audit[2152]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_rule pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.232000 audit[2152]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc243bb5a0 a2=0 a3=7ffc243bb58c items=0 ppid=2104 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.232000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:32:12.233000 audit[2153]: NETFILTER_CFG table=filter:51 family=10 entries=2 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.233000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe51465640 a2=0 a3=7ffe5146562c items=0 ppid=2104 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.233000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:32:12.235000 audit[2155]: NETFILTER_CFG table=filter:52 family=10 entries=1 op=nft_register_rule pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.235000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffe018001a0 a2=0 a3=7ffe0180018c items=0 ppid=2104 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:32:12.236000 audit[2156]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.236000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe46ce52b0 a2=0 a3=7ffe46ce529c items=0 ppid=2104 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.236000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:32:12.237000 audit[2157]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.237000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb0278570 a2=0 a3=7ffdb027855c items=0 ppid=2104 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:32:12.239000 audit[2159]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2159 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.239000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff4c60e540 a2=0 a3=7fff4c60e52c items=0 ppid=2104 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:32:12.241000 audit[2161]: NETFILTER_CFG table=nat:56 family=10 entries=2 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.241000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffa9ad1f80 a2=0 a3=7fffa9ad1f6c items=0 ppid=2104 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:32:12.243000 audit[2163]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.243000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffed35bebe0 a2=0 a3=7ffed35bebcc items=0 ppid=2104 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:32:12.246000 audit[2165]: NETFILTER_CFG table=nat:58 family=10 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.246000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffc6c1fdb0 a2=0 a3=7fffc6c1fd9c items=0 ppid=2104 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:32:12.248000 audit[2167]: NETFILTER_CFG table=nat:59 family=10 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.248000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffe1999f7d0 a2=0 a3=7ffe1999f7bc items=0 ppid=2104 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:32:12.250496 kubelet[2104]: I1002 20:32:12.250479 2104 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:32:12.250570 kubelet[2104]: I1002 20:32:12.250499 2104 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:32:12.250570 kubelet[2104]: I1002 20:32:12.250524 2104 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:32:12.250655 kubelet[2104]: E1002 20:32:12.250575 2104 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:32:12.251359 kubelet[2104]: W1002 20:32:12.251322 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.251486 kubelet[2104]: E1002 20:32:12.251475 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.251000 audit[2168]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.251000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdab9f9f60 a2=0 a3=7ffdab9f9f4c items=0 ppid=2104 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:32:12.252000 audit[2169]: NETFILTER_CFG table=nat:61 family=10 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.252000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe20666710 a2=0 a3=7ffe206666fc items=0 ppid=2104 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.252000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:32:12.252000 audit[2170]: NETFILTER_CFG table=filter:62 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:12.252000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc99a7c980 a2=0 a3=7ffc99a7c96c items=0 ppid=2104 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:12.252000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:32:12.292945 kubelet[2104]: E1002 20:32:12.292909 2104 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-976d86eccd?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.351325 kubelet[2104]: I1002 20:32:12.351250 2104 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:12.353042 kubelet[2104]: I1002 20:32:12.353022 2104 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:12.354179 kubelet[2104]: I1002 20:32:12.354156 2104 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:12.355470 kubelet[2104]: I1002 20:32:12.355365 2104 status_manager.go:698] "Failed to get status for pod" podUID=48f18c9d906e25449b454ceaf2415ecb pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:12.356879 kubelet[2104]: I1002 20:32:12.356577 2104 status_manager.go:698] "Failed to get status for pod" podUID=09c0b685605e91f154a33cde60dec83c pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:12.358485 kubelet[2104]: I1002 20:32:12.358466 2104 status_manager.go:698] "Failed to get status for pod" podUID=345df1acb65fedd66f665897bad16ee9 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:12.360509 systemd[1]: Created slice kubepods-burstable-pod48f18c9d906e25449b454ceaf2415ecb.slice. Oct 2 20:32:12.372363 systemd[1]: Created slice kubepods-burstable-pod09c0b685605e91f154a33cde60dec83c.slice. Oct 2 20:32:12.381780 systemd[1]: Created slice kubepods-burstable-pod345df1acb65fedd66f665897bad16ee9.slice. Oct 2 20:32:12.391759 kubelet[2104]: I1002 20:32:12.391741 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.391851 kubelet[2104]: I1002 20:32:12.391812 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.391913 kubelet[2104]: I1002 20:32:12.391855 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/48f18c9d906e25449b454ceaf2415ecb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-976d86eccd\" (UID: \"48f18c9d906e25449b454ceaf2415ecb\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.391913 kubelet[2104]: I1002 20:32:12.391886 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.392013 kubelet[2104]: I1002 20:32:12.391917 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.392013 kubelet[2104]: I1002 20:32:12.391951 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.392013 kubelet[2104]: I1002 20:32:12.391981 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.392164 kubelet[2104]: I1002 20:32:12.392026 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.392164 kubelet[2104]: I1002 20:32:12.392058 2104 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.393421 kubelet[2104]: I1002 20:32:12.393404 2104 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.393720 kubelet[2104]: E1002 20:32:12.393703 2104 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.671961 env[1332]: time="2023-10-02T20:32:12.671822152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-976d86eccd,Uid:48f18c9d906e25449b454ceaf2415ecb,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:12.675555 env[1332]: time="2023-10-02T20:32:12.675508993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-976d86eccd,Uid:09c0b685605e91f154a33cde60dec83c,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:12.684007 env[1332]: time="2023-10-02T20:32:12.683955486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-976d86eccd,Uid:345df1acb65fedd66f665897bad16ee9,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:12.694006 kubelet[2104]: E1002 20:32:12.693962 2104 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-976d86eccd?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.795634 kubelet[2104]: I1002 20:32:12.795605 2104 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.796045 kubelet[2104]: E1002 20:32:12.795972 2104 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:12.912018 kubelet[2104]: W1002 20:32:12.911947 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:12.912018 kubelet[2104]: E1002 20:32:12.912021 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.200.8.15:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.438369 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount392781725.mount: Deactivated successfully. Oct 2 20:32:13.440290 kubelet[2104]: W1002 20:32:13.440249 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.440290 kubelet[2104]: E1002 20:32:13.440295 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.200.8.15:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.494935 kubelet[2104]: E1002 20:32:13.494890 2104 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://10.200.8.15:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510.3.0-a-976d86eccd?timeout=10s": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.496820 env[1332]: time="2023-10-02T20:32:13.496768956Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.504489 env[1332]: time="2023-10-02T20:32:13.504456439Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.508590 env[1332]: time="2023-10-02T20:32:13.508556383Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.513861 env[1332]: time="2023-10-02T20:32:13.513825140Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.556984 env[1332]: time="2023-10-02T20:32:13.556936206Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.561605 env[1332]: time="2023-10-02T20:32:13.561559956Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.567359 env[1332]: time="2023-10-02T20:32:13.567322018Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.571169 env[1332]: time="2023-10-02T20:32:13.571139460Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.575336 env[1332]: time="2023-10-02T20:32:13.575305605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.583093 env[1332]: time="2023-10-02T20:32:13.583063389Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.589093 env[1332]: time="2023-10-02T20:32:13.588950852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.598414 kubelet[2104]: I1002 20:32:13.598394 2104 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:13.598746 kubelet[2104]: E1002 20:32:13.598707 2104 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.200.8.15:6443/api/v1/nodes\": dial tcp 10.200.8.15:6443: connect: connection refused" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:13.601260 env[1332]: time="2023-10-02T20:32:13.601144384Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:13.657263 kubelet[2104]: W1002 20:32:13.657220 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-976d86eccd&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.657355 kubelet[2104]: E1002 20:32:13.657268 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.200.8.15:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510.3.0-a-976d86eccd&limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.679573 env[1332]: time="2023-10-02T20:32:13.671023639Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:13.679573 env[1332]: time="2023-10-02T20:32:13.671053840Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:13.679573 env[1332]: time="2023-10-02T20:32:13.671063340Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:13.679573 env[1332]: time="2023-10-02T20:32:13.671215541Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/574ce51bc5e044608b7bd43cbe15b38f907212657ab1ebb56304efde7b30ecc4 pid=2178 runtime=io.containerd.runc.v2 Oct 2 20:32:13.681830 env[1332]: time="2023-10-02T20:32:13.681676254Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:13.681830 env[1332]: time="2023-10-02T20:32:13.681713055Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:13.681830 env[1332]: time="2023-10-02T20:32:13.681728255Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:13.682097 env[1332]: time="2023-10-02T20:32:13.681967157Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/740d63f6789893936650c26401922c7c5830c36a12926d597912b77633a0579c pid=2196 runtime=io.containerd.runc.v2 Oct 2 20:32:13.702443 systemd[1]: Started cri-containerd-574ce51bc5e044608b7bd43cbe15b38f907212657ab1ebb56304efde7b30ecc4.scope. Oct 2 20:32:13.726027 kernel: kauditd_printk_skb: 280 callbacks suppressed Oct 2 20:32:13.726135 kernel: audit: type=1400 audit(1696278733.719:604): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.745134 env[1332]: time="2023-10-02T20:32:13.741231398Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:13.745134 env[1332]: time="2023-10-02T20:32:13.741329299Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:13.745134 env[1332]: time="2023-10-02T20:32:13.741370800Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:13.745134 env[1332]: time="2023-10-02T20:32:13.742127008Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6f1db436c5e21e52d5285024c5acc36e46eb5bfdbe6ca6c7cf88727fa3d2a24 pid=2235 runtime=io.containerd.runc.v2 Oct 2 20:32:13.743218 systemd[1]: Started cri-containerd-740d63f6789893936650c26401922c7c5830c36a12926d597912b77633a0579c.scope. Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.760889 kubelet[2104]: W1002 20:32:13.750711 2104 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.760889 kubelet[2104]: E1002 20:32:13.750743 2104 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.200.8.15:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:13.761063 kernel: audit: type=1400 audit(1696278733.719:605): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.774034 kernel: audit: type=1400 audit(1696278733.719:606): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.785731 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:32:13.785803 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:32:13.785828 kernel: audit: backlog limit exceeded Oct 2 20:32:13.793970 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:32:13.794043 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:32:13.799160 kernel: audit: backlog limit exceeded Oct 2 20:32:13.816122 kernel: audit: type=1400 audit(1696278733.719:607): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.724000 audit: BPF prog-id=65 op=LOAD Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2178 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537346365353162633565303434363038623762643433636265313562 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2178 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537346365353162633565303434363038623762643433636265313562 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.734000 audit: BPF prog-id=66 op=LOAD Oct 2 20:32:13.734000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000025660 items=0 ppid=2178 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537346365353162633565303434363038623762643433636265313562 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit: BPF prog-id=67 op=LOAD Oct 2 20:32:13.739000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0000256a8 items=0 ppid=2178 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537346365353162633565303434363038623762643433636265313562 Oct 2 20:32:13.739000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:32:13.739000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { perfmon } for pid=2209 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit[2209]: AVC avc: denied { bpf } for pid=2209 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.739000 audit: BPF prog-id=68 op=LOAD Oct 2 20:32:13.739000 audit[2209]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000025ab8 items=0 ppid=2178 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537346365353162633565303434363038623762643433636265313562 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.815000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.820231 systemd[1]: Started cri-containerd-e6f1db436c5e21e52d5285024c5acc36e46eb5bfdbe6ca6c7cf88727fa3d2a24.scope. Oct 2 20:32:13.815000 audit[2208]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000310398 items=0 ppid=2196 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734306436336636373839383933393336363530633236343031393232 Oct 2 20:32:13.828000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:32:13.828000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { perfmon } for pid=2208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit[2208]: AVC avc: denied { bpf } for pid=2208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.828000 audit: BPF prog-id=72 op=LOAD Oct 2 20:32:13.828000 audit[2208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003107a8 items=0 ppid=2196 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734306436336636373839383933393336363530633236343031393232 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.840000 audit: BPF prog-id=73 op=LOAD Oct 2 20:32:13.841889 env[1332]: time="2023-10-02T20:32:13.841846485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510.3.0-a-976d86eccd,Uid:48f18c9d906e25449b454ceaf2415ecb,Namespace:kube-system,Attempt:0,} returns sandbox id \"574ce51bc5e044608b7bd43cbe15b38f907212657ab1ebb56304efde7b30ecc4\"" Oct 2 20:32:13.842000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.842000 audit[2248]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663164623433366335653231653532643532383530323463356163 Oct 2 20:32:13.842000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.842000 audit[2248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663164623433366335653231653532643532383530323463356163 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846580 env[1332]: time="2023-10-02T20:32:13.846546536Z" level=info msg="CreateContainer within sandbox \"574ce51bc5e044608b7bd43cbe15b38f907212657ab1ebb56304efde7b30ecc4\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.843000 audit: BPF prog-id=74 op=LOAD Oct 2 20:32:13.843000 audit[2248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002161e0 items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663164623433366335653231653532643532383530323463356163 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.845000 audit: BPF prog-id=75 op=LOAD Oct 2 20:32:13.845000 audit[2248]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000216228 items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663164623433366335653231653532643532383530323463356163 Oct 2 20:32:13.845000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:32:13.845000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { perfmon } for pid=2248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit[2248]: AVC avc: denied { bpf } for pid=2248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.846000 audit: BPF prog-id=76 op=LOAD Oct 2 20:32:13.846000 audit[2248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000216638 items=0 ppid=2235 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663164623433366335653231653532643532383530323463356163 Oct 2 20:32:13.884356 env[1332]: time="2023-10-02T20:32:13.884317744Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510.3.0-a-976d86eccd,Uid:09c0b685605e91f154a33cde60dec83c,Namespace:kube-system,Attempt:0,} returns sandbox id \"e6f1db436c5e21e52d5285024c5acc36e46eb5bfdbe6ca6c7cf88727fa3d2a24\"" Oct 2 20:32:13.884819 env[1332]: time="2023-10-02T20:32:13.884675448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510.3.0-a-976d86eccd,Uid:345df1acb65fedd66f665897bad16ee9,Namespace:kube-system,Attempt:0,} returns sandbox id \"740d63f6789893936650c26401922c7c5830c36a12926d597912b77633a0579c\"" Oct 2 20:32:13.887695 env[1332]: time="2023-10-02T20:32:13.887664781Z" level=info msg="CreateContainer within sandbox \"e6f1db436c5e21e52d5285024c5acc36e46eb5bfdbe6ca6c7cf88727fa3d2a24\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:32:13.887918 env[1332]: time="2023-10-02T20:32:13.887887483Z" level=info msg="CreateContainer within sandbox \"740d63f6789893936650c26401922c7c5830c36a12926d597912b77633a0579c\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:32:13.898265 env[1332]: time="2023-10-02T20:32:13.898230795Z" level=info msg="CreateContainer within sandbox \"574ce51bc5e044608b7bd43cbe15b38f907212657ab1ebb56304efde7b30ecc4\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"afa3cd4cd8609c828d2c85510a0507e00da0877417b805181849357e937b9ac1\"" Oct 2 20:32:13.898723 env[1332]: time="2023-10-02T20:32:13.898694700Z" level=info msg="StartContainer for \"afa3cd4cd8609c828d2c85510a0507e00da0877417b805181849357e937b9ac1\"" Oct 2 20:32:13.915007 systemd[1]: Started cri-containerd-afa3cd4cd8609c828d2c85510a0507e00da0877417b805181849357e937b9ac1.scope. Oct 2 20:32:13.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit: BPF prog-id=77 op=LOAD Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2178 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166613363643463643836303963383238643263383535313061303530 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2178 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166613363643463643836303963383238643263383535313061303530 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.931000 audit: BPF prog-id=78 op=LOAD Oct 2 20:32:13.931000 audit[2309]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003e6120 items=0 ppid=2178 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166613363643463643836303963383238643263383535313061303530 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit: BPF prog-id=79 op=LOAD Oct 2 20:32:13.933000 audit[2309]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003e6168 items=0 ppid=2178 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166613363643463643836303963383238643263383535313061303530 Oct 2 20:32:13.933000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:32:13.933000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { perfmon } for pid=2309 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit[2309]: AVC avc: denied { bpf } for pid=2309 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:13.933000 audit: BPF prog-id=80 op=LOAD Oct 2 20:32:13.933000 audit[2309]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e6578 items=0 ppid=2178 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:13.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166613363643463643836303963383238643263383535313061303530 Oct 2 20:32:13.965644 env[1332]: time="2023-10-02T20:32:13.961061974Z" level=info msg="CreateContainer within sandbox \"740d63f6789893936650c26401922c7c5830c36a12926d597912b77633a0579c\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"50ae7704b8084c4383eeabeb825a95f8863f8d046f049d03b611a3cff0bed1cd\"" Oct 2 20:32:13.966189 env[1332]: time="2023-10-02T20:32:13.966159929Z" level=info msg="StartContainer for \"50ae7704b8084c4383eeabeb825a95f8863f8d046f049d03b611a3cff0bed1cd\"" Oct 2 20:32:13.978714 env[1332]: time="2023-10-02T20:32:13.978678064Z" level=info msg="CreateContainer within sandbox \"e6f1db436c5e21e52d5285024c5acc36e46eb5bfdbe6ca6c7cf88727fa3d2a24\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"e113f1cf4892fcbbd44695447a215bccb864bfd9bd3f67d56ad0f9576fed394b\"" Oct 2 20:32:13.978815 env[1332]: time="2023-10-02T20:32:13.978689164Z" level=info msg="StartContainer for \"afa3cd4cd8609c828d2c85510a0507e00da0877417b805181849357e937b9ac1\" returns successfully" Oct 2 20:32:13.979655 env[1332]: time="2023-10-02T20:32:13.979624075Z" level=info msg="StartContainer for \"e113f1cf4892fcbbd44695447a215bccb864bfd9bd3f67d56ad0f9576fed394b\"" Oct 2 20:32:13.994471 systemd[1]: Started cri-containerd-50ae7704b8084c4383eeabeb825a95f8863f8d046f049d03b611a3cff0bed1cd.scope. Oct 2 20:32:14.019905 systemd[1]: Started cri-containerd-e113f1cf4892fcbbd44695447a215bccb864bfd9bd3f67d56ad0f9576fed394b.scope. Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.027000 audit: BPF prog-id=81 op=LOAD Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=2196 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530616537373034623830383463343338336565616265623832356139 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=2196 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530616537373034623830383463343338336565616265623832356139 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit: BPF prog-id=82 op=LOAD Oct 2 20:32:14.028000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c000336b30 items=0 ppid=2196 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530616537373034623830383463343338336565616265623832356139 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit: BPF prog-id=83 op=LOAD Oct 2 20:32:14.028000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c000336b78 items=0 ppid=2196 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530616537373034623830383463343338336565616265623832356139 Oct 2 20:32:14.028000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:32:14.028000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { perfmon } for pid=2344 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit[2344]: AVC avc: denied { bpf } for pid=2344 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.028000 audit: BPF prog-id=84 op=LOAD Oct 2 20:32:14.028000 audit[2344]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c000336f88 items=0 ppid=2196 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530616537373034623830383463343338336565616265623832356139 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.061000 audit: BPF prog-id=85 op=LOAD Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2235 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313366316366343839326663626264343436393534343761323135 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2235 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313366316366343839326663626264343436393534343761323135 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit: BPF prog-id=86 op=LOAD Oct 2 20:32:14.067000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003186c0 items=0 ppid=2235 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313366316366343839326663626264343436393534343761323135 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit: BPF prog-id=87 op=LOAD Oct 2 20:32:14.067000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000318708 items=0 ppid=2235 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313366316366343839326663626264343436393534343761323135 Oct 2 20:32:14.067000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:32:14.067000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:14.067000 audit: BPF prog-id=88 op=LOAD Oct 2 20:32:14.067000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000318b18 items=0 ppid=2235 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:14.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531313366316366343839326663626264343436393534343761323135 Oct 2 20:32:14.085008 env[1332]: time="2023-10-02T20:32:14.084952291Z" level=info msg="StartContainer for \"50ae7704b8084c4383eeabeb825a95f8863f8d046f049d03b611a3cff0bed1cd\" returns successfully" Oct 2 20:32:14.129435 env[1332]: time="2023-10-02T20:32:14.129389960Z" level=info msg="StartContainer for \"e113f1cf4892fcbbd44695447a215bccb864bfd9bd3f67d56ad0f9576fed394b\" returns successfully" Oct 2 20:32:14.221639 kubelet[2104]: E1002 20:32:14.221511 2104 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.200.8.15:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.200.8.15:6443: connect: connection refused Oct 2 20:32:14.260919 kubelet[2104]: I1002 20:32:14.260891 2104 status_manager.go:698] "Failed to get status for pod" podUID=48f18c9d906e25449b454ceaf2415ecb pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:14.265856 kubelet[2104]: I1002 20:32:14.265825 2104 status_manager.go:698] "Failed to get status for pod" podUID=345df1acb65fedd66f665897bad16ee9 pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:14.280589 kubelet[2104]: I1002 20:32:14.280565 2104 status_manager.go:698] "Failed to get status for pod" podUID=09c0b685605e91f154a33cde60dec83c pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" err="Get \"https://10.200.8.15:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ci-3510.3.0-a-976d86eccd\": dial tcp 10.200.8.15:6443: connect: connection refused" Oct 2 20:32:15.201231 kubelet[2104]: I1002 20:32:15.201202 2104 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:16.461000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:16.461000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0012a8000 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:16.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:16.461000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:16.461000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0000d01e0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:16.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:17.076000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.076000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002498090 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.076000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.076000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.076000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0019484a0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.076000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.077000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.077000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c002498360 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.077000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.079000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.079000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0027a8390 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.083000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.083000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0007e8ec0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.083000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.083000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:17.083000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0027a9ce0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:32:17.083000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:32:17.224682 kubelet[2104]: E1002 20:32:17.224647 2104 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510.3.0-a-976d86eccd\" not found" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:17.246282 kubelet[2104]: I1002 20:32:17.246250 2104 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:18.082048 kubelet[2104]: I1002 20:32:18.081987 2104 apiserver.go:52] "Watching apiserver" Oct 2 20:32:18.091559 kubelet[2104]: I1002 20:32:18.091529 2104 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:32:18.125093 kubelet[2104]: I1002 20:32:18.125045 2104 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:32:19.777692 kubelet[2104]: E1002 20:32:19.777567 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a648501c01f7b", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 81209211, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 81209211, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.149306 kubelet[2104]: E1002 20:32:19.870726 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a648502354350", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 88886096, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 88886096, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.149478 kubelet[2104]: E1002 20:32:19.924233 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a6485058bca60", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-976d86eccd status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144888416, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144888416, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.149558 kubelet[2104]: E1002 20:32:20.029446 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a6485058be234", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ci-3510.3.0-a-976d86eccd status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144894516, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144894516, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.149631 kubelet[2104]: E1002 20:32:20.082948 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a6485058bf238", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ci-3510.3.0-a-976d86eccd status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144898616, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144898616, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.224131 kubelet[2104]: E1002 20:32:20.224029 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a648507bcbcbf", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 181650623, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 181650623, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.280979 kubelet[2104]: E1002 20:32:20.280887 2104 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510.3.0-a-976d86eccd.178a6485058bca60", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510.3.0-a-976d86eccd", UID:"ci-3510.3.0-a-976d86eccd", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ci-3510.3.0-a-976d86eccd status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510.3.0-a-976d86eccd"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 144888416, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 32, 12, 191552633, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 20:32:20.960000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.965334 kernel: kauditd_printk_skb: 400 callbacks suppressed Oct 2 20:32:20.965426 kernel: audit: type=1400 audit(1696278740.960:714): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.960000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001082780 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:21.001378 kernel: audit: type=1300 audit(1696278740.960:714): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001082780 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:21.001473 kernel: audit: type=1327 audit(1696278740.960:714): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:20.960000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:21.019214 kernel: audit: type=1400 audit(1696278740.960:715): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.960000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.960000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010828c0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:21.055679 kernel: audit: type=1300 audit(1696278740.960:715): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010828c0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:20.960000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:20.961000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:21.089070 kernel: audit: type=1327 audit(1696278740.960:715): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:21.089149 kernel: audit: type=1400 audit(1696278740.961:716): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:21.089174 kernel: audit: type=1300 audit(1696278740.961:716): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001082a00 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:20.961000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001082a00 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:20.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:21.126878 kernel: audit: type=1327 audit(1696278740.961:716): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:21.126962 kernel: audit: type=1400 audit(1696278740.961:717): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.961000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:32:20.961000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00110df60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:20.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:21.774844 systemd[1]: Reloading. Oct 2 20:32:21.885417 /usr/lib/systemd/system-generators/torcx-generator[2441]: time="2023-10-02T20:32:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:32:21.885454 /usr/lib/systemd/system-generators/torcx-generator[2441]: time="2023-10-02T20:32:21Z" level=info msg="torcx already run" Oct 2 20:32:21.949877 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:32:21.949895 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:32:21.966316 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:32:22.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.047000 audit: BPF prog-id=89 op=LOAD Oct 2 20:32:22.047000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.049000 audit: BPF prog-id=90 op=LOAD Oct 2 20:32:22.049000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit: BPF prog-id=91 op=LOAD Oct 2 20:32:22.051000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.051000 audit: BPF prog-id=92 op=LOAD Oct 2 20:32:22.052000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit: BPF prog-id=93 op=LOAD Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.052000 audit: BPF prog-id=94 op=LOAD Oct 2 20:32:22.052000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:32:22.052000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.053000 audit: BPF prog-id=95 op=LOAD Oct 2 20:32:22.053000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit: BPF prog-id=96 op=LOAD Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.055000 audit: BPF prog-id=97 op=LOAD Oct 2 20:32:22.055000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:32:22.055000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit: BPF prog-id=98 op=LOAD Oct 2 20:32:22.058000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit: BPF prog-id=99 op=LOAD Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit: BPF prog-id=100 op=LOAD Oct 2 20:32:22.058000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:32:22.058000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit: BPF prog-id=101 op=LOAD Oct 2 20:32:22.059000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit: BPF prog-id=102 op=LOAD Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.059000 audit: BPF prog-id=103 op=LOAD Oct 2 20:32:22.059000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:32:22.059000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.060000 audit: BPF prog-id=104 op=LOAD Oct 2 20:32:22.060000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.061000 audit: BPF prog-id=105 op=LOAD Oct 2 20:32:22.061000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.062000 audit: BPF prog-id=106 op=LOAD Oct 2 20:32:22.062000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.063000 audit: BPF prog-id=107 op=LOAD Oct 2 20:32:22.063000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.064000 audit: BPF prog-id=108 op=LOAD Oct 2 20:32:22.065000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.066000 audit: BPF prog-id=109 op=LOAD Oct 2 20:32:22.066000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:32:22.082090 systemd[1]: Stopping kubelet.service... Oct 2 20:32:22.082377 kubelet[2104]: I1002 20:32:22.082353 2104 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:22.103308 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:32:22.103517 systemd[1]: Stopped kubelet.service. Oct 2 20:32:22.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:22.105532 systemd[1]: Started kubelet.service. Oct 2 20:32:22.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:22.186207 kubelet[2498]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:22.186207 kubelet[2498]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:22.186618 kubelet[2498]: I1002 20:32:22.186281 2498 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:32:22.187821 kubelet[2498]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:32:22.187821 kubelet[2498]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:32:22.193446 kubelet[2498]: I1002 20:32:22.193424 2498 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:32:22.193566 kubelet[2498]: I1002 20:32:22.193557 2498 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:32:22.193804 kubelet[2498]: I1002 20:32:22.193790 2498 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:32:22.195097 kubelet[2498]: I1002 20:32:22.195081 2498 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:32:22.196894 kubelet[2498]: I1002 20:32:22.196879 2498 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:32:22.199253 kubelet[2498]: I1002 20:32:22.199236 2498 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:32:22.199583 kubelet[2498]: I1002 20:32:22.199570 2498 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:32:22.199720 kubelet[2498]: I1002 20:32:22.199710 2498 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:32:22.199833 kubelet[2498]: I1002 20:32:22.199826 2498 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:32:22.199883 kubelet[2498]: I1002 20:32:22.199878 2498 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:32:22.199945 kubelet[2498]: I1002 20:32:22.199939 2498 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:22.203215 kubelet[2498]: I1002 20:32:22.203191 2498 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:32:22.203215 kubelet[2498]: I1002 20:32:22.203214 2498 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:32:22.203340 kubelet[2498]: I1002 20:32:22.203238 2498 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:32:22.203340 kubelet[2498]: I1002 20:32:22.203251 2498 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:32:22.210018 kubelet[2498]: I1002 20:32:22.209227 2498 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:32:22.210018 kubelet[2498]: I1002 20:32:22.209693 2498 server.go:1186] "Started kubelet" Oct 2 20:32:22.210000 audit[2498]: AVC avc: denied { mac_admin } for pid=2498 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.210000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:22.210000 audit[2498]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000da7b30 a1=c000dab380 a2=c000da7b00 a3=25 items=0 ppid=1 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:22.210000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:22.211953 kubelet[2498]: I1002 20:32:22.211936 2498 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:32:22.211000 audit[2498]: AVC avc: denied { mac_admin } for pid=2498 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.211000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:22.211000 audit[2498]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dc2a20 a1=c000dab398 a2=c000da7bc0 a3=25 items=0 ppid=1 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:22.211000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:22.212318 kubelet[2498]: I1002 20:32:22.212307 2498 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:32:22.212394 kubelet[2498]: I1002 20:32:22.212387 2498 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:32:22.215554 kubelet[2498]: I1002 20:32:22.215539 2498 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:32:22.216320 kubelet[2498]: I1002 20:32:22.216303 2498 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:32:22.223754 kubelet[2498]: E1002 20:32:22.223341 2498 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:32:22.223754 kubelet[2498]: E1002 20:32:22.223364 2498 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:32:22.223754 kubelet[2498]: E1002 20:32:22.223423 2498 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510.3.0-a-976d86eccd\" not found" Oct 2 20:32:22.223754 kubelet[2498]: I1002 20:32:22.223453 2498 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:32:22.223754 kubelet[2498]: I1002 20:32:22.223538 2498 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:32:22.265043 kubelet[2498]: I1002 20:32:22.265023 2498 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:32:22.328488 kubelet[2498]: I1002 20:32:22.328394 2498 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.347031 kubelet[2498]: I1002 20:32:22.347012 2498 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:32:22.347188 kubelet[2498]: I1002 20:32:22.347179 2498 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:32:22.347272 kubelet[2498]: I1002 20:32:22.347264 2498 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:32:22.347388 kubelet[2498]: E1002 20:32:22.347379 2498 kubelet.go:2137] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:32:22.362765 kubelet[2498]: I1002 20:32:22.362736 2498 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:32:22.362765 kubelet[2498]: I1002 20:32:22.362761 2498 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:32:22.362934 kubelet[2498]: I1002 20:32:22.362777 2498 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:32:22.362934 kubelet[2498]: I1002 20:32:22.362927 2498 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:32:22.363041 kubelet[2498]: I1002 20:32:22.362942 2498 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:32:22.363041 kubelet[2498]: I1002 20:32:22.362951 2498 policy_none.go:49] "None policy: Start" Oct 2 20:32:22.364055 kubelet[2498]: I1002 20:32:22.364036 2498 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:32:22.364184 kubelet[2498]: I1002 20:32:22.364175 2498 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:32:22.364410 kubelet[2498]: I1002 20:32:22.364400 2498 state_mem.go:75] "Updated machine memory state" Oct 2 20:32:22.366836 kubelet[2498]: I1002 20:32:22.366822 2498 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.366972 kubelet[2498]: I1002 20:32:22.366962 2498 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.370947 kubelet[2498]: I1002 20:32:22.370931 2498 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:32:22.370000 audit[2498]: AVC avc: denied { mac_admin } for pid=2498 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:22.370000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:32:22.370000 audit[2498]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001408f60 a1=c001411d70 a2=c001408f30 a3=25 items=0 ppid=1 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:22.370000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:32:22.371408 kubelet[2498]: I1002 20:32:22.371396 2498 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:32:22.371670 kubelet[2498]: I1002 20:32:22.371658 2498 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:32:22.447692 kubelet[2498]: I1002 20:32:22.447662 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:22.447870 kubelet[2498]: I1002 20:32:22.447804 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:22.447946 kubelet[2498]: I1002 20:32:22.447877 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:22.456510 kubelet[2498]: E1002 20:32:22.456482 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.459357 kubelet[2498]: E1002 20:32:22.459337 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.524857 kubelet[2498]: I1002 20:32:22.524816 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-ca-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.524857 kubelet[2498]: I1002 20:32:22.524874 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525138 kubelet[2498]: I1002 20:32:22.524909 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-k8s-certs\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525138 kubelet[2498]: I1002 20:32:22.524939 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-kubeconfig\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525138 kubelet[2498]: I1002 20:32:22.524974 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/345df1acb65fedd66f665897bad16ee9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" (UID: \"345df1acb65fedd66f665897bad16ee9\") " pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525138 kubelet[2498]: I1002 20:32:22.525029 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-ca-certs\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525138 kubelet[2498]: I1002 20:32:22.525065 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-k8s-certs\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525385 kubelet[2498]: I1002 20:32:22.525116 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/09c0b685605e91f154a33cde60dec83c-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" (UID: \"09c0b685605e91f154a33cde60dec83c\") " pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.525385 kubelet[2498]: I1002 20:32:22.525155 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/48f18c9d906e25449b454ceaf2415ecb-kubeconfig\") pod \"kube-scheduler-ci-3510.3.0-a-976d86eccd\" (UID: \"48f18c9d906e25449b454ceaf2415ecb\") " pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:22.611323 kubelet[2498]: E1002 20:32:22.611295 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:23.078000 audit[2550]: USER_ACCT pid=2550 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:23.079918 sudo[2550]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:32:23.079000 audit[2550]: CRED_REFR pid=2550 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:23.080455 sudo[2550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:32:23.081000 audit[2550]: USER_START pid=2550 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:23.209613 kubelet[2498]: I1002 20:32:23.209577 2498 apiserver.go:52] "Watching apiserver" Oct 2 20:32:23.224342 kubelet[2498]: I1002 20:32:23.224318 2498 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:32:23.229703 kubelet[2498]: I1002 20:32:23.229682 2498 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:32:23.414822 kubelet[2498]: E1002 20:32:23.414787 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:23.594537 sudo[2550]: pam_unix(sudo:session): session closed for user root Oct 2 20:32:23.593000 audit[2550]: USER_END pid=2550 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:23.593000 audit[2550]: CRED_DISP pid=2550 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:23.811212 kubelet[2498]: E1002 20:32:23.811108 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:24.011112 kubelet[2498]: E1002 20:32:24.011078 2498 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ci-3510.3.0-a-976d86eccd\" already exists" pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" Oct 2 20:32:24.223335 kubelet[2498]: I1002 20:32:24.223283 2498 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510.3.0-a-976d86eccd" podStartSLOduration=5.223198256 pod.CreationTimestamp="2023-10-02 20:32:19 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:24.222815853 +0000 UTC m=+2.109324674" watchObservedRunningTime="2023-10-02 20:32:24.223198256 +0000 UTC m=+2.109707177" Oct 2 20:32:24.611885 kubelet[2498]: I1002 20:32:24.611848 2498 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510.3.0-a-976d86eccd" podStartSLOduration=4.611803007 pod.CreationTimestamp="2023-10-02 20:32:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:24.6109766 +0000 UTC m=+2.497485421" watchObservedRunningTime="2023-10-02 20:32:24.611803007 +0000 UTC m=+2.498311928" Oct 2 20:32:24.750519 sudo[1693]: pam_unix(sudo:session): session closed for user root Oct 2 20:32:24.749000 audit[1693]: USER_END pid=1693 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:24.749000 audit[1693]: CRED_DISP pid=1693 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:32:24.850043 sshd[1690]: pam_unix(sshd:session): session closed for user core Oct 2 20:32:24.850000 audit[1690]: USER_END pid=1690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:32:24.850000 audit[1690]: CRED_DISP pid=1690 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:32:24.853169 systemd[1]: sshd@6-10.200.8.15:22-10.200.12.6:52358.service: Deactivated successfully. Oct 2 20:32:24.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.200.8.15:22-10.200.12.6:52358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:32:24.854054 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:32:24.854255 systemd[1]: session-9.scope: Consumed 3.946s CPU time. Oct 2 20:32:24.854866 systemd-logind[1315]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:32:24.856161 systemd-logind[1315]: Removed session 9. Oct 2 20:32:25.525979 kubelet[2498]: I1002 20:32:25.525936 2498 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510.3.0-a-976d86eccd" podStartSLOduration=5.525909357 pod.CreationTimestamp="2023-10-02 20:32:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:25.009908135 +0000 UTC m=+2.896417056" watchObservedRunningTime="2023-10-02 20:32:25.525909357 +0000 UTC m=+3.412418278" Oct 2 20:32:31.181000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:32:31.186902 kernel: kauditd_printk_skb: 270 callbacks suppressed Oct 2 20:32:31.187037 kernel: audit: type=1400 audit(1696278751.181:977): avc: denied { watch } for pid=2362 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:32:31.181000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011fc140 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:31.226636 kernel: audit: type=1300 audit(1696278751.181:977): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011fc140 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:32:31.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:31.244070 kernel: audit: type=1327 audit(1696278751.181:977): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:32:33.593427 kubelet[2498]: I1002 20:32:33.593397 2498 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:32:33.593920 env[1332]: time="2023-10-02T20:32:33.593796663Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:32:33.594259 kubelet[2498]: I1002 20:32:33.594010 2498 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:32:34.543505 kubelet[2498]: I1002 20:32:34.543471 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:34.544985 kubelet[2498]: I1002 20:32:34.544857 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:34.550592 systemd[1]: Created slice kubepods-besteffort-pod15d43c22_8227_4d07_8a2f_ce99822bb761.slice. Oct 2 20:32:34.565973 systemd[1]: Created slice kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice. Oct 2 20:32:34.606211 kubelet[2498]: I1002 20:32:34.606135 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-net\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.606764 kubelet[2498]: I1002 20:32:34.606688 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wxl2z\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-kube-api-access-wxl2z\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.606930 kubelet[2498]: I1002 20:32:34.606918 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hostproc\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.607129 kubelet[2498]: I1002 20:32:34.607118 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-cgroup\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.607276 kubelet[2498]: I1002 20:32:34.607263 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-xtables-lock\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.607461 kubelet[2498]: I1002 20:32:34.607445 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/15d43c22-8227-4d07-8a2f-ce99822bb761-kube-proxy\") pod \"kube-proxy-rmrv9\" (UID: \"15d43c22-8227-4d07-8a2f-ce99822bb761\") " pod="kube-system/kube-proxy-rmrv9" Oct 2 20:32:34.607641 kubelet[2498]: I1002 20:32:34.607624 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/15d43c22-8227-4d07-8a2f-ce99822bb761-xtables-lock\") pod \"kube-proxy-rmrv9\" (UID: \"15d43c22-8227-4d07-8a2f-ce99822bb761\") " pod="kube-system/kube-proxy-rmrv9" Oct 2 20:32:34.607744 kubelet[2498]: I1002 20:32:34.607737 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-etc-cni-netd\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.607862 kubelet[2498]: I1002 20:32:34.607851 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-run\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.607963 kubelet[2498]: I1002 20:32:34.607956 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-lib-modules\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608053 kubelet[2498]: I1002 20:32:34.608047 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-bpf-maps\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608161 kubelet[2498]: I1002 20:32:34.608153 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cni-path\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608272 kubelet[2498]: I1002 20:32:34.608264 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-clustermesh-secrets\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608372 kubelet[2498]: I1002 20:32:34.608366 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/15d43c22-8227-4d07-8a2f-ce99822bb761-lib-modules\") pod \"kube-proxy-rmrv9\" (UID: \"15d43c22-8227-4d07-8a2f-ce99822bb761\") " pod="kube-system/kube-proxy-rmrv9" Oct 2 20:32:34.608464 kubelet[2498]: I1002 20:32:34.608458 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-kernel\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608546 kubelet[2498]: I1002 20:32:34.608540 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9hzgg\" (UniqueName: \"kubernetes.io/projected/15d43c22-8227-4d07-8a2f-ce99822bb761-kube-api-access-9hzgg\") pod \"kube-proxy-rmrv9\" (UID: \"15d43c22-8227-4d07-8a2f-ce99822bb761\") " pod="kube-system/kube-proxy-rmrv9" Oct 2 20:32:34.608632 kubelet[2498]: I1002 20:32:34.608626 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-config-path\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.608718 kubelet[2498]: I1002 20:32:34.608711 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hubble-tls\") pod \"cilium-rmjwx\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " pod="kube-system/cilium-rmjwx" Oct 2 20:32:34.626625 kubelet[2498]: I1002 20:32:34.626594 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:32:34.632192 systemd[1]: Created slice kubepods-besteffort-pod8813e80d_b8f1_41c8_b844_78b711778e6f.slice. Oct 2 20:32:34.709230 kubelet[2498]: I1002 20:32:34.709193 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8813e80d-b8f1-41c8-b844-78b711778e6f-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-kntlt\" (UID: \"8813e80d-b8f1-41c8-b844-78b711778e6f\") " pod="kube-system/cilium-operator-f59cbd8c6-kntlt" Oct 2 20:32:34.709445 kubelet[2498]: I1002 20:32:34.709424 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rkjwt\" (UniqueName: \"kubernetes.io/projected/8813e80d-b8f1-41c8-b844-78b711778e6f-kube-api-access-rkjwt\") pod \"cilium-operator-f59cbd8c6-kntlt\" (UID: \"8813e80d-b8f1-41c8-b844-78b711778e6f\") " pod="kube-system/cilium-operator-f59cbd8c6-kntlt" Oct 2 20:32:35.161256 env[1332]: time="2023-10-02T20:32:35.161206117Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rmrv9,Uid:15d43c22-8227-4d07-8a2f-ce99822bb761,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:35.174761 env[1332]: time="2023-10-02T20:32:35.174720007Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rmjwx,Uid:dbe21dfd-2b49-42bf-9cbd-f85e61af721b,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:35.203583 env[1332]: time="2023-10-02T20:32:35.203512798Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:35.203583 env[1332]: time="2023-10-02T20:32:35.203548199Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:35.203798 env[1332]: time="2023-10-02T20:32:35.203762700Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:35.204117 env[1332]: time="2023-10-02T20:32:35.204044002Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3339a02cb21f0d5134c23b8ac163deb5302dc46e2317bec05dece3649dc0785f pid=2599 runtime=io.containerd.runc.v2 Oct 2 20:32:35.217567 systemd[1]: Started cri-containerd-3339a02cb21f0d5134c23b8ac163deb5302dc46e2317bec05dece3649dc0785f.scope. Oct 2 20:32:35.218133 env[1332]: time="2023-10-02T20:32:35.218066995Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:35.218357 env[1332]: time="2023-10-02T20:32:35.218332397Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:35.218467 env[1332]: time="2023-10-02T20:32:35.218444498Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:35.218688 env[1332]: time="2023-10-02T20:32:35.218655099Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866 pid=2625 runtime=io.containerd.runc.v2 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.251044 kernel: audit: type=1400 audit(1696278755.238:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.277912 kernel: audit: type=1400 audit(1696278755.238:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.278043 kernel: audit: type=1400 audit(1696278755.238:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.282533 systemd[1]: Started cri-containerd-2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866.scope. Oct 2 20:32:35.290010 kernel: audit: type=1400 audit(1696278755.238:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.310213 kernel: audit: type=1400 audit(1696278755.238:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.310284 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:32:35.310312 kernel: audit: type=1400 audit(1696278755.238:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.277000 audit: BPF prog-id=110 op=LOAD Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=2599 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333333961303263623231663064353133346332336238616331363364 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=2599 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333333961303263623231663064353133346332336238616331363364 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit: BPF prog-id=111 op=LOAD Oct 2 20:32:35.289000 audit[2609]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c0000a0340 items=0 ppid=2599 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333333961303263623231663064353133346332336238616331363364 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit: BPF prog-id=112 op=LOAD Oct 2 20:32:35.289000 audit[2609]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c0000a0388 items=0 ppid=2599 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333333961303263623231663064353133346332336238616331363364 Oct 2 20:32:35.289000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:32:35.289000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { perfmon } for pid=2609 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit[2609]: AVC avc: denied { bpf } for pid=2609 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.289000 audit: BPF prog-id=113 op=LOAD Oct 2 20:32:35.289000 audit[2609]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0000a0798 items=0 ppid=2599 pid=2609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333333961303263623231663064353133346332336238616331363364 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.323000 audit: BPF prog-id=114 op=LOAD Oct 2 20:32:35.323000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.323000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2625 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236353766373233393534353135616232326561393131363664613734 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2625 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236353766373233393534353135616232326561393131363664613734 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit: BPF prog-id=115 op=LOAD Oct 2 20:32:35.324000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002aa340 items=0 ppid=2625 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236353766373233393534353135616232326561393131363664613734 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit: BPF prog-id=116 op=LOAD Oct 2 20:32:35.324000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002aa388 items=0 ppid=2625 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236353766373233393534353135616232326561393131363664613734 Oct 2 20:32:35.324000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:32:35.324000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { perfmon } for pid=2637 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit[2637]: AVC avc: denied { bpf } for pid=2637 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.324000 audit: BPF prog-id=117 op=LOAD Oct 2 20:32:35.324000 audit[2637]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002aa798 items=0 ppid=2625 pid=2637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236353766373233393534353135616232326561393131363664613734 Oct 2 20:32:35.338559 env[1332]: time="2023-10-02T20:32:35.338508095Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rmjwx,Uid:dbe21dfd-2b49-42bf-9cbd-f85e61af721b,Namespace:kube-system,Attempt:0,} returns sandbox id \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\"" Oct 2 20:32:35.342299 env[1332]: time="2023-10-02T20:32:35.342272820Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:32:35.342414 env[1332]: time="2023-10-02T20:32:35.342267120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rmrv9,Uid:15d43c22-8227-4d07-8a2f-ce99822bb761,Namespace:kube-system,Attempt:0,} returns sandbox id \"3339a02cb21f0d5134c23b8ac163deb5302dc46e2317bec05dece3649dc0785f\"" Oct 2 20:32:35.345090 env[1332]: time="2023-10-02T20:32:35.345051438Z" level=info msg="CreateContainer within sandbox \"3339a02cb21f0d5134c23b8ac163deb5302dc46e2317bec05dece3649dc0785f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:32:35.383772 env[1332]: time="2023-10-02T20:32:35.383732695Z" level=info msg="CreateContainer within sandbox \"3339a02cb21f0d5134c23b8ac163deb5302dc46e2317bec05dece3649dc0785f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"811e10966c8653d1396d5c7dda2b44b2d481a48ad49391b92a0161a986061d84\"" Oct 2 20:32:35.385719 env[1332]: time="2023-10-02T20:32:35.384367300Z" level=info msg="StartContainer for \"811e10966c8653d1396d5c7dda2b44b2d481a48ad49391b92a0161a986061d84\"" Oct 2 20:32:35.403514 systemd[1]: Started cri-containerd-811e10966c8653d1396d5c7dda2b44b2d481a48ad49391b92a0161a986061d84.scope. Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2599 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316531303936366338363533643133393664356337646461326234 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.418000 audit: BPF prog-id=118 op=LOAD Oct 2 20:32:35.418000 audit[2681]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c0000a01f0 items=0 ppid=2599 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316531303936366338363533643133393664356337646461326234 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit: BPF prog-id=119 op=LOAD Oct 2 20:32:35.419000 audit[2681]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c0000a0238 items=0 ppid=2599 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316531303936366338363533643133393664356337646461326234 Oct 2 20:32:35.419000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:32:35.419000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { perfmon } for pid=2681 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit[2681]: AVC avc: denied { bpf } for pid=2681 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.419000 audit: BPF prog-id=120 op=LOAD Oct 2 20:32:35.419000 audit[2681]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0000a02c8 items=0 ppid=2599 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831316531303936366338363533643133393664356337646461326234 Oct 2 20:32:35.440650 env[1332]: time="2023-10-02T20:32:35.440602373Z" level=info msg="StartContainer for \"811e10966c8653d1396d5c7dda2b44b2d481a48ad49391b92a0161a986061d84\" returns successfully" Oct 2 20:32:35.482000 audit[2732]: NETFILTER_CFG table=mangle:63 family=10 entries=1 op=nft_register_chain pid=2732 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.482000 audit[2732]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffcd51dfc0 a2=0 a3=7fffcd51dfac items=0 ppid=2692 pid=2732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.482000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:32:35.484000 audit[2733]: NETFILTER_CFG table=nat:64 family=10 entries=1 op=nft_register_chain pid=2733 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.484000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8c5b27b0 a2=0 a3=7fff8c5b279c items=0 ppid=2692 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:32:35.486000 audit[2734]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.486000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea9d15430 a2=0 a3=7ffea9d1541c items=0 ppid=2692 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.486000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:32:35.489000 audit[2735]: NETFILTER_CFG table=mangle:66 family=2 entries=1 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.489000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee27c9b70 a2=0 a3=7ffee27c9b5c items=0 ppid=2692 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:32:35.491000 audit[2736]: NETFILTER_CFG table=nat:67 family=2 entries=1 op=nft_register_chain pid=2736 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.491000 audit[2736]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdad0e59a0 a2=0 a3=7ffdad0e598c items=0 ppid=2692 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:32:35.492000 audit[2737]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2737 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.492000 audit[2737]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc24c3fff0 a2=0 a3=7ffc24c3ffdc items=0 ppid=2692 pid=2737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.492000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:32:35.535423 env[1332]: time="2023-10-02T20:32:35.535373703Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-kntlt,Uid:8813e80d-b8f1-41c8-b844-78b711778e6f,Namespace:kube-system,Attempt:0,}" Oct 2 20:32:35.573453 env[1332]: time="2023-10-02T20:32:35.573188654Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:32:35.573453 env[1332]: time="2023-10-02T20:32:35.573240854Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:32:35.573453 env[1332]: time="2023-10-02T20:32:35.573259554Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:32:35.573749 env[1332]: time="2023-10-02T20:32:35.573485056Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07 pid=2745 runtime=io.containerd.runc.v2 Oct 2 20:32:35.585366 systemd[1]: Started cri-containerd-69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07.scope. Oct 2 20:32:35.588000 audit[2762]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_chain pid=2762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.588000 audit[2762]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe34717de0 a2=0 a3=7ffe34717dcc items=0 ppid=2692 pid=2762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:32:35.594000 audit[2766]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_rule pid=2766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.594000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff377687d0 a2=0 a3=7fff377687bc items=0 ppid=2692 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.594000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:32:35.602000 audit[2775]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.602000 audit[2775]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff97849780 a2=0 a3=7fff9784976c items=0 ppid=2692 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.604000 audit: BPF prog-id=121 op=LOAD Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2745 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633939646262373434363866626333303633646130663632363639 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2745 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633939646262373434363866626333303633646130663632363639 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit: BPF prog-id=122 op=LOAD Oct 2 20:32:35.605000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002770e0 items=0 ppid=2745 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633939646262373434363866626333303633646130663632363639 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit: BPF prog-id=123 op=LOAD Oct 2 20:32:35.605000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000277128 items=0 ppid=2745 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633939646262373434363866626333303633646130663632363639 Oct 2 20:32:35.605000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:32:35.605000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { perfmon } for pid=2754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit[2754]: AVC avc: denied { bpf } for pid=2754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:35.605000 audit: BPF prog-id=124 op=LOAD Oct 2 20:32:35.605000 audit[2754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000277538 items=0 ppid=2745 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633939646262373434363866626333303633646130663632363639 Oct 2 20:32:35.608000 audit[2776]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_chain pid=2776 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.608000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4a195920 a2=0 a3=7ffd4a19590c items=0 ppid=2692 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.608000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:32:35.614000 audit[2778]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.614000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe1bcd2e00 a2=0 a3=7ffe1bcd2dec items=0 ppid=2692 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.614000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:32:35.616000 audit[2779]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_chain pid=2779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.616000 audit[2779]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc39c13fd0 a2=0 a3=7ffc39c13fbc items=0 ppid=2692 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.616000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:32:35.622000 audit[2781]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_rule pid=2781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.622000 audit[2781]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffe6681ef0 a2=0 a3=7fffe6681edc items=0 ppid=2692 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.622000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:32:35.631000 audit[2785]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=2785 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.631000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe42b60160 a2=0 a3=7ffe42b6014c items=0 ppid=2692 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.631000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:32:35.636000 audit[2791]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_chain pid=2791 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.636000 audit[2791]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9d25db10 a2=0 a3=7ffd9d25dafc items=0 ppid=2692 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:32:35.639283 env[1332]: time="2023-10-02T20:32:35.639242892Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-kntlt,Uid:8813e80d-b8f1-41c8-b844-78b711778e6f,Namespace:kube-system,Attempt:0,} returns sandbox id \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\"" Oct 2 20:32:35.642000 audit[2793]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=2793 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.642000 audit[2793]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdaba544d0 a2=0 a3=7ffdaba544bc items=0 ppid=2692 pid=2793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:32:35.644000 audit[2794]: NETFILTER_CFG table=filter:79 family=2 entries=1 op=nft_register_chain pid=2794 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.644000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc27fcfb40 a2=0 a3=7ffc27fcfb2c items=0 ppid=2692 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:32:35.646000 audit[2796]: NETFILTER_CFG table=filter:80 family=2 entries=1 op=nft_register_rule pid=2796 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.646000 audit[2796]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff61ff4d40 a2=0 a3=7fff61ff4d2c items=0 ppid=2692 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:35.650000 audit[2799]: NETFILTER_CFG table=filter:81 family=2 entries=1 op=nft_register_rule pid=2799 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.650000 audit[2799]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc3b98d60 a2=0 a3=7ffdc3b98d4c items=0 ppid=2692 pid=2799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:35.653000 audit[2802]: NETFILTER_CFG table=filter:82 family=2 entries=1 op=nft_register_rule pid=2802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.653000 audit[2802]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff5b9fe60 a2=0 a3=7ffff5b9fe4c items=0 ppid=2692 pid=2802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:32:35.655000 audit[2803]: NETFILTER_CFG table=nat:83 family=2 entries=1 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.655000 audit[2803]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd64059640 a2=0 a3=7ffd6405962c items=0 ppid=2692 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:32:35.657000 audit[2805]: NETFILTER_CFG table=nat:84 family=2 entries=1 op=nft_register_rule pid=2805 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.657000 audit[2805]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffca1f218a0 a2=0 a3=7ffca1f2188c items=0 ppid=2692 pid=2805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:35.660000 audit[2808]: NETFILTER_CFG table=nat:85 family=2 entries=1 op=nft_register_rule pid=2808 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:32:35.660000 audit[2808]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff1307a780 a2=0 a3=7fff1307a76c items=0 ppid=2692 pid=2808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.660000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:35.701000 audit[2812]: NETFILTER_CFG table=filter:86 family=2 entries=6 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:32:35.701000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffec8717060 a2=0 a3=7ffec871704c items=0 ppid=2692 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:35.729000 audit[2812]: NETFILTER_CFG table=nat:87 family=2 entries=17 op=nft_register_chain pid=2812 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:32:35.729000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffec8717060 a2=0 a3=7ffec871704c items=0 ppid=2692 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:35.735000 audit[2816]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_chain pid=2816 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.735000 audit[2816]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffffe555c80 a2=0 a3=7ffffe555c6c items=0 ppid=2692 pid=2816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:32:35.739000 audit[2818]: NETFILTER_CFG table=filter:89 family=10 entries=2 op=nft_register_chain pid=2818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.739000 audit[2818]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe9c726800 a2=0 a3=7ffe9c7267ec items=0 ppid=2692 pid=2818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:32:35.744000 audit[2821]: NETFILTER_CFG table=filter:90 family=10 entries=2 op=nft_register_chain pid=2821 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.744000 audit[2821]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdd0c99e80 a2=0 a3=7ffdd0c99e6c items=0 ppid=2692 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.744000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:32:35.745000 audit[2822]: NETFILTER_CFG table=filter:91 family=10 entries=1 op=nft_register_chain pid=2822 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.745000 audit[2822]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdaf4c3aa0 a2=0 a3=7ffdaf4c3a8c items=0 ppid=2692 pid=2822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.745000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:32:35.748000 audit[2824]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_rule pid=2824 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.748000 audit[2824]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc647d5040 a2=0 a3=7ffc647d502c items=0 ppid=2692 pid=2824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:32:35.749000 audit[2825]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_chain pid=2825 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.749000 audit[2825]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff35d104a0 a2=0 a3=7fff35d1048c items=0 ppid=2692 pid=2825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:32:35.751000 audit[2827]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_rule pid=2827 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.751000 audit[2827]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdfa506590 a2=0 a3=7ffdfa50657c items=0 ppid=2692 pid=2827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.751000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:32:35.755000 audit[2830]: NETFILTER_CFG table=filter:95 family=10 entries=2 op=nft_register_chain pid=2830 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.755000 audit[2830]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffd4978aa0 a2=0 a3=7fffd4978a8c items=0 ppid=2692 pid=2830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:32:35.756000 audit[2831]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_chain pid=2831 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.756000 audit[2831]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcaf07fa90 a2=0 a3=7ffcaf07fa7c items=0 ppid=2692 pid=2831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.756000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:32:35.758000 audit[2833]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=2833 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.758000 audit[2833]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffebd913760 a2=0 a3=7ffebd91374c items=0 ppid=2692 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.758000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:32:35.759000 audit[2834]: NETFILTER_CFG table=filter:98 family=10 entries=1 op=nft_register_chain pid=2834 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.759000 audit[2834]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff4d91fc10 a2=0 a3=7fff4d91fbfc items=0 ppid=2692 pid=2834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:32:35.764000 audit[2836]: NETFILTER_CFG table=filter:99 family=10 entries=1 op=nft_register_rule pid=2836 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.764000 audit[2836]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce575a050 a2=0 a3=7ffce575a03c items=0 ppid=2692 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.764000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:32:35.768000 audit[2839]: NETFILTER_CFG table=filter:100 family=10 entries=1 op=nft_register_rule pid=2839 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.768000 audit[2839]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe2b4871f0 a2=0 a3=7ffe2b4871dc items=0 ppid=2692 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.768000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:32:35.772000 audit[2842]: NETFILTER_CFG table=filter:101 family=10 entries=1 op=nft_register_rule pid=2842 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.772000 audit[2842]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc4c137830 a2=0 a3=7ffc4c13781c items=0 ppid=2692 pid=2842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:32:35.773000 audit[2843]: NETFILTER_CFG table=nat:102 family=10 entries=1 op=nft_register_chain pid=2843 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.773000 audit[2843]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe06a86290 a2=0 a3=7ffe06a8627c items=0 ppid=2692 pid=2843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:32:35.778000 audit[2845]: NETFILTER_CFG table=nat:103 family=10 entries=2 op=nft_register_chain pid=2845 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.778000 audit[2845]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe447c3c10 a2=0 a3=7ffe447c3bfc items=0 ppid=2692 pid=2845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.778000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:35.781000 audit[2848]: NETFILTER_CFG table=nat:104 family=10 entries=2 op=nft_register_chain pid=2848 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:32:35.781000 audit[2848]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd001c8b40 a2=0 a3=7ffd001c8b2c items=0 ppid=2692 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:32:35.786000 audit[2852]: NETFILTER_CFG table=filter:105 family=10 entries=3 op=nft_register_rule pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:32:35.786000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc2f105fc0 a2=0 a3=7ffc2f105fac items=0 ppid=2692 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.786000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:35.786000 audit[2852]: NETFILTER_CFG table=nat:106 family=10 entries=10 op=nft_register_chain pid=2852 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:32:35.786000 audit[2852]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc2f105fc0 a2=0 a3=7ffc2f105fac items=0 ppid=2692 pid=2852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:35.786000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:32:36.401094 kubelet[2498]: I1002 20:32:36.401060 2498 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-rmrv9" podStartSLOduration=2.401020602 pod.CreationTimestamp="2023-10-02 20:32:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:36.400303397 +0000 UTC m=+14.286812218" watchObservedRunningTime="2023-10-02 20:32:36.401020602 +0000 UTC m=+14.287529423" Oct 2 20:32:41.877791 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1923298253.mount: Deactivated successfully. Oct 2 20:32:44.660410 env[1332]: time="2023-10-02T20:32:44.660361423Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.666683 env[1332]: time="2023-10-02T20:32:44.666644658Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.671605 env[1332]: time="2023-10-02T20:32:44.671571986Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:44.672226 env[1332]: time="2023-10-02T20:32:44.672191889Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:32:44.673332 env[1332]: time="2023-10-02T20:32:44.673300196Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:32:44.676431 env[1332]: time="2023-10-02T20:32:44.676401413Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:32:44.707522 env[1332]: time="2023-10-02T20:32:44.707480288Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" Oct 2 20:32:44.707947 env[1332]: time="2023-10-02T20:32:44.707919190Z" level=info msg="StartContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" Oct 2 20:32:44.734320 systemd[1]: Started cri-containerd-8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71.scope. Oct 2 20:32:44.742717 systemd[1]: cri-containerd-8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71.scope: Deactivated successfully. Oct 2 20:32:44.743032 systemd[1]: Stopped cri-containerd-8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71.scope. Oct 2 20:32:44.747525 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71-rootfs.mount: Deactivated successfully. Oct 2 20:32:46.737710 env[1332]: time="2023-10-02T20:32:46.737596455Z" level=error msg="get state for 8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" error="context deadline exceeded: unknown" Oct 2 20:32:46.737710 env[1332]: time="2023-10-02T20:32:46.737698556Z" level=warning msg="unknown status" status=0 Oct 2 20:32:48.455255 env[1332]: time="2023-10-02T20:32:48.455018604Z" level=info msg="shim disconnected" id=8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71 Oct 2 20:32:48.455255 env[1332]: time="2023-10-02T20:32:48.455083704Z" level=warning msg="cleaning up after shim disconnected" id=8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71 namespace=k8s.io Oct 2 20:32:48.455255 env[1332]: time="2023-10-02T20:32:48.455099304Z" level=info msg="cleaning up dead shim" Oct 2 20:32:48.466034 env[1332]: time="2023-10-02T20:32:48.465975961Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:32:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2877 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:32:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:32:48.466859 env[1332]: time="2023-10-02T20:32:48.466767165Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 20:32:48.467096 env[1332]: time="2023-10-02T20:32:48.467061667Z" level=error msg="Failed to pipe stdout of container \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" error="reading from a closed fifo" Oct 2 20:32:48.467184 env[1332]: time="2023-10-02T20:32:48.467119667Z" level=error msg="Failed to pipe stderr of container \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" error="reading from a closed fifo" Oct 2 20:32:48.470278 env[1332]: time="2023-10-02T20:32:48.470229284Z" level=error msg="StartContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:32:48.470470 kubelet[2498]: E1002 20:32:48.470442 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" Oct 2 20:32:48.470812 kubelet[2498]: E1002 20:32:48.470620 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:32:48.470812 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:32:48.470812 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:32:48.470812 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:32:48.471319 kubelet[2498]: E1002 20:32:48.470671 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:32:49.215588 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3239613548.mount: Deactivated successfully. Oct 2 20:32:49.430438 env[1332]: time="2023-10-02T20:32:49.430381486Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:32:49.478766 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4206772628.mount: Deactivated successfully. Oct 2 20:32:49.504069 env[1332]: time="2023-10-02T20:32:49.504022666Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" Oct 2 20:32:49.506731 env[1332]: time="2023-10-02T20:32:49.506701080Z" level=info msg="StartContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" Oct 2 20:32:49.546217 systemd[1]: Started cri-containerd-8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73.scope. Oct 2 20:32:49.560462 systemd[1]: cri-containerd-8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73.scope: Deactivated successfully. Oct 2 20:32:49.605718 env[1332]: time="2023-10-02T20:32:49.605663291Z" level=info msg="shim disconnected" id=8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73 Oct 2 20:32:49.606040 env[1332]: time="2023-10-02T20:32:49.606018293Z" level=warning msg="cleaning up after shim disconnected" id=8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73 namespace=k8s.io Oct 2 20:32:49.606144 env[1332]: time="2023-10-02T20:32:49.606130394Z" level=info msg="cleaning up dead shim" Oct 2 20:32:49.623189 env[1332]: time="2023-10-02T20:32:49.623147681Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:32:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2912 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:32:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:32:49.623578 env[1332]: time="2023-10-02T20:32:49.623523983Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 20:32:49.623884 env[1332]: time="2023-10-02T20:32:49.623845485Z" level=error msg="Failed to pipe stdout of container \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" error="reading from a closed fifo" Oct 2 20:32:49.624077 env[1332]: time="2023-10-02T20:32:49.624046786Z" level=error msg="Failed to pipe stderr of container \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" error="reading from a closed fifo" Oct 2 20:32:49.628209 env[1332]: time="2023-10-02T20:32:49.628167507Z" level=error msg="StartContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:32:49.630461 kubelet[2498]: E1002 20:32:49.628479 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73" Oct 2 20:32:49.630461 kubelet[2498]: E1002 20:32:49.628592 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:32:49.630461 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:32:49.630461 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:32:49.632195 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:32:49.632338 kubelet[2498]: E1002 20:32:49.628643 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:32:50.143644 env[1332]: time="2023-10-02T20:32:50.143602557Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:50.151326 env[1332]: time="2023-10-02T20:32:50.151288196Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:50.157428 env[1332]: time="2023-10-02T20:32:50.157398127Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:32:50.157841 env[1332]: time="2023-10-02T20:32:50.157808729Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:32:50.159926 env[1332]: time="2023-10-02T20:32:50.159887839Z" level=info msg="CreateContainer within sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:32:50.192553 env[1332]: time="2023-10-02T20:32:50.192519705Z" level=info msg="CreateContainer within sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\"" Oct 2 20:32:50.194345 env[1332]: time="2023-10-02T20:32:50.192982808Z" level=info msg="StartContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\"" Oct 2 20:32:50.211124 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount38635786.mount: Deactivated successfully. Oct 2 20:32:50.219680 systemd[1]: Started cri-containerd-eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d.scope. Oct 2 20:32:50.248702 kernel: kauditd_printk_skb: 341 callbacks suppressed Oct 2 20:32:50.248810 kernel: audit: type=1400 audit(1696278770.229:1081): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.275765 kernel: audit: type=1400 audit(1696278770.229:1082): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.275843 kernel: audit: type=1400 audit(1696278770.229:1083): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.300194 kernel: audit: type=1400 audit(1696278770.229:1084): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.300302 kernel: audit: type=1400 audit(1696278770.229:1085): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.300334 kernel: audit: type=1400 audit(1696278770.229:1086): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.325022 kernel: audit: type=1400 audit(1696278770.229:1087): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.338011 kernel: audit: type=1400 audit(1696278770.229:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.353006 kernel: audit: type=1400 audit(1696278770.229:1089): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit: BPF prog-id=125 op=LOAD Oct 2 20:32:50.370886 kernel: audit: type=1400 audit(1696278770.229:1090): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2745 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:50.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565663631393430363535386663613537316332613363353139373833 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=8 items=0 ppid=2745 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:50.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565663631393430363535386663613537316332613363353139373833 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.229000 audit: BPF prog-id=126 op=LOAD Oct 2 20:32:50.229000 audit[2934]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c0003815a0 items=0 ppid=2745 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:50.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565663631393430363535386663613537316332613363353139373833 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.247000 audit: BPF prog-id=127 op=LOAD Oct 2 20:32:50.247000 audit[2934]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0003815e8 items=0 ppid=2745 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:50.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565663631393430363535386663613537316332613363353139373833 Oct 2 20:32:50.247000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:32:50.247000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { perfmon } for pid=2934 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit[2934]: AVC avc: denied { bpf } for pid=2934 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:32:50.248000 audit: BPF prog-id=128 op=LOAD Oct 2 20:32:50.248000 audit[2934]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0003819f8 items=0 ppid=2745 pid=2934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:32:50.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565663631393430363535386663613537316332613363353139373833 Oct 2 20:32:50.359000 audit[2945]: AVC avc: denied { map_create } for pid=2945 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c446 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c446 tclass=bpf permissive=0 Oct 2 20:32:50.359000 audit[2945]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00061f7d0 a2=48 a3=c00061f7c0 items=0 ppid=2745 pid=2945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c446 key=(null) Oct 2 20:32:50.359000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:32:50.375758 env[1332]: time="2023-10-02T20:32:50.375718936Z" level=info msg="StartContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" returns successfully" Oct 2 20:32:50.435029 kubelet[2498]: I1002 20:32:50.431488 2498 scope.go:115] "RemoveContainer" containerID="8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" Oct 2 20:32:50.435029 kubelet[2498]: I1002 20:32:50.431584 2498 scope.go:115] "RemoveContainer" containerID="8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" Oct 2 20:32:50.438757 env[1332]: time="2023-10-02T20:32:50.438718156Z" level=info msg="RemoveContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" Oct 2 20:32:50.439251 env[1332]: time="2023-10-02T20:32:50.439214459Z" level=info msg="RemoveContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\"" Oct 2 20:32:50.439345 env[1332]: time="2023-10-02T20:32:50.439309659Z" level=error msg="RemoveContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\" failed" error="failed to set removing state for container \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\": container is already in removing state" Oct 2 20:32:50.440603 kubelet[2498]: E1002 20:32:50.439455 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\": container is already in removing state" containerID="8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" Oct 2 20:32:50.440603 kubelet[2498]: E1002 20:32:50.439522 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71": container is already in removing state; Skipping pod "cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)" Oct 2 20:32:50.440603 kubelet[2498]: E1002 20:32:50.439881 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:32:50.449541 env[1332]: time="2023-10-02T20:32:50.449505911Z" level=info msg="RemoveContainer for \"8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71\" returns successfully" Oct 2 20:32:50.534548 kubelet[2498]: I1002 20:32:50.534504 2498 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-kntlt" podStartSLOduration=-9.223372020320328e+09 pod.CreationTimestamp="2023-10-02 20:32:34 +0000 UTC" firstStartedPulling="2023-10-02 20:32:35.640584601 +0000 UTC m=+13.527093522" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:32:50.468139305 +0000 UTC m=+28.354648226" watchObservedRunningTime="2023-10-02 20:32:50.534448242 +0000 UTC m=+28.420957163" Oct 2 20:32:51.435378 kubelet[2498]: E1002 20:32:51.435345 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:32:51.458191 kubelet[2498]: W1002 20:32:51.458150 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71.scope WatchSource:0}: container "8171c633887199045d5be595c815b211820c271c5575574505bc733cbd860c71" in namespace "k8s.io": not found Oct 2 20:32:54.564268 kubelet[2498]: W1002 20:32:54.564223 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73.scope WatchSource:0}: task 8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73 not found: not found Oct 2 20:33:04.353331 env[1332]: time="2023-10-02T20:33:04.353130582Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:33:04.384594 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1647118531.mount: Deactivated successfully. Oct 2 20:33:04.390614 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3028553047.mount: Deactivated successfully. Oct 2 20:33:04.399561 env[1332]: time="2023-10-02T20:33:04.399524675Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" Oct 2 20:33:04.400018 env[1332]: time="2023-10-02T20:33:04.399892676Z" level=info msg="StartContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" Oct 2 20:33:04.420597 systemd[1]: Started cri-containerd-0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219.scope. Oct 2 20:33:04.430981 systemd[1]: cri-containerd-0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219.scope: Deactivated successfully. Oct 2 20:33:04.431227 systemd[1]: Stopped cri-containerd-0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219.scope. Oct 2 20:33:04.864799 env[1332]: time="2023-10-02T20:33:04.864736311Z" level=info msg="shim disconnected" id=0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219 Oct 2 20:33:04.865074 env[1332]: time="2023-10-02T20:33:04.864800511Z" level=warning msg="cleaning up after shim disconnected" id=0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219 namespace=k8s.io Oct 2 20:33:04.865074 env[1332]: time="2023-10-02T20:33:04.864813911Z" level=info msg="cleaning up dead shim" Oct 2 20:33:04.872756 env[1332]: time="2023-10-02T20:33:04.872717044Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:33:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2991 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:33:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:33:04.873019 env[1332]: time="2023-10-02T20:33:04.872954245Z" level=error msg="copy shim log" error="read /proc/self/fd/98: file already closed" Oct 2 20:33:04.874127 env[1332]: time="2023-10-02T20:33:04.874093450Z" level=error msg="Failed to pipe stdout of container \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" error="reading from a closed fifo" Oct 2 20:33:04.874255 env[1332]: time="2023-10-02T20:33:04.874087150Z" level=error msg="Failed to pipe stderr of container \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" error="reading from a closed fifo" Oct 2 20:33:04.881408 env[1332]: time="2023-10-02T20:33:04.881359880Z" level=error msg="StartContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:33:04.881615 kubelet[2498]: E1002 20:33:04.881590 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219" Oct 2 20:33:04.881959 kubelet[2498]: E1002 20:33:04.881712 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:33:04.881959 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:33:04.881959 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:33:04.881959 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:33:04.882301 kubelet[2498]: E1002 20:33:04.881762 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:05.381348 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219-rootfs.mount: Deactivated successfully. Oct 2 20:33:05.462578 kubelet[2498]: I1002 20:33:05.462550 2498 scope.go:115] "RemoveContainer" containerID="8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73" Oct 2 20:33:05.462928 kubelet[2498]: I1002 20:33:05.462904 2498 scope.go:115] "RemoveContainer" containerID="8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73" Oct 2 20:33:05.477198 env[1332]: time="2023-10-02T20:33:05.477145435Z" level=info msg="RemoveContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" Oct 2 20:33:05.477775 env[1332]: time="2023-10-02T20:33:05.477421336Z" level=info msg="RemoveContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\"" Oct 2 20:33:05.477986 env[1332]: time="2023-10-02T20:33:05.477954038Z" level=error msg="RemoveContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\" failed" error="failed to set removing state for container \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\": container is already in removing state" Oct 2 20:33:05.484335 kubelet[2498]: E1002 20:33:05.484312 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\": container is already in removing state" containerID="8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73" Oct 2 20:33:05.484439 kubelet[2498]: E1002 20:33:05.484353 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73": container is already in removing state; Skipping pod "cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)" Oct 2 20:33:05.484703 kubelet[2498]: E1002 20:33:05.484675 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:05.487489 env[1332]: time="2023-10-02T20:33:05.487459677Z" level=info msg="RemoveContainer for \"8aa2dadac475a0fe8d880d6c4fa6c50b1bac3be9f524a35ad547aefe14372a73\" returns successfully" Oct 2 20:33:07.970730 kubelet[2498]: W1002 20:33:07.970685 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219.scope WatchSource:0}: task 0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219 not found: not found Oct 2 20:33:16.348883 kubelet[2498]: E1002 20:33:16.348846 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:16.461000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:16.466519 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:33:16.466619 kernel: audit: type=1400 audit(1696278796.461:1100): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:16.461000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00100fc80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:16.504977 kernel: audit: type=1300 audit(1696278796.461:1100): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00100fc80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:16.505079 kernel: audit: type=1327 audit(1696278796.461:1100): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:16.461000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:16.462000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:16.538963 kernel: audit: type=1400 audit(1696278796.462:1101): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:16.539054 kernel: audit: type=1300 audit(1696278796.462:1101): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00110cf40 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:16.462000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00110cf40 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:16.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:16.577340 kernel: audit: type=1327 audit(1696278796.462:1101): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:17.076000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.076000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a2da570 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.114663 kernel: audit: type=1400 audit(1696278797.076:1102): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.114768 kernel: audit: type=1300 audit(1696278797.076:1102): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a2da570 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.114795 kernel: audit: type=1327 audit(1696278797.076:1102): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.076000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.077000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.148690 kernel: audit: type=1400 audit(1696278797.077:1103): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.077000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b4ff620 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.077000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.078000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.078000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009c856b0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.078000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.080000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.080000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c009c85710 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.080000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.084000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.084000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00a2da7b0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.084000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:17.084000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:17.084000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00b4ff740 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:33:17.084000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:33:20.961000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:20.961000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:20.961000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0014326a0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:20.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:20.961000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00110dd80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:20.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:20.961000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:20.961000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00110dda0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:20.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:20.962000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:33:20.962000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00110df80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:33:20.962000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:33:28.352105 env[1332]: time="2023-10-02T20:33:28.352055767Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:33:28.382287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount29662671.mount: Deactivated successfully. Oct 2 20:33:28.389213 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2747556617.mount: Deactivated successfully. Oct 2 20:33:28.400880 env[1332]: time="2023-10-02T20:33:28.400836028Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" Oct 2 20:33:28.402319 env[1332]: time="2023-10-02T20:33:28.402291433Z" level=info msg="StartContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" Oct 2 20:33:28.422410 systemd[1]: Started cri-containerd-c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed.scope. Oct 2 20:33:28.433277 systemd[1]: cri-containerd-c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed.scope: Deactivated successfully. Oct 2 20:33:28.433605 systemd[1]: Stopped cri-containerd-c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed.scope. Oct 2 20:33:28.481810 env[1332]: time="2023-10-02T20:33:28.481752194Z" level=info msg="shim disconnected" id=c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed Oct 2 20:33:28.481810 env[1332]: time="2023-10-02T20:33:28.481807894Z" level=warning msg="cleaning up after shim disconnected" id=c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed namespace=k8s.io Oct 2 20:33:28.482112 env[1332]: time="2023-10-02T20:33:28.481819294Z" level=info msg="cleaning up dead shim" Oct 2 20:33:28.489866 env[1332]: time="2023-10-02T20:33:28.489808220Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:33:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3032 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:33:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:33:28.490149 env[1332]: time="2023-10-02T20:33:28.490091421Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:33:28.493145 env[1332]: time="2023-10-02T20:33:28.493099431Z" level=error msg="Failed to pipe stdout of container \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" error="reading from a closed fifo" Oct 2 20:33:28.493263 env[1332]: time="2023-10-02T20:33:28.493112831Z" level=error msg="Failed to pipe stderr of container \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" error="reading from a closed fifo" Oct 2 20:33:28.497252 env[1332]: time="2023-10-02T20:33:28.497214744Z" level=error msg="StartContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:33:28.497451 kubelet[2498]: E1002 20:33:28.497432 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed" Oct 2 20:33:28.497802 kubelet[2498]: E1002 20:33:28.497556 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:33:28.497802 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:33:28.497802 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:33:28.497802 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:33:28.498117 kubelet[2498]: E1002 20:33:28.497603 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:28.504020 kubelet[2498]: I1002 20:33:28.503485 2498 scope.go:115] "RemoveContainer" containerID="0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219" Oct 2 20:33:28.504147 kubelet[2498]: I1002 20:33:28.504134 2498 scope.go:115] "RemoveContainer" containerID="0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219" Oct 2 20:33:28.511007 env[1332]: time="2023-10-02T20:33:28.506986777Z" level=info msg="RemoveContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" Oct 2 20:33:28.511007 env[1332]: time="2023-10-02T20:33:28.507403878Z" level=info msg="RemoveContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\"" Oct 2 20:33:28.511007 env[1332]: time="2023-10-02T20:33:28.507494378Z" level=error msg="RemoveContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\" failed" error="failed to set removing state for container \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\": container is already in removing state" Oct 2 20:33:28.511163 kubelet[2498]: E1002 20:33:28.507719 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\": container is already in removing state" containerID="0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219" Oct 2 20:33:28.511163 kubelet[2498]: E1002 20:33:28.507747 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219": container is already in removing state; Skipping pod "cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)" Oct 2 20:33:28.511163 kubelet[2498]: E1002 20:33:28.508069 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:28.516519 env[1332]: time="2023-10-02T20:33:28.516480608Z" level=info msg="RemoveContainer for \"0f172feeea37158563fba00d959da05d71b7c39f2f14868b0f4cc9a74c0ae219\" returns successfully" Oct 2 20:33:29.379801 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed-rootfs.mount: Deactivated successfully. Oct 2 20:33:31.587276 kubelet[2498]: W1002 20:33:31.587228 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed.scope WatchSource:0}: task c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed not found: not found Oct 2 20:33:41.349459 kubelet[2498]: E1002 20:33:41.349089 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:33:56.348826 kubelet[2498]: E1002 20:33:56.348390 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:09.350886 env[1332]: time="2023-10-02T20:34:09.350681854Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:34:09.383499 env[1332]: time="2023-10-02T20:34:09.383450379Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" Oct 2 20:34:09.385161 env[1332]: time="2023-10-02T20:34:09.384208689Z" level=info msg="StartContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" Oct 2 20:34:09.412404 systemd[1]: Started cri-containerd-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18.scope. Oct 2 20:34:09.423133 systemd[1]: cri-containerd-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18.scope: Deactivated successfully. Oct 2 20:34:09.423434 systemd[1]: Stopped cri-containerd-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18.scope. Oct 2 20:34:09.448270 env[1332]: time="2023-10-02T20:34:09.448214019Z" level=info msg="shim disconnected" id=f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18 Oct 2 20:34:09.448494 env[1332]: time="2023-10-02T20:34:09.448271819Z" level=warning msg="cleaning up after shim disconnected" id=f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18 namespace=k8s.io Oct 2 20:34:09.448494 env[1332]: time="2023-10-02T20:34:09.448285819Z" level=info msg="cleaning up dead shim" Oct 2 20:34:09.460384 env[1332]: time="2023-10-02T20:34:09.460331076Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:34:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3075 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:34:09Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:34:09.460684 env[1332]: time="2023-10-02T20:34:09.460616879Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:34:09.461111 env[1332]: time="2023-10-02T20:34:09.461071485Z" level=error msg="Failed to pipe stdout of container \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" error="reading from a closed fifo" Oct 2 20:34:09.461724 env[1332]: time="2023-10-02T20:34:09.461689893Z" level=error msg="Failed to pipe stderr of container \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" error="reading from a closed fifo" Oct 2 20:34:09.465708 env[1332]: time="2023-10-02T20:34:09.465665245Z" level=error msg="StartContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:34:09.465888 kubelet[2498]: E1002 20:34:09.465867 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18" Oct 2 20:34:09.466274 kubelet[2498]: E1002 20:34:09.466040 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:34:09.466274 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:34:09.466274 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:34:09.466274 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:34:09.466490 kubelet[2498]: E1002 20:34:09.466097 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:09.573326 kubelet[2498]: I1002 20:34:09.573290 2498 scope.go:115] "RemoveContainer" containerID="c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed" Oct 2 20:34:09.574680 kubelet[2498]: I1002 20:34:09.573756 2498 scope.go:115] "RemoveContainer" containerID="c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed" Oct 2 20:34:09.576742 env[1332]: time="2023-10-02T20:34:09.576688884Z" level=info msg="RemoveContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" Oct 2 20:34:09.581020 env[1332]: time="2023-10-02T20:34:09.578358006Z" level=info msg="RemoveContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\"" Oct 2 20:34:09.581020 env[1332]: time="2023-10-02T20:34:09.578462707Z" level=error msg="RemoveContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\" failed" error="failed to set removing state for container \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\": container is already in removing state" Oct 2 20:34:09.581212 kubelet[2498]: E1002 20:34:09.578634 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\": container is already in removing state" containerID="c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed" Oct 2 20:34:09.581212 kubelet[2498]: I1002 20:34:09.578668 2498 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed} err="rpc error: code = Unknown desc = failed to set removing state for container \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\": container is already in removing state" Oct 2 20:34:09.589316 env[1332]: time="2023-10-02T20:34:09.589276847Z" level=info msg="RemoveContainer for \"c613ae96f3d95b17487027c33868f3e5c72a1371bc0a7616b5072007fa76deed\" returns successfully" Oct 2 20:34:09.590196 kubelet[2498]: E1002 20:34:09.590175 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:10.373933 systemd[1]: run-containerd-runc-k8s.io-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18-runc.rL671K.mount: Deactivated successfully. Oct 2 20:34:10.374123 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18-rootfs.mount: Deactivated successfully. Oct 2 20:34:12.553260 kubelet[2498]: W1002 20:34:12.553211 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18.scope WatchSource:0}: task f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18 not found: not found Oct 2 20:34:16.462000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:16.467701 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:34:16.467808 kernel: audit: type=1400 audit(1696278856.462:1112): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:16.485012 kernel: audit: type=1300 audit(1696278856.462:1112): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020fc510 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:16.462000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020fc510 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:16.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:16.523867 kernel: audit: type=1327 audit(1696278856.462:1112): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:16.472000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:16.472000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00236ade0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:16.561462 kernel: audit: type=1400 audit(1696278856.472:1113): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:16.561549 kernel: audit: type=1300 audit(1696278856.472:1113): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00236ade0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:16.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:16.562012 kernel: audit: type=1327 audit(1696278856.472:1113): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:17.078000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.078000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.112125 kernel: audit: type=1400 audit(1696278857.078:1115): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.112258 kernel: audit: type=1400 audit(1696278857.078:1114): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.112285 kernel: audit: type=1300 audit(1696278857.078:1115): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0101bacf0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.078000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0101bacf0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.078000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.147704 kernel: audit: type=1327 audit(1696278857.078:1115): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.078000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c010134c80 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.078000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.079000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.079000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c01011d5f0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c01011d710 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.085000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.085000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c010134e40 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.085000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:17.085000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:17.085000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c01011d830 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:34:17.085000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:34:20.962000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:20.962000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:20.962000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00236b7e0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:20.962000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0022fcc60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:20.962000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:20.962000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:20.962000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:20.962000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0022fcc80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:20.962000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:20.963000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:34:20.963000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00236b900 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:34:20.963000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:34:22.241880 kubelet[2498]: E1002 20:34:22.241837 2498 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:34:22.407413 kubelet[2498]: E1002 20:34:22.407386 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:23.348777 kubelet[2498]: E1002 20:34:23.348732 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:27.408851 kubelet[2498]: E1002 20:34:27.408812 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:32.409510 kubelet[2498]: E1002 20:34:32.409472 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:37.410943 kubelet[2498]: E1002 20:34:37.410905 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:38.348439 kubelet[2498]: E1002 20:34:38.348401 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:42.412286 kubelet[2498]: E1002 20:34:42.412254 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:47.413572 kubelet[2498]: E1002 20:34:47.413538 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:50.349178 kubelet[2498]: E1002 20:34:50.349142 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:34:52.414172 kubelet[2498]: E1002 20:34:52.414133 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:34:57.414910 kubelet[2498]: E1002 20:34:57.414873 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:02.416128 kubelet[2498]: E1002 20:35:02.416096 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:03.068636 systemd[1]: Started sshd@7-10.200.8.15:22-10.200.12.6:42646.service. Oct 2 20:35:03.093092 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:35:03.093216 kernel: audit: type=1130 audit(1696278903.067:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:42646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:03.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:42646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:03.696000 audit[3093]: USER_ACCT pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.697587 sshd[3093]: Accepted publickey for core from 10.200.12.6 port 42646 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:03.699303 sshd[3093]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:03.716111 kernel: audit: type=1101 audit(1696278903.696:1125): pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.716148 kernel: audit: type=1103 audit(1696278903.696:1126): pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.696000 audit[3093]: CRED_ACQ pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.721244 systemd[1]: Started session-10.scope. Oct 2 20:35:03.722350 systemd-logind[1315]: New session 10 of user core. Oct 2 20:35:03.741026 kernel: audit: type=1006 audit(1696278903.696:1127): pid=3093 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:35:03.696000 audit[3093]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe81a43fb0 a2=3 a3=0 items=0 ppid=1 pid=3093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:03.760348 kernel: audit: type=1300 audit(1696278903.696:1127): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe81a43fb0 a2=3 a3=0 items=0 ppid=1 pid=3093 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:03.760430 kernel: audit: type=1327 audit(1696278903.696:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:03.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:03.725000 audit[3093]: USER_START pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.784788 kernel: audit: type=1105 audit(1696278903.725:1128): pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.784862 kernel: audit: type=1103 audit(1696278903.725:1129): pid=3095 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:03.725000 audit[3095]: CRED_ACQ pid=3095 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:04.281423 sshd[3093]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:04.281000 audit[3093]: USER_END pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:04.284668 systemd[1]: sshd@7-10.200.8.15:22-10.200.12.6:42646.service: Deactivated successfully. Oct 2 20:35:04.285548 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:35:04.287399 systemd-logind[1315]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:35:04.288482 systemd-logind[1315]: Removed session 10. Oct 2 20:35:04.281000 audit[3093]: CRED_DISP pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:04.317602 kernel: audit: type=1106 audit(1696278904.281:1130): pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:04.317687 kernel: audit: type=1104 audit(1696278904.281:1131): pid=3093 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:04.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.200.8.15:22-10.200.12.6:42646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:05.348812 kubelet[2498]: E1002 20:35:05.348707 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:07.417951 kubelet[2498]: E1002 20:35:07.417920 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:12.419288 kubelet[2498]: E1002 20:35:12.419246 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:14.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:54500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:14.389859 systemd[1]: Started sshd@8-10.200.8.15:22-10.200.12.6:54500.service. Oct 2 20:35:14.395435 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:14.395514 kernel: audit: type=1130 audit(1696278914.389:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:54500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:15.022000 audit[3108]: USER_ACCT pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.042143 kernel: audit: type=1101 audit(1696278915.022:1134): pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.025094 sshd[3108]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:15.023000 audit[3108]: CRED_ACQ pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.042517 sshd[3108]: Accepted publickey for core from 10.200.12.6 port 54500 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:15.047415 systemd[1]: Started session-11.scope. Oct 2 20:35:15.048035 systemd-logind[1315]: New session 11 of user core. Oct 2 20:35:15.068479 kernel: audit: type=1103 audit(1696278915.023:1135): pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.068565 kernel: audit: type=1006 audit(1696278915.023:1136): pid=3108 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:35:15.023000 audit[3108]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcba9974c0 a2=3 a3=0 items=0 ppid=1 pid=3108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:15.069008 kernel: audit: type=1300 audit(1696278915.023:1136): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcba9974c0 a2=3 a3=0 items=0 ppid=1 pid=3108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:15.023000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:15.091362 kernel: audit: type=1327 audit(1696278915.023:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:15.052000 audit[3108]: USER_START pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.092081 kernel: audit: type=1105 audit(1696278915.052:1137): pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.052000 audit[3110]: CRED_ACQ pid=3110 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.125306 kernel: audit: type=1103 audit(1696278915.052:1138): pid=3110 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.518179 sshd[3108]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:15.518000 audit[3108]: USER_END pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.521661 systemd[1]: sshd@8-10.200.8.15:22-10.200.12.6:54500.service: Deactivated successfully. Oct 2 20:35:15.522536 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:35:15.524424 systemd-logind[1315]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:35:15.525533 systemd-logind[1315]: Removed session 11. Oct 2 20:35:15.519000 audit[3108]: CRED_DISP pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.554746 kernel: audit: type=1106 audit(1696278915.518:1139): pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.554829 kernel: audit: type=1104 audit(1696278915.519:1140): pid=3108 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:15.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.200.8.15:22-10.200.12.6:54500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:16.463000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:16.463000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebf500 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:16.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:16.472000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:16.472000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d4ff20 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:16.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:17.079000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.079000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.079000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ac213b0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.079000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c003e609a0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.080000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.080000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00aca9ce0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.080000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.082000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.082000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ac21530 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.082000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.085000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.085000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:17.085000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c003e60a80 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.085000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.085000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ac21560 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:35:17.085000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:35:17.420868 kubelet[2498]: E1002 20:35:17.420839 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:20.349729 kubelet[2498]: E1002 20:35:20.349065 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:20.964000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:20.969381 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:35:20.969476 kernel: audit: type=1400 audit(1696278920.964:1151): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:20.964000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:21.001159 kernel: audit: type=1400 audit(1696278920.964:1150): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:21.001243 kernel: audit: type=1300 audit(1696278920.964:1151): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc060 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:20.964000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc060 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:21.023120 kernel: audit: type=1327 audit(1696278920.964:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:20.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:20.965000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:21.055679 kernel: audit: type=1400 audit(1696278920.965:1152): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:21.055752 kernel: audit: type=1300 audit(1696278920.965:1152): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc440 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:20.965000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc440 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:21.078209 kernel: audit: type=1327 audit(1696278920.965:1152): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:20.965000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:21.094510 kernel: audit: type=1400 audit(1696278920.965:1153): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:20.965000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:35:21.110019 kernel: audit: type=1300 audit(1696278920.965:1153): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc4c0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:20.965000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc4c0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:20.965000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:21.132011 kernel: audit: type=1327 audit(1696278920.965:1153): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:20.964000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000cd8940 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:35:20.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:35:22.422021 kubelet[2498]: E1002 20:35:22.421979 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:25.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:58270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:25.625322 systemd[1]: Started sshd@9-10.200.8.15:22-10.200.12.6:58270.service. Oct 2 20:35:26.277000 audit[3123]: USER_ACCT pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.278356 sshd[3123]: Accepted publickey for core from 10.200.12.6 port 58270 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:26.282894 kernel: kauditd_printk_skb: 3 callbacks suppressed Oct 2 20:35:26.282976 kernel: audit: type=1101 audit(1696278926.277:1155): pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.283476 sshd[3123]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:26.288603 systemd[1]: Started session-12.scope. Oct 2 20:35:26.289962 systemd-logind[1315]: New session 12 of user core. Oct 2 20:35:26.282000 audit[3123]: CRED_ACQ pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.302129 kernel: audit: type=1103 audit(1696278926.282:1156): pid=3123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.317021 kernel: audit: type=1006 audit(1696278926.282:1157): pid=3123 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:35:26.282000 audit[3123]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4c2883f0 a2=3 a3=0 items=0 ppid=1 pid=3123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:26.344209 kernel: audit: type=1300 audit(1696278926.282:1157): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4c2883f0 a2=3 a3=0 items=0 ppid=1 pid=3123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:26.282000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:26.345016 kernel: audit: type=1327 audit(1696278926.282:1157): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:26.295000 audit[3123]: USER_START pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.369139 kernel: audit: type=1105 audit(1696278926.295:1158): pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.369201 kernel: audit: type=1103 audit(1696278926.297:1159): pid=3125 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.297000 audit[3125]: CRED_ACQ pid=3125 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.779587 sshd[3123]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:26.780000 audit[3123]: USER_END pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.783026 systemd[1]: sshd@9-10.200.8.15:22-10.200.12.6:58270.service: Deactivated successfully. Oct 2 20:35:26.783887 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:35:26.785744 systemd-logind[1315]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:35:26.786845 systemd-logind[1315]: Removed session 12. Oct 2 20:35:26.780000 audit[3123]: CRED_DISP pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.802023 kernel: audit: type=1106 audit(1696278926.780:1160): pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.802073 kernel: audit: type=1104 audit(1696278926.780:1161): pid=3123 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:26.817083 kernel: audit: type=1131 audit(1696278926.780:1162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:58270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:26.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.200.8.15:22-10.200.12.6:58270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:27.423280 kubelet[2498]: E1002 20:35:27.423252 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:31.351357 env[1332]: time="2023-10-02T20:35:31.351272679Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:35:31.385459 env[1332]: time="2023-10-02T20:35:31.385367198Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" Oct 2 20:35:31.386365 env[1332]: time="2023-10-02T20:35:31.386331005Z" level=info msg="StartContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" Oct 2 20:35:31.411496 systemd[1]: Started cri-containerd-82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba.scope. Oct 2 20:35:31.422814 systemd[1]: cri-containerd-82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba.scope: Deactivated successfully. Oct 2 20:35:31.439570 env[1332]: time="2023-10-02T20:35:31.439522247Z" level=info msg="shim disconnected" id=82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba Oct 2 20:35:31.439841 env[1332]: time="2023-10-02T20:35:31.439572047Z" level=warning msg="cleaning up after shim disconnected" id=82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba namespace=k8s.io Oct 2 20:35:31.439841 env[1332]: time="2023-10-02T20:35:31.439584447Z" level=info msg="cleaning up dead shim" Oct 2 20:35:31.446959 env[1332]: time="2023-10-02T20:35:31.446913195Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:35:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3159 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:35:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:35:31.447218 env[1332]: time="2023-10-02T20:35:31.447162296Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:35:31.448110 env[1332]: time="2023-10-02T20:35:31.448067802Z" level=error msg="Failed to pipe stdout of container \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" error="reading from a closed fifo" Oct 2 20:35:31.448182 env[1332]: time="2023-10-02T20:35:31.448082502Z" level=error msg="Failed to pipe stderr of container \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" error="reading from a closed fifo" Oct 2 20:35:31.453120 env[1332]: time="2023-10-02T20:35:31.453075434Z" level=error msg="StartContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:35:31.453820 kubelet[2498]: E1002 20:35:31.453368 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba" Oct 2 20:35:31.453820 kubelet[2498]: E1002 20:35:31.453473 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:35:31.453820 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:35:31.453820 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:35:31.454244 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:35:31.454306 kubelet[2498]: E1002 20:35:31.453518 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:31.728146 kubelet[2498]: I1002 20:35:31.728040 2498 scope.go:115] "RemoveContainer" containerID="f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18" Oct 2 20:35:31.729165 kubelet[2498]: I1002 20:35:31.729142 2498 scope.go:115] "RemoveContainer" containerID="f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18" Oct 2 20:35:31.730301 env[1332]: time="2023-10-02T20:35:31.730263919Z" level=info msg="RemoveContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" Oct 2 20:35:31.731459 env[1332]: time="2023-10-02T20:35:31.731428027Z" level=info msg="RemoveContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\"" Oct 2 20:35:31.731571 env[1332]: time="2023-10-02T20:35:31.731523328Z" level=error msg="RemoveContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\" failed" error="failed to set removing state for container \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\": container is already in removing state" Oct 2 20:35:31.731871 kubelet[2498]: E1002 20:35:31.731846 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\": container is already in removing state" containerID="f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18" Oct 2 20:35:31.731871 kubelet[2498]: E1002 20:35:31.731879 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18": container is already in removing state; Skipping pod "cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)" Oct 2 20:35:31.732318 kubelet[2498]: E1002 20:35:31.732291 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:31.740999 env[1332]: time="2023-10-02T20:35:31.740946888Z" level=info msg="RemoveContainer for \"f237924daa261012c9303903181fa9a9c19ddba91e70f4522c56bee188d05a18\" returns successfully" Oct 2 20:35:32.375365 systemd[1]: run-containerd-runc-k8s.io-82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba-runc.DDSGFq.mount: Deactivated successfully. Oct 2 20:35:32.375508 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba-rootfs.mount: Deactivated successfully. Oct 2 20:35:32.424763 kubelet[2498]: E1002 20:35:32.424721 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:34.544717 kubelet[2498]: W1002 20:35:34.544669 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba.scope WatchSource:0}: task 82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba not found: not found Oct 2 20:35:36.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:57926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:36.905956 kernel: audit: type=1130 audit(1696278936.884:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:57926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:36.884973 systemd[1]: Started sshd@10-10.200.8.15:22-10.200.12.6:57926.service. Oct 2 20:35:37.425829 kubelet[2498]: E1002 20:35:37.425765 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:37.509000 audit[3175]: USER_ACCT pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.530495 sshd[3175]: Accepted publickey for core from 10.200.12.6 port 57926 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:37.529000 audit[3175]: CRED_ACQ pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.530969 sshd[3175]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:37.537642 systemd[1]: Started session-13.scope. Oct 2 20:35:37.538738 systemd-logind[1315]: New session 13 of user core. Oct 2 20:35:37.548980 kernel: audit: type=1101 audit(1696278937.509:1164): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.549131 kernel: audit: type=1103 audit(1696278937.529:1165): pid=3175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.529000 audit[3175]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb55f2ce0 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:37.562127 kernel: audit: type=1006 audit(1696278937.529:1166): pid=3175 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:35:37.562162 kernel: audit: type=1300 audit(1696278937.529:1166): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb55f2ce0 a2=3 a3=0 items=0 ppid=1 pid=3175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:37.579302 kernel: audit: type=1327 audit(1696278937.529:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:37.529000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:37.543000 audit[3175]: USER_START pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.585051 kernel: audit: type=1105 audit(1696278937.543:1167): pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.550000 audit[3178]: CRED_ACQ pid=3178 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:37.617949 kernel: audit: type=1103 audit(1696278937.550:1168): pid=3178 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:38.004378 sshd[3175]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:38.005000 audit[3175]: USER_END pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:38.007954 systemd[1]: sshd@10-10.200.8.15:22-10.200.12.6:57926.service: Deactivated successfully. Oct 2 20:35:38.008847 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:35:38.010518 systemd-logind[1315]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:35:38.011607 systemd-logind[1315]: Removed session 13. Oct 2 20:35:38.005000 audit[3175]: CRED_DISP pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:38.026009 kernel: audit: type=1106 audit(1696278938.005:1169): pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:38.026050 kernel: audit: type=1104 audit(1696278938.005:1170): pid=3175 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:38.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.200.8.15:22-10.200.12.6:57926 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:42.426576 kubelet[2498]: E1002 20:35:42.426544 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:46.350497 kubelet[2498]: E1002 20:35:46.350458 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:47.428591 kubelet[2498]: E1002 20:35:47.428547 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:48.133064 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:48.133206 kernel: audit: type=1130 audit(1696278948.110:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:55066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:48.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:55066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:48.111151 systemd[1]: Started sshd@11-10.200.8.15:22-10.200.12.6:55066.service. Oct 2 20:35:48.740000 audit[3191]: USER_ACCT pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.741781 sshd[3191]: Accepted publickey for core from 10.200.12.6 port 55066 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:35:48.761015 kernel: audit: type=1101 audit(1696278948.740:1173): pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.761672 sshd[3191]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:48.760000 audit[3191]: CRED_ACQ pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.767267 systemd[1]: Started session-14.scope. Oct 2 20:35:48.768036 systemd-logind[1315]: New session 14 of user core. Oct 2 20:35:48.788532 kernel: audit: type=1103 audit(1696278948.760:1174): pid=3191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.788614 kernel: audit: type=1006 audit(1696278948.760:1175): pid=3191 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:35:48.760000 audit[3191]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd056d1730 a2=3 a3=0 items=0 ppid=1 pid=3191 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:48.789012 kernel: audit: type=1300 audit(1696278948.760:1175): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd056d1730 a2=3 a3=0 items=0 ppid=1 pid=3191 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:35:48.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:48.807008 kernel: audit: type=1327 audit(1696278948.760:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:48.772000 audit[3191]: USER_START pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.774000 audit[3193]: CRED_ACQ pid=3193 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.845434 kernel: audit: type=1105 audit(1696278948.772:1176): pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:48.845511 kernel: audit: type=1103 audit(1696278948.774:1177): pid=3193 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:49.238527 sshd[3191]: pam_unix(sshd:session): session closed for user core Oct 2 20:35:49.239000 audit[3191]: USER_END pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:49.242008 systemd[1]: sshd@11-10.200.8.15:22-10.200.12.6:55066.service: Deactivated successfully. Oct 2 20:35:49.242714 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:35:49.243974 systemd-logind[1315]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:35:49.244842 systemd-logind[1315]: Removed session 14. Oct 2 20:35:49.261036 kernel: audit: type=1106 audit(1696278949.239:1178): pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:49.261102 kernel: audit: type=1104 audit(1696278949.239:1179): pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:49.239000 audit[3191]: CRED_DISP pid=3191 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:49.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.200.8.15:22-10.200.12.6:55066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:52.429678 kubelet[2498]: E1002 20:35:52.429644 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:57.431342 kubelet[2498]: E1002 20:35:57.431302 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:35:58.348711 kubelet[2498]: E1002 20:35:58.348666 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:35:59.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:59.344271 systemd[1]: Started sshd@12-10.200.8.15:22-10.200.12.6:49500.service. Oct 2 20:35:59.349228 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:35:59.349296 kernel: audit: type=1130 audit(1696278959.343:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:35:59.978000 audit[3209]: USER_ACCT pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:59.980000 audit[3209]: CRED_ACQ pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:35:59.981456 sshd[3209]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:35:59.999137 sshd[3209]: Accepted publickey for core from 10.200.12.6 port 49500 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:00.004112 systemd[1]: Started session-15.scope. Oct 2 20:36:00.005240 systemd-logind[1315]: New session 15 of user core. Oct 2 20:36:00.015228 kernel: audit: type=1101 audit(1696278959.978:1182): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.015295 kernel: audit: type=1103 audit(1696278959.980:1183): pid=3209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.015319 kernel: audit: type=1006 audit(1696278959.980:1184): pid=3209 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:35:59.980000 audit[3209]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee50aa1a0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:00.042724 kernel: audit: type=1300 audit(1696278959.980:1184): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee50aa1a0 a2=3 a3=0 items=0 ppid=1 pid=3209 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:00.042803 kernel: audit: type=1327 audit(1696278959.980:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 20:35:59.980000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:00.049172 kernel: audit: type=1105 audit(1696278960.010:1185): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.010000 audit[3209]: USER_START pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.067067 kernel: audit: type=1103 audit(1696278960.012:1186): pid=3211 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.012000 audit[3211]: CRED_ACQ pid=3211 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.674236 sshd[3209]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:00.675000 audit[3209]: USER_END pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.678127 systemd[1]: sshd@12-10.200.8.15:22-10.200.12.6:49500.service: Deactivated successfully. Oct 2 20:36:00.678987 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:36:00.680723 systemd-logind[1315]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:36:00.681744 systemd-logind[1315]: Removed session 15. Oct 2 20:36:00.675000 audit[3209]: CRED_DISP pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.696015 kernel: audit: type=1106 audit(1696278960.675:1187): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.696058 kernel: audit: type=1104 audit(1696278960.675:1188): pid=3209 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:00.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.200.8.15:22-10.200.12.6:49500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:02.432172 kubelet[2498]: E1002 20:36:02.432140 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:07.433686 kubelet[2498]: E1002 20:36:07.433651 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:10.348959 kubelet[2498]: E1002 20:36:10.348925 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:36:10.776237 systemd[1]: Started sshd@13-10.200.8.15:22-10.200.12.6:35666.service. Oct 2 20:36:10.805857 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:10.805949 kernel: audit: type=1130 audit(1696278970.776:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:35666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:10.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:35666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:11.408000 audit[3225]: USER_ACCT pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.435106 kernel: audit: type=1101 audit(1696278971.408:1191): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.435160 sshd[3225]: Accepted publickey for core from 10.200.12.6 port 35666 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:11.434000 audit[3225]: CRED_ACQ pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.435714 sshd[3225]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:11.440642 systemd[1]: Started session-16.scope. Oct 2 20:36:11.441700 systemd-logind[1315]: New session 16 of user core. Oct 2 20:36:11.459008 kernel: audit: type=1103 audit(1696278971.434:1192): pid=3225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.459079 kernel: audit: type=1006 audit(1696278971.434:1193): pid=3225 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:36:11.434000 audit[3225]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe42f9f970 a2=3 a3=0 items=0 ppid=1 pid=3225 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:11.472100 kernel: audit: type=1300 audit(1696278971.434:1193): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe42f9f970 a2=3 a3=0 items=0 ppid=1 pid=3225 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:11.495244 kernel: audit: type=1327 audit(1696278971.434:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:11.434000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:11.446000 audit[3225]: USER_START pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.503016 kernel: audit: type=1105 audit(1696278971.446:1194): pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.452000 audit[3227]: CRED_ACQ pid=3227 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.529010 kernel: audit: type=1103 audit(1696278971.452:1195): pid=3227 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.928365 sshd[3225]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:11.928000 audit[3225]: USER_END pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.931593 systemd[1]: sshd@13-10.200.8.15:22-10.200.12.6:35666.service: Deactivated successfully. Oct 2 20:36:11.932356 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:36:11.933851 systemd-logind[1315]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:36:11.934726 systemd-logind[1315]: Removed session 16. Oct 2 20:36:11.929000 audit[3225]: CRED_DISP pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.977284 kernel: audit: type=1106 audit(1696278971.928:1196): pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.977368 kernel: audit: type=1104 audit(1696278971.929:1197): pid=3225 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:11.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.200.8.15:22-10.200.12.6:35666 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:12.435803 kubelet[2498]: E1002 20:36:12.435766 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:16.464000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:16.470220 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:16.470308 kernel: audit: type=1400 audit(1696278976.464:1199): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:16.464000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002141d40 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:16.522040 kernel: audit: type=1300 audit(1696278976.464:1199): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002141d40 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:16.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:16.546472 kernel: audit: type=1327 audit(1696278976.464:1199): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:16.546551 kernel: audit: type=1400 audit(1696278976.473:1200): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:16.473000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:16.473000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025ad280 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:16.597091 kernel: audit: type=1300 audit(1696278976.473:1200): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025ad280 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:16.597162 kernel: audit: type=1327 audit(1696278976.473:1200): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:16.473000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:17.080000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.103012 kernel: audit: type=1400 audit(1696278977.080:1201): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.080000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.080000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c004095f20 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.150721 kernel: audit: type=1400 audit(1696278977.080:1202): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.150840 kernel: audit: type=1300 audit(1696278977.080:1202): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c004095f20 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.080000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.080000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00af9c420 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.080000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00c759590 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.083000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.083000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00c7599b0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.083000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.086000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.086000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00af9c480 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.086000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.086000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:17.086000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c004196140 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:36:17.086000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.176013 kernel: audit: type=1327 audit(1696278977.080:1202): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:36:17.436540 kubelet[2498]: E1002 20:36:17.436499 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:20.966000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:20.966000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:20.966000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0025adb80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:20.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:20.966000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020858e0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:20.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:20.966000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:20.966000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002085900 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:20.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:20.967000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:36:20.967000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025adca0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:36:20.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:36:22.063787 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:36:22.063900 kernel: audit: type=1130 audit(1696278982.033:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:22.034580 systemd[1]: Started sshd@14-10.200.8.15:22-10.200.12.6:49842.service. Oct 2 20:36:22.437576 kubelet[2498]: E1002 20:36:22.437542 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:22.667000 audit[3238]: USER_ACCT pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.669131 sshd[3238]: Accepted publickey for core from 10.200.12.6 port 49842 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:22.693000 audit[3238]: CRED_ACQ pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.695130 sshd[3238]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:22.699950 systemd[1]: Started session-17.scope. Oct 2 20:36:22.701008 systemd-logind[1315]: New session 17 of user core. Oct 2 20:36:22.716372 kernel: audit: type=1101 audit(1696278982.667:1212): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.716461 kernel: audit: type=1103 audit(1696278982.693:1213): pid=3238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.730575 kernel: audit: type=1006 audit(1696278982.693:1214): pid=3238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:36:22.693000 audit[3238]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc63522a60 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:22.754123 kernel: audit: type=1300 audit(1696278982.693:1214): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc63522a60 a2=3 a3=0 items=0 ppid=1 pid=3238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:22.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:22.755014 kernel: audit: type=1327 audit(1696278982.693:1214): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:22.705000 audit[3238]: USER_START pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.787815 kernel: audit: type=1105 audit(1696278982.705:1215): pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.787898 kernel: audit: type=1103 audit(1696278982.707:1216): pid=3242 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:22.707000 audit[3242]: CRED_ACQ pid=3242 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:23.372448 sshd[3238]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:23.373000 audit[3238]: USER_END pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:23.375957 systemd-logind[1315]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:36:23.377214 systemd[1]: sshd@14-10.200.8.15:22-10.200.12.6:49842.service: Deactivated successfully. Oct 2 20:36:23.377901 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:36:23.379101 systemd-logind[1315]: Removed session 17. Oct 2 20:36:23.373000 audit[3238]: CRED_DISP pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:23.423273 kernel: audit: type=1106 audit(1696278983.373:1217): pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:23.423382 kernel: audit: type=1104 audit(1696278983.373:1218): pid=3238 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:23.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.200.8.15:22-10.200.12.6:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:25.348301 kubelet[2498]: E1002 20:36:25.348255 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:36:27.438786 kubelet[2498]: E1002 20:36:27.438749 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:32.439790 kubelet[2498]: E1002 20:36:32.439750 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:33.504737 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:33.504907 kernel: audit: type=1130 audit(1696278993.476:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:58040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:33.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:58040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:33.477572 systemd[1]: Started sshd@15-10.200.8.15:22-10.200.12.6:58040.service. Oct 2 20:36:34.103000 audit[3252]: USER_ACCT pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.104776 sshd[3252]: Accepted publickey for core from 10.200.12.6 port 58040 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:34.129000 audit[3252]: CRED_ACQ pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.130868 sshd[3252]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:34.135682 systemd[1]: Started session-18.scope. Oct 2 20:36:34.137108 systemd-logind[1315]: New session 18 of user core. Oct 2 20:36:34.152084 kernel: audit: type=1101 audit(1696278994.103:1221): pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.152182 kernel: audit: type=1103 audit(1696278994.129:1222): pid=3252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.167046 kernel: audit: type=1006 audit(1696278994.129:1223): pid=3252 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Oct 2 20:36:34.167136 kernel: audit: type=1300 audit(1696278994.129:1223): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfff65b90 a2=3 a3=0 items=0 ppid=1 pid=3252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:34.129000 audit[3252]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfff65b90 a2=3 a3=0 items=0 ppid=1 pid=3252 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:34.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:34.191009 kernel: audit: type=1327 audit(1696278994.129:1223): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:34.141000 audit[3252]: USER_START pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.199024 kernel: audit: type=1105 audit(1696278994.141:1224): pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.142000 audit[3254]: CRED_ACQ pid=3254 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.243802 kernel: audit: type=1103 audit(1696278994.142:1225): pid=3254 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.629659 sshd[3252]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:34.630000 audit[3252]: USER_END pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.633300 systemd-logind[1315]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:36:34.634951 systemd[1]: sshd@15-10.200.8.15:22-10.200.12.6:58040.service: Deactivated successfully. Oct 2 20:36:34.635778 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:36:34.637455 systemd-logind[1315]: Removed session 18. Oct 2 20:36:34.658019 kernel: audit: type=1106 audit(1696278994.630:1226): pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.658101 kernel: audit: type=1104 audit(1696278994.630:1227): pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.630000 audit[3252]: CRED_DISP pid=3252 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:34.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.200.8.15:22-10.200.12.6:58040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:36.348610 kubelet[2498]: E1002 20:36:36.348507 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:36:37.440639 kubelet[2498]: E1002 20:36:37.440605 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:42.441593 kubelet[2498]: E1002 20:36:42.441543 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:44.757698 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:36:44.757830 kernel: audit: type=1130 audit(1696279004.734:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:48336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:44.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:48336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:44.735411 systemd[1]: Started sshd@16-10.200.8.15:22-10.200.12.6:48336.service. Oct 2 20:36:45.367000 audit[3266]: USER_ACCT pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.387903 sshd[3266]: Accepted publickey for core from 10.200.12.6 port 48336 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:45.388270 kernel: audit: type=1101 audit(1696279005.367:1230): pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.386000 audit[3266]: CRED_ACQ pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.388367 sshd[3266]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:45.393658 systemd[1]: Started session-19.scope. Oct 2 20:36:45.394727 systemd-logind[1315]: New session 19 of user core. Oct 2 20:36:45.414891 kernel: audit: type=1103 audit(1696279005.386:1231): pid=3266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.414971 kernel: audit: type=1006 audit(1696279005.386:1232): pid=3266 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Oct 2 20:36:45.415063 kernel: audit: type=1300 audit(1696279005.386:1232): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe793ce400 a2=3 a3=0 items=0 ppid=1 pid=3266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:45.386000 audit[3266]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe793ce400 a2=3 a3=0 items=0 ppid=1 pid=3266 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:45.386000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:45.437376 kernel: audit: type=1327 audit(1696279005.386:1232): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:45.438007 kernel: audit: type=1105 audit(1696279005.399:1233): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.399000 audit[3266]: USER_START pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.400000 audit[3268]: CRED_ACQ pid=3268 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.471769 kernel: audit: type=1103 audit(1696279005.400:1234): pid=3268 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.866725 sshd[3266]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:45.867000 audit[3266]: USER_END pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.871401 systemd[1]: sshd@16-10.200.8.15:22-10.200.12.6:48336.service: Deactivated successfully. Oct 2 20:36:45.872279 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:36:45.873856 systemd-logind[1315]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:36:45.874782 systemd-logind[1315]: Removed session 19. Oct 2 20:36:45.867000 audit[3266]: CRED_DISP pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.888012 kernel: audit: type=1106 audit(1696279005.867:1235): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.888054 kernel: audit: type=1104 audit(1696279005.867:1236): pid=3266 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:45.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.200.8.15:22-10.200.12.6:48336 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:45.972733 systemd[1]: Started sshd@17-10.200.8.15:22-10.200.12.6:48348.service. Oct 2 20:36:45.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:48348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:46.598000 audit[3279]: USER_ACCT pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:46.599446 sshd[3279]: Accepted publickey for core from 10.200.12.6 port 48348 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:46.599000 audit[3279]: CRED_ACQ pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:46.599000 audit[3279]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1d9a7aa0 a2=3 a3=0 items=0 ppid=1 pid=3279 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:46.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:46.601028 sshd[3279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:46.605779 systemd[1]: Started session-20.scope. Oct 2 20:36:46.606386 systemd-logind[1315]: New session 20 of user core. Oct 2 20:36:46.610000 audit[3279]: USER_START pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:46.611000 audit[3281]: CRED_ACQ pid=3281 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:47.442346 kubelet[2498]: E1002 20:36:47.442314 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:47.739904 sshd[3279]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:47.740000 audit[3279]: USER_END pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:47.740000 audit[3279]: CRED_DISP pid=3279 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:47.743090 systemd[1]: sshd@17-10.200.8.15:22-10.200.12.6:48348.service: Deactivated successfully. Oct 2 20:36:47.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.200.8.15:22-10.200.12.6:48348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:47.743985 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:36:47.744689 systemd-logind[1315]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:36:47.745622 systemd-logind[1315]: Removed session 20. Oct 2 20:36:47.846470 systemd[1]: Started sshd@18-10.200.8.15:22-10.200.12.6:40210.service. Oct 2 20:36:47.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:48.477000 audit[3289]: USER_ACCT pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.478293 sshd[3289]: Accepted publickey for core from 10.200.12.6 port 40210 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:48.478000 audit[3289]: CRED_ACQ pid=3289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.478000 audit[3289]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe240f24e0 a2=3 a3=0 items=0 ppid=1 pid=3289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:48.478000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:48.479643 sshd[3289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:48.484352 systemd[1]: Started session-21.scope. Oct 2 20:36:48.484789 systemd-logind[1315]: New session 21 of user core. Oct 2 20:36:48.488000 audit[3289]: USER_START pid=3289 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.489000 audit[3291]: CRED_ACQ pid=3291 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.974150 sshd[3289]: pam_unix(sshd:session): session closed for user core Oct 2 20:36:48.974000 audit[3289]: USER_END pid=3289 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.974000 audit[3289]: CRED_DISP pid=3289 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:48.977618 systemd[1]: sshd@18-10.200.8.15:22-10.200.12.6:40210.service: Deactivated successfully. Oct 2 20:36:48.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.200.8.15:22-10.200.12.6:40210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:48.978753 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:36:48.979646 systemd-logind[1315]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:36:48.980572 systemd-logind[1315]: Removed session 21. Oct 2 20:36:49.348505 kubelet[2498]: E1002 20:36:49.348454 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:36:52.444145 kubelet[2498]: E1002 20:36:52.444118 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:57.445610 kubelet[2498]: E1002 20:36:57.445578 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:36:59.101554 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:36:59.101681 kernel: audit: type=1130 audit(1696279019.079:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:59.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:36:59.080369 systemd[1]: Started sshd@19-10.200.8.15:22-10.200.12.6:51108.service. Oct 2 20:36:59.727000 audit[3302]: USER_ACCT pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.747270 sshd[3302]: Accepted publickey for core from 10.200.12.6 port 51108 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:36:59.746000 audit[3302]: CRED_ACQ pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.747897 sshd[3302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:36:59.752932 systemd[1]: Started session-22.scope. Oct 2 20:36:59.754013 systemd-logind[1315]: New session 22 of user core. Oct 2 20:36:59.763708 kernel: audit: type=1101 audit(1696279019.727:1257): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.763789 kernel: audit: type=1103 audit(1696279019.746:1258): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.764012 kernel: audit: type=1006 audit(1696279019.746:1259): pid=3302 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:36:59.746000 audit[3302]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd55747460 a2=3 a3=0 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:59.774079 kernel: audit: type=1300 audit(1696279019.746:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd55747460 a2=3 a3=0 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:36:59.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:59.791010 kernel: audit: type=1327 audit(1696279019.746:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 20:36:59.797054 kernel: audit: type=1105 audit(1696279019.758:1260): pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.758000 audit[3302]: USER_START pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.760000 audit[3304]: CRED_ACQ pid=3304 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:36:59.830433 kernel: audit: type=1103 audit(1696279019.760:1261): pid=3304 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:00.402782 sshd[3302]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:00.403000 audit[3302]: USER_END pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:00.405987 systemd[1]: sshd@19-10.200.8.15:22-10.200.12.6:51108.service: Deactivated successfully. Oct 2 20:37:00.406886 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:37:00.408357 systemd-logind[1315]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:37:00.409257 systemd-logind[1315]: Removed session 22. Oct 2 20:37:00.424029 kernel: audit: type=1106 audit(1696279020.403:1262): pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:00.424098 kernel: audit: type=1104 audit(1696279020.403:1263): pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:00.403000 audit[3302]: CRED_DISP pid=3302 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:00.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.200.8.15:22-10.200.12.6:51108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:02.349288 kubelet[2498]: E1002 20:37:02.349245 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:37:02.446333 kubelet[2498]: E1002 20:37:02.446295 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:07.447186 kubelet[2498]: E1002 20:37:07.447144 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:10.674687 systemd[1]: Started sshd@20-10.200.8.15:22-10.200.12.6:50348.service. Oct 2 20:37:10.698729 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:10.698847 kernel: audit: type=1130 audit(1696279030.673:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:10.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:11.361000 audit[3316]: USER_ACCT pid=3316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.362513 sshd[3316]: Accepted publickey for core from 10.200.12.6 port 50348 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:11.380000 audit[3316]: CRED_ACQ pid=3316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.381801 sshd[3316]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:11.386734 systemd[1]: Started session-23.scope. Oct 2 20:37:11.387719 systemd-logind[1315]: New session 23 of user core. Oct 2 20:37:11.397686 kernel: audit: type=1101 audit(1696279031.361:1266): pid=3316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.397772 kernel: audit: type=1103 audit(1696279031.380:1267): pid=3316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.397804 kernel: audit: type=1006 audit(1696279031.380:1268): pid=3316 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:37:11.380000 audit[3316]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe7e54630 a2=3 a3=0 items=0 ppid=1 pid=3316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:11.424836 kernel: audit: type=1300 audit(1696279031.380:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe7e54630 a2=3 a3=0 items=0 ppid=1 pid=3316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:11.424896 kernel: audit: type=1327 audit(1696279031.380:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:11.380000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:11.431496 kernel: audit: type=1105 audit(1696279031.391:1269): pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.391000 audit[3316]: USER_START pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.394000 audit[3318]: CRED_ACQ pid=3318 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.465109 kernel: audit: type=1103 audit(1696279031.394:1270): pid=3318 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.858148 sshd[3316]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:11.858000 audit[3316]: USER_END pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.861411 systemd[1]: sshd@20-10.200.8.15:22-10.200.12.6:50348.service: Deactivated successfully. Oct 2 20:37:11.862285 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:37:11.864200 systemd-logind[1315]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:37:11.865314 systemd-logind[1315]: Removed session 23. Oct 2 20:37:11.858000 audit[3316]: CRED_DISP pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.880018 kernel: audit: type=1106 audit(1696279031.858:1271): pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.880067 kernel: audit: type=1104 audit(1696279031.858:1272): pid=3316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:11.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.200.8.15:22-10.200.12.6:50348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:12.448215 kubelet[2498]: E1002 20:37:12.448183 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:16.349659 kubelet[2498]: E1002 20:37:16.349613 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:37:16.464000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:16.469527 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:16.469623 kernel: audit: type=1400 audit(1696279036.464:1274): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:16.464000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de9e60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:16.506780 kernel: audit: type=1300 audit(1696279036.464:1274): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000de9e60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:16.506853 kernel: audit: type=1327 audit(1696279036.464:1274): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:16.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:16.473000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:16.540267 kernel: audit: type=1400 audit(1696279036.473:1275): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:16.540334 kernel: audit: type=1300 audit(1696279036.473:1275): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df9520 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:16.473000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000df9520 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:16.473000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:16.578813 kernel: audit: type=1327 audit(1696279036.473:1275): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.115170 kernel: audit: type=1400 audit(1696279037.081:1276): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.115257 kernel: audit: type=1400 audit(1696279037.081:1277): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.115279 kernel: audit: type=1300 audit(1696279037.081:1276): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c010b2a060 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c010b2a060 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.151750 kernel: audit: type=1327 audit(1696279037.081:1276): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c010b2a0f0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c010a4d5e0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.083000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.083000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c010a4bb90 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.083000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.086000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.086000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c010ab6e40 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.086000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.087000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:17.087000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c010a4bc80 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:37:17.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:37:17.449207 kubelet[2498]: E1002 20:37:17.449176 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:20.967000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:20.967000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:20.967000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d4f6a0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:20.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:20.967000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000ebc820 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:20.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:20.967000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:20.967000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000d4f6c0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:20.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:20.968000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:37:20.968000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ebc980 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:37:20.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:37:21.987368 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:37:21.987490 kernel: audit: type=1130 audit(1696279041.963:1286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:60558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:21.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:60558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:21.964369 systemd[1]: Started sshd@21-10.200.8.15:22-10.200.12.6:60558.service. Oct 2 20:37:22.450487 kubelet[2498]: E1002 20:37:22.450386 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:22.594000 audit[3328]: USER_ACCT pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.595410 sshd[3328]: Accepted publickey for core from 10.200.12.6 port 60558 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:22.612000 audit[3328]: CRED_ACQ pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.614383 sshd[3328]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:22.619375 systemd[1]: Started session-24.scope. Oct 2 20:37:22.620452 systemd-logind[1315]: New session 24 of user core. Oct 2 20:37:22.630336 kernel: audit: type=1101 audit(1696279042.594:1287): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.630402 kernel: audit: type=1103 audit(1696279042.612:1288): pid=3328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.630426 kernel: audit: type=1006 audit(1696279042.613:1289): pid=3328 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:37:22.613000 audit[3328]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd70caef30 a2=3 a3=0 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.641009 kernel: audit: type=1300 audit(1696279042.613:1289): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd70caef30 a2=3 a3=0 items=0 ppid=1 pid=3328 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:22.613000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:22.658010 kernel: audit: type=1327 audit(1696279042.613:1289): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:22.624000 audit[3328]: USER_START pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.681270 kernel: audit: type=1105 audit(1696279042.624:1290): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.626000 audit[3332]: CRED_ACQ pid=3332 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:22.682015 kernel: audit: type=1103 audit(1696279042.626:1291): pid=3332 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:23.283095 sshd[3328]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:23.283000 audit[3328]: USER_END pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:23.286394 systemd[1]: sshd@21-10.200.8.15:22-10.200.12.6:60558.service: Deactivated successfully. Oct 2 20:37:23.287166 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:37:23.288753 systemd-logind[1315]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:37:23.289654 systemd-logind[1315]: Removed session 24. Oct 2 20:37:23.283000 audit[3328]: CRED_DISP pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:23.319774 kernel: audit: type=1106 audit(1696279043.283:1292): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:23.319877 kernel: audit: type=1104 audit(1696279043.283:1293): pid=3328 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:23.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.200.8.15:22-10.200.12.6:60558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:27.348782 kubelet[2498]: E1002 20:37:27.348730 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:37:27.452037 kubelet[2498]: E1002 20:37:27.452006 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:32.452847 kubelet[2498]: E1002 20:37:32.452815 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:33.396891 systemd[1]: Started sshd@22-10.200.8.15:22-10.200.12.6:36754.service. Oct 2 20:37:33.419580 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:33.419672 kernel: audit: type=1130 audit(1696279053.396:1295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:36754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:33.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:36754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:34.070000 audit[3341]: USER_ACCT pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.071648 sshd[3341]: Accepted publickey for core from 10.200.12.6 port 36754 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:34.088000 audit[3341]: CRED_ACQ pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.090114 sshd[3341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:34.095206 systemd[1]: Started session-25.scope. Oct 2 20:37:34.096178 systemd-logind[1315]: New session 25 of user core. Oct 2 20:37:34.106727 kernel: audit: type=1101 audit(1696279054.070:1296): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.106811 kernel: audit: type=1103 audit(1696279054.088:1297): pid=3341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.106839 kernel: audit: type=1006 audit(1696279054.088:1298): pid=3341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:37:34.117182 kernel: audit: type=1300 audit(1696279054.088:1298): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed3932420 a2=3 a3=0 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:34.088000 audit[3341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed3932420 a2=3 a3=0 items=0 ppid=1 pid=3341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:34.088000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:34.139984 kernel: audit: type=1327 audit(1696279054.088:1298): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:34.100000 audit[3341]: USER_START pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.103000 audit[3343]: CRED_ACQ pid=3343 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.159014 kernel: audit: type=1105 audit(1696279054.100:1299): pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.159054 kernel: audit: type=1103 audit(1696279054.103:1300): pid=3343 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.569613 sshd[3341]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:34.570000 audit[3341]: USER_END pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.573394 systemd-logind[1315]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:37:34.575030 systemd[1]: sshd@22-10.200.8.15:22-10.200.12.6:36754.service: Deactivated successfully. Oct 2 20:37:34.575857 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:37:34.577782 systemd-logind[1315]: Removed session 25. Oct 2 20:37:34.570000 audit[3341]: CRED_DISP pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.605911 kernel: audit: type=1106 audit(1696279054.570:1301): pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.606090 kernel: audit: type=1104 audit(1696279054.570:1302): pid=3341 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:34.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.200.8.15:22-10.200.12.6:36754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:37.454129 kubelet[2498]: E1002 20:37:37.454098 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:39.349142 kubelet[2498]: E1002 20:37:39.349095 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:37:42.455011 kubelet[2498]: E1002 20:37:42.454969 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:44.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:35776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:44.679242 systemd[1]: Started sshd@23-10.200.8.15:22-10.200.12.6:35776.service. Oct 2 20:37:44.684638 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:44.684728 kernel: audit: type=1130 audit(1696279064.678:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:35776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:45.312000 audit[3355]: USER_ACCT pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.313763 sshd[3355]: Accepted publickey for core from 10.200.12.6 port 35776 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:45.333021 kernel: audit: type=1101 audit(1696279065.312:1305): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.332000 audit[3355]: CRED_ACQ pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.338425 systemd[1]: Started session-26.scope. Oct 2 20:37:45.333597 sshd[3355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:45.339431 systemd-logind[1315]: New session 26 of user core. Oct 2 20:37:45.359914 kernel: audit: type=1103 audit(1696279065.332:1306): pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.360037 kernel: audit: type=1006 audit(1696279065.332:1307): pid=3355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:37:45.360068 kernel: audit: type=1300 audit(1696279065.332:1307): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd41ab7710 a2=3 a3=0 items=0 ppid=1 pid=3355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:45.332000 audit[3355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd41ab7710 a2=3 a3=0 items=0 ppid=1 pid=3355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:45.332000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:45.382498 kernel: audit: type=1327 audit(1696279065.332:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:45.383130 kernel: audit: type=1105 audit(1696279065.344:1308): pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.344000 audit[3355]: USER_START pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.346000 audit[3357]: CRED_ACQ pid=3357 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.401014 kernel: audit: type=1103 audit(1696279065.346:1309): pid=3357 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.815510 sshd[3355]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:45.816000 audit[3355]: USER_END pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.819164 systemd[1]: sshd@23-10.200.8.15:22-10.200.12.6:35776.service: Deactivated successfully. Oct 2 20:37:45.820041 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:37:45.821738 systemd-logind[1315]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:37:45.822842 systemd-logind[1315]: Removed session 26. Oct 2 20:37:45.816000 audit[3355]: CRED_DISP pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.851731 kernel: audit: type=1106 audit(1696279065.816:1310): pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.851808 kernel: audit: type=1104 audit(1696279065.816:1311): pid=3355 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:45.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.200.8.15:22-10.200.12.6:35776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:47.456419 kubelet[2498]: E1002 20:37:47.456387 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:52.349673 kubelet[2498]: E1002 20:37:52.348889 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:37:52.457620 kubelet[2498]: E1002 20:37:52.457587 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:37:55.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:55.919731 systemd[1]: Started sshd@24-10.200.8.15:22-10.200.12.6:44846.service. Oct 2 20:37:55.941368 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:37:55.941467 kernel: audit: type=1130 audit(1696279075.918:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:56.548969 sshd[3367]: Accepted publickey for core from 10.200.12.6 port 44846 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:37:56.547000 audit[3367]: USER_ACCT pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.550599 sshd[3367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:37:56.565356 systemd[1]: Started session-27.scope. Oct 2 20:37:56.567046 systemd-logind[1315]: New session 27 of user core. Oct 2 20:37:56.549000 audit[3367]: CRED_ACQ pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.586485 kernel: audit: type=1101 audit(1696279076.547:1314): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.586581 kernel: audit: type=1103 audit(1696279076.549:1315): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.587030 kernel: audit: type=1006 audit(1696279076.549:1316): pid=3367 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:37:56.549000 audit[3367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff65f8c920 a2=3 a3=0 items=0 ppid=1 pid=3367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:56.614366 kernel: audit: type=1300 audit(1696279076.549:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff65f8c920 a2=3 a3=0 items=0 ppid=1 pid=3367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:37:56.614440 kernel: audit: type=1327 audit(1696279076.549:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:56.549000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:37:56.620578 kernel: audit: type=1105 audit(1696279076.571:1317): pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.571000 audit[3367]: USER_START pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.573000 audit[3369]: CRED_ACQ pid=3369 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:56.653838 kernel: audit: type=1103 audit(1696279076.573:1318): pid=3369 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:57.041083 sshd[3367]: pam_unix(sshd:session): session closed for user core Oct 2 20:37:57.041000 audit[3367]: USER_END pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:57.044346 systemd[1]: sshd@24-10.200.8.15:22-10.200.12.6:44846.service: Deactivated successfully. Oct 2 20:37:57.045093 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:37:57.046434 systemd-logind[1315]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:37:57.047319 systemd-logind[1315]: Removed session 27. Oct 2 20:37:57.041000 audit[3367]: CRED_DISP pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:57.078097 kernel: audit: type=1106 audit(1696279077.041:1319): pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:57.078186 kernel: audit: type=1104 audit(1696279077.041:1320): pid=3367 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:37:57.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.200.8.15:22-10.200.12.6:44846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:37:57.458782 kubelet[2498]: E1002 20:37:57.458755 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:02.460549 kubelet[2498]: E1002 20:38:02.460515 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:03.349145 kubelet[2498]: E1002 20:38:03.349093 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:38:07.148019 systemd[1]: Started sshd@25-10.200.8.15:22-10.200.12.6:45068.service. Oct 2 20:38:07.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:45068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:07.153391 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:38:07.153477 kernel: audit: type=1130 audit(1696279087.147:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:45068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:07.461373 kubelet[2498]: E1002 20:38:07.461076 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:07.778000 audit[3381]: USER_ACCT pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.779733 sshd[3381]: Accepted publickey for core from 10.200.12.6 port 45068 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:07.800024 kernel: audit: type=1101 audit(1696279087.778:1323): pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.800249 sshd[3381]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:07.798000 audit[3381]: CRED_ACQ pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.805468 systemd[1]: Started session-28.scope. Oct 2 20:38:07.806347 systemd-logind[1315]: New session 28 of user core. Oct 2 20:38:07.826644 kernel: audit: type=1103 audit(1696279087.798:1324): pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.826738 kernel: audit: type=1006 audit(1696279087.798:1325): pid=3381 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:38:07.826773 kernel: audit: type=1300 audit(1696279087.798:1325): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd615fec00 a2=3 a3=0 items=0 ppid=1 pid=3381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:07.798000 audit[3381]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd615fec00 a2=3 a3=0 items=0 ppid=1 pid=3381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:07.798000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:07.849799 kernel: audit: type=1327 audit(1696279087.798:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:07.849890 kernel: audit: type=1105 audit(1696279087.810:1326): pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.810000 audit[3381]: USER_START pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.810000 audit[3383]: CRED_ACQ pid=3383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:07.883499 kernel: audit: type=1103 audit(1696279087.810:1327): pid=3383 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:08.284627 sshd[3381]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:08.285000 audit[3381]: USER_END pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:08.288495 systemd-logind[1315]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:38:08.290234 systemd[1]: sshd@25-10.200.8.15:22-10.200.12.6:45068.service: Deactivated successfully. Oct 2 20:38:08.291101 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:38:08.292925 systemd-logind[1315]: Removed session 28. Oct 2 20:38:08.285000 audit[3381]: CRED_DISP pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:08.321580 kernel: audit: type=1106 audit(1696279088.285:1328): pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:08.321651 kernel: audit: type=1104 audit(1696279088.285:1329): pid=3381 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:08.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.200.8.15:22-10.200.12.6:45068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:12.462244 kubelet[2498]: E1002 20:38:12.462209 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:15.350685 env[1332]: time="2023-10-02T20:38:15.350628260Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:6,}" Oct 2 20:38:15.378850 env[1332]: time="2023-10-02T20:38:15.378800643Z" level=info msg="CreateContainer within sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" for &ContainerMetadata{Name:mount-cgroup,Attempt:6,} returns container id \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\"" Oct 2 20:38:15.379308 env[1332]: time="2023-10-02T20:38:15.379275549Z" level=info msg="StartContainer for \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\"" Oct 2 20:38:15.407578 systemd[1]: Started cri-containerd-8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3.scope. Oct 2 20:38:15.417446 systemd[1]: cri-containerd-8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3.scope: Deactivated successfully. Oct 2 20:38:15.417777 systemd[1]: Stopped cri-containerd-8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3.scope. Oct 2 20:38:15.421525 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3-rootfs.mount: Deactivated successfully. Oct 2 20:38:15.443332 env[1332]: time="2023-10-02T20:38:15.443280620Z" level=info msg="shim disconnected" id=8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3 Oct 2 20:38:15.443527 env[1332]: time="2023-10-02T20:38:15.443334821Z" level=warning msg="cleaning up after shim disconnected" id=8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3 namespace=k8s.io Oct 2 20:38:15.443527 env[1332]: time="2023-10-02T20:38:15.443346721Z" level=info msg="cleaning up dead shim" Oct 2 20:38:15.455292 env[1332]: time="2023-10-02T20:38:15.455250783Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3415 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:15.455913 env[1332]: time="2023-10-02T20:38:15.455823291Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:38:15.456668 env[1332]: time="2023-10-02T20:38:15.456601302Z" level=error msg="Failed to pipe stderr of container \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\"" error="reading from a closed fifo" Oct 2 20:38:15.457123 env[1332]: time="2023-10-02T20:38:15.457079308Z" level=error msg="Failed to pipe stdout of container \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\"" error="reading from a closed fifo" Oct 2 20:38:15.461404 env[1332]: time="2023-10-02T20:38:15.461364966Z" level=error msg="StartContainer for \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:15.461581 kubelet[2498]: E1002 20:38:15.461560 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3" Oct 2 20:38:15.461961 kubelet[2498]: E1002 20:38:15.461672 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:15.461961 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:15.461961 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:38:15.461961 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-wxl2z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:15.462150 kubelet[2498]: E1002 20:38:15.461717 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:38:16.030694 kubelet[2498]: I1002 20:38:16.030660 2498 scope.go:115] "RemoveContainer" containerID="82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba" Oct 2 20:38:16.031130 kubelet[2498]: I1002 20:38:16.031104 2498 scope.go:115] "RemoveContainer" containerID="82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba" Oct 2 20:38:16.032506 env[1332]: time="2023-10-02T20:38:16.032470936Z" level=info msg="RemoveContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" Oct 2 20:38:16.032782 env[1332]: time="2023-10-02T20:38:16.032753440Z" level=info msg="RemoveContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\"" Oct 2 20:38:16.032934 env[1332]: time="2023-10-02T20:38:16.032896542Z" level=error msg="RemoveContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\" failed" error="failed to set removing state for container \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\": container is already in removing state" Oct 2 20:38:16.033096 kubelet[2498]: E1002 20:38:16.033074 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\": container is already in removing state" containerID="82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba" Oct 2 20:38:16.033183 kubelet[2498]: E1002 20:38:16.033111 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba": container is already in removing state; Skipping pod "cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)" Oct 2 20:38:16.033451 kubelet[2498]: E1002 20:38:16.033427 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:38:16.042322 env[1332]: time="2023-10-02T20:38:16.042285269Z" level=info msg="RemoveContainer for \"82cfce6814cf6be04f72a227abb3bc21714bcf03b128af1db45791bfe8c6cbba\" returns successfully" Oct 2 20:38:16.465000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:16.470416 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:38:16.470524 kernel: audit: type=1400 audit(1696279096.465:1331): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:16.465000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00157e780 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:16.508008 kernel: audit: type=1300 audit(1696279096.465:1331): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00157e780 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:16.508101 kernel: audit: type=1327 audit(1696279096.465:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:16.465000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:16.474000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:16.526016 kernel: audit: type=1400 audit(1696279096.474:1332): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:16.474000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263e940 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:16.562827 kernel: audit: type=1300 audit(1696279096.474:1332): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263e940 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:16.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:16.580091 kernel: audit: type=1327 audit(1696279096.474:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.081000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.116606 kernel: audit: type=1400 audit(1696279097.081:1333): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.116721 kernel: audit: type=1400 audit(1696279097.081:1334): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.116753 kernel: audit: type=1300 audit(1696279097.081:1334): arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00ab92330 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00ab92330 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.153862 kernel: audit: type=1327 audit(1696279097.081:1334): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.081000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ab92300 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.081000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.087000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.087000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ab92480 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.087000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.087000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003e7e1a0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.092000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.092000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003e608e0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.092000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:17.092000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a995a10 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:38:17.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:38:17.463541 kubelet[2498]: E1002 20:38:17.463510 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:18.391268 systemd[1]: Started sshd@26-10.200.8.15:22-10.200.12.6:52526.service. Oct 2 20:38:18.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:18.549617 kubelet[2498]: W1002 20:38:18.549566 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice/cri-containerd-8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3.scope WatchSource:0}: task 8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3 not found: not found Oct 2 20:38:19.028000 audit[3429]: USER_ACCT pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.029656 sshd[3429]: Accepted publickey for core from 10.200.12.6 port 52526 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:19.029000 audit[3429]: CRED_ACQ pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.029000 audit[3429]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed058b780 a2=3 a3=0 items=0 ppid=1 pid=3429 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:19.029000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:19.031238 sshd[3429]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:19.036293 systemd[1]: Started session-29.scope. Oct 2 20:38:19.036748 systemd-logind[1315]: New session 29 of user core. Oct 2 20:38:19.040000 audit[3429]: USER_START pid=3429 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.042000 audit[3431]: CRED_ACQ pid=3431 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.521206 sshd[3429]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:19.521000 audit[3429]: USER_END pid=3429 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.522000 audit[3429]: CRED_DISP pid=3429 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:19.524628 systemd[1]: sshd@26-10.200.8.15:22-10.200.12.6:52526.service: Deactivated successfully. Oct 2 20:38:19.525574 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:38:19.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.200.8.15:22-10.200.12.6:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:19.526526 systemd-logind[1315]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:38:19.527448 systemd-logind[1315]: Removed session 29. Oct 2 20:38:20.967000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:20.967000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263fc40 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:20.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:20.968000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:20.968000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:20.968000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0025ac4e0 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:20.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:20.968000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263fd60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:20.968000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:20.969000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:38:20.969000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263fd80 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:38:20.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:38:22.464510 kubelet[2498]: E1002 20:38:22.464478 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:27.465581 kubelet[2498]: E1002 20:38:27.465547 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:28.348664 kubelet[2498]: E1002 20:38:28.348619 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 5m0s restarting failed container=mount-cgroup pod=cilium-rmjwx_kube-system(dbe21dfd-2b49-42bf-9cbd-f85e61af721b)\"" pod="kube-system/cilium-rmjwx" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b Oct 2 20:38:29.626154 systemd[1]: Started sshd@27-10.200.8.15:22-10.200.12.6:48290.service. Oct 2 20:38:29.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:48290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:29.648708 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 20:38:29.648804 kernel: audit: type=1130 audit(1696279109.625:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:48290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:30.251000 audit[3443]: USER_ACCT pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.252467 sshd[3443]: Accepted publickey for core from 10.200.12.6 port 48290 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:30.270000 audit[3443]: CRED_ACQ pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.271788 sshd[3443]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:30.276870 systemd-logind[1315]: New session 30 of user core. Oct 2 20:38:30.278015 systemd[1]: Started session-30.scope. Oct 2 20:38:30.287668 kernel: audit: type=1101 audit(1696279110.251:1353): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.287750 kernel: audit: type=1103 audit(1696279110.270:1354): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.287783 kernel: audit: type=1006 audit(1696279110.270:1355): pid=3443 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:38:30.270000 audit[3443]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddbbe6130 a2=3 a3=0 items=0 ppid=1 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.299010 kernel: audit: type=1300 audit(1696279110.270:1355): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddbbe6130 a2=3 a3=0 items=0 ppid=1 pid=3443 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:30.270000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:30.316013 kernel: audit: type=1327 audit(1696279110.270:1355): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:30.281000 audit[3443]: USER_START pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.338830 kernel: audit: type=1105 audit(1696279110.281:1356): pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.338896 kernel: audit: type=1103 audit(1696279110.281:1357): pid=3445 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.281000 audit[3445]: CRED_ACQ pid=3445 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.957370 sshd[3443]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:30.958000 audit[3443]: USER_END pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.960885 systemd-logind[1315]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:38:30.962174 systemd[1]: sshd@27-10.200.8.15:22-10.200.12.6:48290.service: Deactivated successfully. Oct 2 20:38:30.962905 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:38:30.964145 systemd-logind[1315]: Removed session 30. Oct 2 20:38:30.958000 audit[3443]: CRED_DISP pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.995292 kernel: audit: type=1106 audit(1696279110.958:1358): pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.995429 kernel: audit: type=1104 audit(1696279110.958:1359): pid=3443 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:30.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.200.8.15:22-10.200.12.6:48290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:31.063251 systemd[1]: Started sshd@28-10.200.8.15:22-10.200.12.6:48304.service. Oct 2 20:38:31.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:48304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:31.686000 audit[3455]: USER_ACCT pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:31.687361 sshd[3455]: Accepted publickey for core from 10.200.12.6 port 48304 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:31.687000 audit[3455]: CRED_ACQ pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:31.687000 audit[3455]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea9c77d10 a2=3 a3=0 items=0 ppid=1 pid=3455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:31.687000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:31.688858 sshd[3455]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:31.693963 systemd-logind[1315]: New session 31 of user core. Oct 2 20:38:31.694865 systemd[1]: Started session-31.scope. Oct 2 20:38:31.698000 audit[3455]: USER_START pid=3455 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:31.700000 audit[3457]: CRED_ACQ pid=3457 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:32.466150 kubelet[2498]: E1002 20:38:32.466119 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:33.317864 env[1332]: time="2023-10-02T20:38:33.317817427Z" level=info msg="StopPodSandbox for \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\"" Oct 2 20:38:33.318521 env[1332]: time="2023-10-02T20:38:33.318484736Z" level=info msg="Container to stop \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:38:33.322913 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866-shm.mount: Deactivated successfully. Oct 2 20:38:33.342021 env[1332]: time="2023-10-02T20:38:33.338552186Z" level=info msg="StopContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" with timeout 30 (s)" Oct 2 20:38:33.343387 env[1332]: time="2023-10-02T20:38:33.342351934Z" level=info msg="Stop container \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" with signal terminated" Oct 2 20:38:33.347000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:38:33.348573 systemd[1]: cri-containerd-2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866.scope: Deactivated successfully. Oct 2 20:38:33.351000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:38:33.375607 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866-rootfs.mount: Deactivated successfully. Oct 2 20:38:33.376261 systemd[1]: cri-containerd-eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d.scope: Deactivated successfully. Oct 2 20:38:33.376000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:38:33.381000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:38:33.395793 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d-rootfs.mount: Deactivated successfully. Oct 2 20:38:33.457969 env[1332]: time="2023-10-02T20:38:33.457918176Z" level=info msg="shim disconnected" id=2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866 Oct 2 20:38:33.458336 env[1332]: time="2023-10-02T20:38:33.458311081Z" level=warning msg="cleaning up after shim disconnected" id=2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866 namespace=k8s.io Oct 2 20:38:33.458470 env[1332]: time="2023-10-02T20:38:33.458452583Z" level=info msg="cleaning up dead shim" Oct 2 20:38:33.458579 env[1332]: time="2023-10-02T20:38:33.458171280Z" level=info msg="shim disconnected" id=eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d Oct 2 20:38:33.458639 env[1332]: time="2023-10-02T20:38:33.458591485Z" level=warning msg="cleaning up after shim disconnected" id=eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d namespace=k8s.io Oct 2 20:38:33.458639 env[1332]: time="2023-10-02T20:38:33.458604985Z" level=info msg="cleaning up dead shim" Oct 2 20:38:33.469536 env[1332]: time="2023-10-02T20:38:33.469495821Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3502 runtime=io.containerd.runc.v2\n" Oct 2 20:38:33.471960 env[1332]: time="2023-10-02T20:38:33.471872851Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3503 runtime=io.containerd.runc.v2\n" Oct 2 20:38:33.473026 env[1332]: time="2023-10-02T20:38:33.472978564Z" level=info msg="TearDown network for sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" successfully" Oct 2 20:38:33.473108 env[1332]: time="2023-10-02T20:38:33.473025965Z" level=info msg="StopPodSandbox for \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" returns successfully" Oct 2 20:38:33.475701 env[1332]: time="2023-10-02T20:38:33.475097691Z" level=info msg="StopContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" returns successfully" Oct 2 20:38:33.476878 env[1332]: time="2023-10-02T20:38:33.476837113Z" level=info msg="StopPodSandbox for \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\"" Oct 2 20:38:33.478101 env[1332]: time="2023-10-02T20:38:33.478069628Z" level=info msg="Container to stop \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:38:33.482210 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07-shm.mount: Deactivated successfully. Oct 2 20:38:33.489000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:38:33.490123 systemd[1]: cri-containerd-69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07.scope: Deactivated successfully. Oct 2 20:38:33.493000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:38:33.511927 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07-rootfs.mount: Deactivated successfully. Oct 2 20:38:33.526382 env[1332]: time="2023-10-02T20:38:33.526327031Z" level=info msg="shim disconnected" id=69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07 Oct 2 20:38:33.526615 env[1332]: time="2023-10-02T20:38:33.526584334Z" level=warning msg="cleaning up after shim disconnected" id=69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07 namespace=k8s.io Oct 2 20:38:33.526615 env[1332]: time="2023-10-02T20:38:33.526609734Z" level=info msg="cleaning up dead shim" Oct 2 20:38:33.534838 env[1332]: time="2023-10-02T20:38:33.534803636Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3549 runtime=io.containerd.runc.v2\n" Oct 2 20:38:33.535144 env[1332]: time="2023-10-02T20:38:33.535109140Z" level=info msg="TearDown network for sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" successfully" Oct 2 20:38:33.535144 env[1332]: time="2023-10-02T20:38:33.535138741Z" level=info msg="StopPodSandbox for \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" returns successfully" Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572430 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-net\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572490 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-config-path\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572524 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-xtables-lock\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572555 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-run\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572596 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-wxl2z\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-kube-api-access-wxl2z\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.576547 kubelet[2498]: I1002 20:38:33.572625 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-etc-cni-netd\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577180 kubelet[2498]: I1002 20:38:33.572661 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-clustermesh-secrets\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577180 kubelet[2498]: I1002 20:38:33.572693 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-kernel\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577180 kubelet[2498]: W1002 20:38:33.572719 2498 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/dbe21dfd-2b49-42bf-9cbd-f85e61af721b/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:38:33.577180 kubelet[2498]: I1002 20:38:33.572726 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hubble-tls\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577180 kubelet[2498]: I1002 20:38:33.572761 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hostproc\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577180 kubelet[2498]: I1002 20:38:33.572802 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-bpf-maps\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577494 kubelet[2498]: I1002 20:38:33.572834 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-cgroup\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577494 kubelet[2498]: I1002 20:38:33.572871 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cni-path\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577494 kubelet[2498]: I1002 20:38:33.572905 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-lib-modules\") pod \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\" (UID: \"dbe21dfd-2b49-42bf-9cbd-f85e61af721b\") " Oct 2 20:38:33.577494 kubelet[2498]: I1002 20:38:33.572962 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.577494 kubelet[2498]: I1002 20:38:33.572475 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578259 kubelet[2498]: I1002 20:38:33.573039 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578259 kubelet[2498]: I1002 20:38:33.573069 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578259 kubelet[2498]: I1002 20:38:33.577386 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:38:33.578259 kubelet[2498]: I1002 20:38:33.577658 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hostproc" (OuterVolumeSpecName: "hostproc") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578259 kubelet[2498]: I1002 20:38:33.577690 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578481 kubelet[2498]: I1002 20:38:33.577711 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578481 kubelet[2498]: I1002 20:38:33.577730 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cni-path" (OuterVolumeSpecName: "cni-path") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578481 kubelet[2498]: I1002 20:38:33.577926 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578481 kubelet[2498]: I1002 20:38:33.577952 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:38:33.578780 kubelet[2498]: I1002 20:38:33.578750 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-kube-api-access-wxl2z" (OuterVolumeSpecName: "kube-api-access-wxl2z") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "kube-api-access-wxl2z". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:33.580786 kubelet[2498]: I1002 20:38:33.580742 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:33.582411 kubelet[2498]: I1002 20:38:33.582385 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "dbe21dfd-2b49-42bf-9cbd-f85e61af721b" (UID: "dbe21dfd-2b49-42bf-9cbd-f85e61af721b"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:38:33.674080 kubelet[2498]: I1002 20:38:33.674042 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rkjwt\" (UniqueName: \"kubernetes.io/projected/8813e80d-b8f1-41c8-b844-78b711778e6f-kube-api-access-rkjwt\") pod \"8813e80d-b8f1-41c8-b844-78b711778e6f\" (UID: \"8813e80d-b8f1-41c8-b844-78b711778e6f\") " Oct 2 20:38:33.675130 kubelet[2498]: I1002 20:38:33.675102 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8813e80d-b8f1-41c8-b844-78b711778e6f-cilium-config-path\") pod \"8813e80d-b8f1-41c8-b844-78b711778e6f\" (UID: \"8813e80d-b8f1-41c8-b844-78b711778e6f\") " Oct 2 20:38:33.675584 kubelet[2498]: I1002 20:38:33.675550 2498 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-net\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.675745 kubelet[2498]: I1002 20:38:33.675729 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-config-path\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676181 kubelet[2498]: I1002 20:38:33.676161 2498 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-xtables-lock\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676185 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-run\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676201 2498 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-wxl2z\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-kube-api-access-wxl2z\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676214 2498 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-etc-cni-netd\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676228 2498 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-clustermesh-secrets\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676244 2498 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676258 2498 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hubble-tls\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676272 2498 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-hostproc\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676288 kubelet[2498]: I1002 20:38:33.676286 2498 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-bpf-maps\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676622 kubelet[2498]: I1002 20:38:33.676299 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cilium-cgroup\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676622 kubelet[2498]: I1002 20:38:33.676312 2498 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-cni-path\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676622 kubelet[2498]: I1002 20:38:33.676327 2498 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dbe21dfd-2b49-42bf-9cbd-f85e61af721b-lib-modules\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.676622 kubelet[2498]: W1002 20:38:33.675454 2498 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/8813e80d-b8f1-41c8-b844-78b711778e6f/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:38:33.678215 kubelet[2498]: I1002 20:38:33.678191 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8813e80d-b8f1-41c8-b844-78b711778e6f-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8813e80d-b8f1-41c8-b844-78b711778e6f" (UID: "8813e80d-b8f1-41c8-b844-78b711778e6f"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:38:33.680780 kubelet[2498]: I1002 20:38:33.680755 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8813e80d-b8f1-41c8-b844-78b711778e6f-kube-api-access-rkjwt" (OuterVolumeSpecName: "kube-api-access-rkjwt") pod "8813e80d-b8f1-41c8-b844-78b711778e6f" (UID: "8813e80d-b8f1-41c8-b844-78b711778e6f"). InnerVolumeSpecName "kube-api-access-rkjwt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:38:33.777474 kubelet[2498]: I1002 20:38:33.777430 2498 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-rkjwt\" (UniqueName: \"kubernetes.io/projected/8813e80d-b8f1-41c8-b844-78b711778e6f-kube-api-access-rkjwt\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:33.777474 kubelet[2498]: I1002 20:38:33.777471 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8813e80d-b8f1-41c8-b844-78b711778e6f-cilium-config-path\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:38:34.069119 kubelet[2498]: I1002 20:38:34.069086 2498 scope.go:115] "RemoveContainer" containerID="eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d" Oct 2 20:38:34.071212 env[1332]: time="2023-10-02T20:38:34.070926426Z" level=info msg="RemoveContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\"" Oct 2 20:38:34.082088 systemd[1]: Removed slice kubepods-besteffort-pod8813e80d_b8f1_41c8_b844_78b711778e6f.slice. Oct 2 20:38:34.087592 env[1332]: time="2023-10-02T20:38:34.086527520Z" level=info msg="RemoveContainer for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" returns successfully" Oct 2 20:38:34.090142 systemd[1]: Removed slice kubepods-burstable-poddbe21dfd_2b49_42bf_9cbd_f85e61af721b.slice. Oct 2 20:38:34.091770 kubelet[2498]: I1002 20:38:34.091751 2498 scope.go:115] "RemoveContainer" containerID="eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d" Oct 2 20:38:34.100717 env[1332]: time="2023-10-02T20:38:34.100586695Z" level=error msg="ContainerStatus for \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\": not found" Oct 2 20:38:34.100939 kubelet[2498]: E1002 20:38:34.100912 2498 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\": not found" containerID="eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d" Oct 2 20:38:34.101067 kubelet[2498]: I1002 20:38:34.100951 2498 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d} err="failed to get container status \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\": rpc error: code = NotFound desc = an error occurred when try to find container \"eef619406558fca571c2a3c5197837dd5dff2b3cc074e56ebbaad1c436e3616d\": not found" Oct 2 20:38:34.101067 kubelet[2498]: I1002 20:38:34.100966 2498 scope.go:115] "RemoveContainer" containerID="8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3" Oct 2 20:38:34.104399 env[1332]: time="2023-10-02T20:38:34.103982437Z" level=info msg="RemoveContainer for \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\"" Oct 2 20:38:34.113011 env[1332]: time="2023-10-02T20:38:34.112816847Z" level=info msg="RemoveContainer for \"8117b385747a229bcba5fa91665d3aa3d8738f073ce59bb4d74168ebc6be7ea3\" returns successfully" Oct 2 20:38:34.322493 systemd[1]: var-lib-kubelet-pods-8813e80d\x2db8f1\x2d41c8\x2db844\x2d78b711778e6f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drkjwt.mount: Deactivated successfully. Oct 2 20:38:34.322631 systemd[1]: var-lib-kubelet-pods-dbe21dfd\x2d2b49\x2d42bf\x2d9cbd\x2df85e61af721b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dwxl2z.mount: Deactivated successfully. Oct 2 20:38:34.322727 systemd[1]: var-lib-kubelet-pods-dbe21dfd\x2d2b49\x2d42bf\x2d9cbd\x2df85e61af721b-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:38:34.322812 systemd[1]: var-lib-kubelet-pods-dbe21dfd\x2d2b49\x2d42bf\x2d9cbd\x2df85e61af721b-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:38:34.351451 kubelet[2498]: I1002 20:38:34.351416 2498 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=8813e80d-b8f1-41c8-b844-78b711778e6f path="/var/lib/kubelet/pods/8813e80d-b8f1-41c8-b844-78b711778e6f/volumes" Oct 2 20:38:34.352016 kubelet[2498]: I1002 20:38:34.351972 2498 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=dbe21dfd-2b49-42bf-9cbd-f85e61af721b path="/var/lib/kubelet/pods/dbe21dfd-2b49-42bf-9cbd-f85e61af721b/volumes" Oct 2 20:38:35.377218 sshd[3455]: pam_unix(sshd:session): session closed for user core Oct 2 20:38:35.378000 audit[3455]: USER_END pid=3455 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:35.381031 systemd[1]: sshd@28-10.200.8.15:22-10.200.12.6:48304.service: Deactivated successfully. Oct 2 20:38:35.381857 systemd[1]: session-31.scope: Deactivated successfully. Oct 2 20:38:35.384113 systemd-logind[1315]: Session 31 logged out. Waiting for processes to exit. Oct 2 20:38:35.385880 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:38:35.385946 kernel: audit: type=1106 audit(1696279115.378:1373): pid=3455 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:35.385297 systemd-logind[1315]: Removed session 31. Oct 2 20:38:35.378000 audit[3455]: CRED_DISP pid=3455 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:35.419167 kernel: audit: type=1104 audit(1696279115.378:1374): pid=3455 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:35.419262 kernel: audit: type=1131 audit(1696279115.380:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:48304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:35.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.200.8.15:22-10.200.12.6:48304 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:35.482652 systemd[1]: Started sshd@29-10.200.8.15:22-10.200.12.6:48306.service. Oct 2 20:38:35.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:48306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:35.503020 kernel: audit: type=1130 audit(1696279115.481:1376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:48306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:38:36.112000 audit[3568]: USER_ACCT pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.113923 sshd[3568]: Accepted publickey for core from 10.200.12.6 port 48306 ssh2: RSA SHA256:Km+6U76jxzAhWpJD2UAdAkuiMtHr7eUfSPUGVo7Zkzs Oct 2 20:38:36.115736 sshd[3568]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:38:36.114000 audit[3568]: CRED_ACQ pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.138341 systemd[1]: Started session-32.scope. Oct 2 20:38:36.139441 systemd-logind[1315]: New session 32 of user core. Oct 2 20:38:36.149444 kernel: audit: type=1101 audit(1696279116.112:1377): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.149531 kernel: audit: type=1103 audit(1696279116.114:1378): pid=3568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.149567 kernel: audit: type=1006 audit(1696279116.114:1379): pid=3568 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Oct 2 20:38:36.163009 kernel: audit: type=1300 audit(1696279116.114:1379): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaa3dc5b0 a2=3 a3=0 items=0 ppid=1 pid=3568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:36.114000 audit[3568]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffaa3dc5b0 a2=3 a3=0 items=0 ppid=1 pid=3568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:36.114000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:36.183671 kernel: audit: type=1327 audit(1696279116.114:1379): proctitle=737368643A20636F7265205B707269765D Oct 2 20:38:36.183735 kernel: audit: type=1105 audit(1696279116.142:1380): pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.142000 audit[3568]: USER_START pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.145000 audit[3572]: CRED_ACQ pid=3572 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:38:36.893246 kubelet[2498]: I1002 20:38:36.893194 2498 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893275 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893288 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893297 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8813e80d-b8f1-41c8-b844-78b711778e6f" containerName="cilium-operator" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893308 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893316 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893343 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="8813e80d-b8f1-41c8-b844-78b711778e6f" containerName="cilium-operator" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893354 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893362 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893371 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893379 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: I1002 20:38:36.893388 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.893709 kubelet[2498]: E1002 20:38:36.893414 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.894240 kubelet[2498]: E1002 20:38:36.893424 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.894240 kubelet[2498]: I1002 20:38:36.893443 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.894240 kubelet[2498]: I1002 20:38:36.893451 2498 memory_manager.go:346] "RemoveStaleState removing state" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.894240 kubelet[2498]: E1002 20:38:36.893473 2498 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="dbe21dfd-2b49-42bf-9cbd-f85e61af721b" containerName="mount-cgroup" Oct 2 20:38:36.900080 systemd[1]: Created slice kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice. Oct 2 20:38:37.010537 kubelet[2498]: I1002 20:38:37.010488 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cni-path\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010537 kubelet[2498]: I1002 20:38:37.010536 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-hostproc\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010537 kubelet[2498]: I1002 20:38:37.010562 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-lib-modules\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010864 kubelet[2498]: I1002 20:38:37.010591 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-clustermesh-secrets\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010864 kubelet[2498]: I1002 20:38:37.010619 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-config-path\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010864 kubelet[2498]: I1002 20:38:37.010645 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-ipsec-secrets\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010864 kubelet[2498]: I1002 20:38:37.010669 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-bpf-maps\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.010864 kubelet[2498]: I1002 20:38:37.010692 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-cgroup\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010719 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9qjqv\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-kube-api-access-9qjqv\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010742 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-run\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010769 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-kernel\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010799 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-xtables-lock\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010831 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-net\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011110 kubelet[2498]: I1002 20:38:37.010860 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-hubble-tls\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.011367 kubelet[2498]: I1002 20:38:37.010888 2498 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-etc-cni-netd\") pod \"cilium-wwhzj\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " pod="kube-system/cilium-wwhzj" Oct 2 20:38:37.209052 env[1332]: time="2023-10-02T20:38:37.207563398Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wwhzj,Uid:01066006-41e9-40db-a2b3-a82f47b3ace9,Namespace:kube-system,Attempt:0,}" Oct 2 20:38:37.239984 env[1332]: time="2023-10-02T20:38:37.239895595Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:38:37.239984 env[1332]: time="2023-10-02T20:38:37.239946195Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:38:37.239984 env[1332]: time="2023-10-02T20:38:37.239960195Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:38:37.240544 env[1332]: time="2023-10-02T20:38:37.240466802Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6 pid=3591 runtime=io.containerd.runc.v2 Oct 2 20:38:37.256114 systemd[1]: Started cri-containerd-f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6.scope. Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit: BPF prog-id=129 op=LOAD Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3591 pid=3601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:37.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326466623762373039326261626136303466636134303136323966 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3591 pid=3601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:37.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326466623762373039326261626136303466636134303136323966 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit: BPF prog-id=130 op=LOAD Oct 2 20:38:37.269000 audit[3601]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002b3860 items=0 ppid=3591 pid=3601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:37.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326466623762373039326261626136303466636134303136323966 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit: BPF prog-id=131 op=LOAD Oct 2 20:38:37.269000 audit[3601]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002b38a8 items=0 ppid=3591 pid=3601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:37.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326466623762373039326261626136303466636134303136323966 Oct 2 20:38:37.269000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:38:37.269000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { perfmon } for pid=3601 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit[3601]: AVC avc: denied { bpf } for pid=3601 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:38:37.269000 audit: BPF prog-id=132 op=LOAD Oct 2 20:38:37.269000 audit[3601]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002b3cb8 items=0 ppid=3591 pid=3601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:38:37.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631326466623762373039326261626136303466636134303136323966 Oct 2 20:38:37.283517 env[1332]: time="2023-10-02T20:38:37.283454628Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wwhzj,Uid:01066006-41e9-40db-a2b3-a82f47b3ace9,Namespace:kube-system,Attempt:0,} returns sandbox id \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\"" Oct 2 20:38:37.286650 env[1332]: time="2023-10-02T20:38:37.286152661Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:38:37.320129 env[1332]: time="2023-10-02T20:38:37.320092977Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" Oct 2 20:38:37.321776 env[1332]: time="2023-10-02T20:38:37.320697585Z" level=info msg="StartContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" Oct 2 20:38:37.337919 systemd[1]: Started cri-containerd-c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966.scope. Oct 2 20:38:37.350934 systemd[1]: cri-containerd-c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966.scope: Deactivated successfully. Oct 2 20:38:37.444930 env[1332]: time="2023-10-02T20:38:37.444838606Z" level=info msg="shim disconnected" id=c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966 Oct 2 20:38:37.444930 env[1332]: time="2023-10-02T20:38:37.444916207Z" level=warning msg="cleaning up after shim disconnected" id=c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966 namespace=k8s.io Oct 2 20:38:37.444930 env[1332]: time="2023-10-02T20:38:37.444930507Z" level=info msg="cleaning up dead shim" Oct 2 20:38:37.455529 env[1332]: time="2023-10-02T20:38:37.455469537Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3651 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:37.455816 env[1332]: time="2023-10-02T20:38:37.455758340Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:38:37.456038 env[1332]: time="2023-10-02T20:38:37.455982543Z" level=error msg="Failed to pipe stdout of container \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" error="reading from a closed fifo" Oct 2 20:38:37.459128 env[1332]: time="2023-10-02T20:38:37.459037680Z" level=error msg="Failed to pipe stderr of container \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" error="reading from a closed fifo" Oct 2 20:38:37.465807 env[1332]: time="2023-10-02T20:38:37.465760963Z" level=error msg="StartContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:37.465971 kubelet[2498]: E1002 20:38:37.465949 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966" Oct 2 20:38:37.466105 kubelet[2498]: E1002 20:38:37.466084 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:37.466105 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:37.466105 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:38:37.466105 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9qjqv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:37.466338 kubelet[2498]: E1002 20:38:37.466132 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:37.466847 kubelet[2498]: E1002 20:38:37.466787 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:38.087798 env[1332]: time="2023-10-02T20:38:38.087718181Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:38:38.130377 env[1332]: time="2023-10-02T20:38:38.130270500Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" Oct 2 20:38:38.131234 env[1332]: time="2023-10-02T20:38:38.131191211Z" level=info msg="StartContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" Oct 2 20:38:38.156492 systemd[1]: run-containerd-runc-k8s.io-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de-runc.xNCbc3.mount: Deactivated successfully. Oct 2 20:38:38.162215 systemd[1]: Started cri-containerd-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de.scope. Oct 2 20:38:38.173062 systemd[1]: cri-containerd-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de.scope: Deactivated successfully. Oct 2 20:38:38.173405 systemd[1]: Stopped cri-containerd-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de.scope. Oct 2 20:38:38.189407 env[1332]: time="2023-10-02T20:38:38.189356821Z" level=info msg="shim disconnected" id=b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de Oct 2 20:38:38.189578 env[1332]: time="2023-10-02T20:38:38.189412022Z" level=warning msg="cleaning up after shim disconnected" id=b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de namespace=k8s.io Oct 2 20:38:38.189578 env[1332]: time="2023-10-02T20:38:38.189424522Z" level=info msg="cleaning up dead shim" Oct 2 20:38:38.197648 env[1332]: time="2023-10-02T20:38:38.197614822Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3690 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:38.197913 env[1332]: time="2023-10-02T20:38:38.197851025Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:38:38.200085 env[1332]: time="2023-10-02T20:38:38.200034551Z" level=error msg="Failed to pipe stdout of container \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" error="reading from a closed fifo" Oct 2 20:38:38.200414 env[1332]: time="2023-10-02T20:38:38.200372655Z" level=error msg="Failed to pipe stderr of container \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" error="reading from a closed fifo" Oct 2 20:38:38.204379 env[1332]: time="2023-10-02T20:38:38.204336504Z" level=error msg="StartContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:38.204738 kubelet[2498]: E1002 20:38:38.204551 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de" Oct 2 20:38:38.204738 kubelet[2498]: E1002 20:38:38.204667 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:38.204738 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:38.204738 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:38:38.205234 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9qjqv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:38.205327 kubelet[2498]: E1002 20:38:38.204706 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:39.087110 kubelet[2498]: I1002 20:38:39.087070 2498 scope.go:115] "RemoveContainer" containerID="c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966" Oct 2 20:38:39.087540 kubelet[2498]: I1002 20:38:39.087504 2498 scope.go:115] "RemoveContainer" containerID="c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966" Oct 2 20:38:39.089712 env[1332]: time="2023-10-02T20:38:39.089332997Z" level=info msg="RemoveContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" Oct 2 20:38:39.090336 env[1332]: time="2023-10-02T20:38:39.089796602Z" level=info msg="RemoveContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\"" Oct 2 20:38:39.090336 env[1332]: time="2023-10-02T20:38:39.089930504Z" level=error msg="RemoveContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\" failed" error="failed to set removing state for container \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\": container is already in removing state" Oct 2 20:38:39.090435 kubelet[2498]: E1002 20:38:39.090163 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\": container is already in removing state" containerID="c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966" Oct 2 20:38:39.090435 kubelet[2498]: I1002 20:38:39.090201 2498 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966} err="rpc error: code = Unknown desc = failed to set removing state for container \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\": container is already in removing state" Oct 2 20:38:39.099420 env[1332]: time="2023-10-02T20:38:39.099387219Z" level=info msg="RemoveContainer for \"c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966\" returns successfully" Oct 2 20:38:39.099898 kubelet[2498]: E1002 20:38:39.099878 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:39.122797 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de-rootfs.mount: Deactivated successfully. Oct 2 20:38:40.090620 kubelet[2498]: E1002 20:38:40.090583 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:40.554786 kubelet[2498]: W1002 20:38:40.554739 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice/cri-containerd-c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966.scope WatchSource:0}: container "c2de77e4d56ff5074b70431b6ee1b55560e62c770840cc659c0bf4709925c966" in namespace "k8s.io": not found Oct 2 20:38:42.467682 kubelet[2498]: E1002 20:38:42.467650 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:43.662591 kubelet[2498]: W1002 20:38:43.662540 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice/cri-containerd-b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de.scope WatchSource:0}: task b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de not found: not found Oct 2 20:38:47.468592 kubelet[2498]: E1002 20:38:47.468564 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:50.354122 env[1332]: time="2023-10-02T20:38:50.354049329Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:38:50.390501 env[1332]: time="2023-10-02T20:38:50.390459050Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" Oct 2 20:38:50.391940 env[1332]: time="2023-10-02T20:38:50.391137558Z" level=info msg="StartContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" Oct 2 20:38:50.416623 systemd[1]: Started cri-containerd-009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd.scope. Oct 2 20:38:50.426833 systemd[1]: cri-containerd-009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd.scope: Deactivated successfully. Oct 2 20:38:50.427103 systemd[1]: Stopped cri-containerd-009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd.scope. Oct 2 20:38:50.430908 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd-rootfs.mount: Deactivated successfully. Oct 2 20:38:50.452855 env[1332]: time="2023-10-02T20:38:50.452807871Z" level=info msg="shim disconnected" id=009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd Oct 2 20:38:50.453086 env[1332]: time="2023-10-02T20:38:50.452859672Z" level=warning msg="cleaning up after shim disconnected" id=009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd namespace=k8s.io Oct 2 20:38:50.453086 env[1332]: time="2023-10-02T20:38:50.452871872Z" level=info msg="cleaning up dead shim" Oct 2 20:38:50.460506 env[1332]: time="2023-10-02T20:38:50.460465759Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:38:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3727 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:38:50Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:38:50.460780 env[1332]: time="2023-10-02T20:38:50.460724262Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:38:50.461880 env[1332]: time="2023-10-02T20:38:50.461829475Z" level=error msg="Failed to pipe stdout of container \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" error="reading from a closed fifo" Oct 2 20:38:50.461967 env[1332]: time="2023-10-02T20:38:50.461906576Z" level=error msg="Failed to pipe stderr of container \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" error="reading from a closed fifo" Oct 2 20:38:50.467307 env[1332]: time="2023-10-02T20:38:50.467263838Z" level=error msg="StartContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:38:50.467461 kubelet[2498]: E1002 20:38:50.467441 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd" Oct 2 20:38:50.467828 kubelet[2498]: E1002 20:38:50.467557 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:38:50.467828 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:38:50.467828 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:38:50.467828 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9qjqv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:38:50.468185 kubelet[2498]: E1002 20:38:50.467605 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:51.111884 kubelet[2498]: I1002 20:38:51.111420 2498 scope.go:115] "RemoveContainer" containerID="b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de" Oct 2 20:38:51.111884 kubelet[2498]: I1002 20:38:51.111826 2498 scope.go:115] "RemoveContainer" containerID="b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de" Oct 2 20:38:51.122178 env[1332]: time="2023-10-02T20:38:51.122127703Z" level=info msg="RemoveContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" Oct 2 20:38:51.122874 env[1332]: time="2023-10-02T20:38:51.122841811Z" level=info msg="RemoveContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\"" Oct 2 20:38:51.123011 env[1332]: time="2023-10-02T20:38:51.122937312Z" level=error msg="RemoveContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\" failed" error="failed to set removing state for container \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\": container is already in removing state" Oct 2 20:38:51.123247 kubelet[2498]: E1002 20:38:51.123228 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\": container is already in removing state" containerID="b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de" Oct 2 20:38:51.123378 kubelet[2498]: E1002 20:38:51.123368 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de": container is already in removing state; Skipping pod "cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)" Oct 2 20:38:51.123805 kubelet[2498]: E1002 20:38:51.123792 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:38:51.134054 env[1332]: time="2023-10-02T20:38:51.134016240Z" level=info msg="RemoveContainer for \"b2a6970fedf818d83231459e97df30d9bde5794c95f4af476d3cbbbc1133b1de\" returns successfully" Oct 2 20:38:52.470189 kubelet[2498]: E1002 20:38:52.470157 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:38:53.557335 kubelet[2498]: W1002 20:38:53.557291 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice/cri-containerd-009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd.scope WatchSource:0}: task 009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd not found: not found Oct 2 20:38:57.470763 kubelet[2498]: E1002 20:38:57.470733 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:02.349236 kubelet[2498]: E1002 20:39:02.349197 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:39:02.471684 kubelet[2498]: E1002 20:39:02.471652 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:07.472792 kubelet[2498]: E1002 20:39:07.472750 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:12.474325 kubelet[2498]: E1002 20:39:12.474292 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:13.351325 env[1332]: time="2023-10-02T20:39:13.351267869Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:39:13.386397 env[1332]: time="2023-10-02T20:39:13.386347137Z" level=info msg="CreateContainer within sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\"" Oct 2 20:39:13.387089 env[1332]: time="2023-10-02T20:39:13.387052044Z" level=info msg="StartContainer for \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\"" Oct 2 20:39:13.412582 systemd[1]: run-containerd-runc-k8s.io-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195-runc.yWg5lk.mount: Deactivated successfully. Oct 2 20:39:13.415936 systemd[1]: Started cri-containerd-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195.scope. Oct 2 20:39:13.424769 systemd[1]: cri-containerd-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195.scope: Deactivated successfully. Oct 2 20:39:13.425084 systemd[1]: Stopped cri-containerd-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195.scope. Oct 2 20:39:13.452176 env[1332]: time="2023-10-02T20:39:13.452099527Z" level=info msg="shim disconnected" id=9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195 Oct 2 20:39:13.452384 env[1332]: time="2023-10-02T20:39:13.452181227Z" level=warning msg="cleaning up after shim disconnected" id=9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195 namespace=k8s.io Oct 2 20:39:13.452384 env[1332]: time="2023-10-02T20:39:13.452195728Z" level=info msg="cleaning up dead shim" Oct 2 20:39:13.460617 env[1332]: time="2023-10-02T20:39:13.460575515Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3766 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:39:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:39:13.460861 env[1332]: time="2023-10-02T20:39:13.460811318Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:39:13.461095 env[1332]: time="2023-10-02T20:39:13.461059421Z" level=error msg="Failed to pipe stderr of container \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\"" error="reading from a closed fifo" Oct 2 20:39:13.463065 env[1332]: time="2023-10-02T20:39:13.463028841Z" level=error msg="Failed to pipe stdout of container \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\"" error="reading from a closed fifo" Oct 2 20:39:13.467455 env[1332]: time="2023-10-02T20:39:13.467417987Z" level=error msg="StartContainer for \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:39:13.467699 kubelet[2498]: E1002 20:39:13.467678 2498 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195" Oct 2 20:39:13.467822 kubelet[2498]: E1002 20:39:13.467785 2498 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:39:13.467822 kubelet[2498]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:39:13.467822 kubelet[2498]: rm /hostbin/cilium-mount Oct 2 20:39:13.467822 kubelet[2498]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9qjqv,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:39:13.468098 kubelet[2498]: E1002 20:39:13.467831 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:39:14.156088 kubelet[2498]: I1002 20:39:14.156050 2498 scope.go:115] "RemoveContainer" containerID="009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd" Oct 2 20:39:14.156566 kubelet[2498]: I1002 20:39:14.156499 2498 scope.go:115] "RemoveContainer" containerID="009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd" Oct 2 20:39:14.158562 env[1332]: time="2023-10-02T20:39:14.158519530Z" level=info msg="RemoveContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" Oct 2 20:39:14.158859 env[1332]: time="2023-10-02T20:39:14.158700232Z" level=info msg="RemoveContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\"" Oct 2 20:39:14.158948 env[1332]: time="2023-10-02T20:39:14.158919535Z" level=error msg="RemoveContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\" failed" error="failed to set removing state for container \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\": container is already in removing state" Oct 2 20:39:14.159084 kubelet[2498]: E1002 20:39:14.159067 2498 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\": container is already in removing state" containerID="009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd" Oct 2 20:39:14.159162 kubelet[2498]: E1002 20:39:14.159104 2498 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd": container is already in removing state; Skipping pod "cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)" Oct 2 20:39:14.159603 kubelet[2498]: E1002 20:39:14.159582 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:39:14.170050 env[1332]: time="2023-10-02T20:39:14.170016450Z" level=info msg="RemoveContainer for \"009674c9f4d08d067c34a86eef105e20ce74501776674892b11fceadc65fc9dd\" returns successfully" Oct 2 20:39:14.370495 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195-rootfs.mount: Deactivated successfully. Oct 2 20:39:16.466000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:16.471871 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:39:16.471974 kernel: audit: type=1400 audit(1696279156.466:1400): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:16.466000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00184fe60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:16.509295 kernel: audit: type=1300 audit(1696279156.466:1400): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00184fe60 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:16.509382 kernel: audit: type=1327 audit(1696279156.466:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:16.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:16.527308 kernel: audit: type=1400 audit(1696279156.476:1401): avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:16.476000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:16.476000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263f680 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:16.560171 kubelet[2498]: W1002 20:39:16.560138 2498 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice/cri-containerd-9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195.scope WatchSource:0}: task 9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195 not found: not found Oct 2 20:39:16.566048 kernel: audit: type=1300 audit(1696279156.476:1401): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00263f680 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:16.476000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:16.584157 kernel: audit: type=1327 audit(1696279156.476:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:17.083000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.083000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a994f90 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.121110 kernel: audit: type=1400 audit(1696279157.083:1402): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7137 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.121211 kernel: audit: type=1300 audit(1696279157.083:1402): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a994f90 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.121240 kernel: audit: type=1327 audit(1696279157.083:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.083000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.087000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.155418 kernel: audit: type=1400 audit(1696279157.087:1403): avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.087000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a994fc0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.088000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7141 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.088000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00ab93320 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.088000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.088000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c002d40da0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.088000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.092000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7143 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.092000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00ab933e0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.092000 audit[2380]: AVC avc: denied { watch } for pid=2380 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:17.092000 audit[2380]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c002d40dc0 a2=fc6 a3=0 items=0 ppid=2235 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c9,c580 key=(null) Oct 2 20:39:17.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E3230302E382E3135002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265 Oct 2 20:39:17.474861 kubelet[2498]: E1002 20:39:17.474832 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:20.969000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:20.969000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002084640 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:20.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:20.969000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:20.969000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002084660 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:20.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:20.969000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:20.969000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0021b6100 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:20.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:20.969000 audit[2362]: AVC avc: denied { watch } for pid=2362 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6864 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:39:20.969000 audit[2362]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002084680 a2=fc6 a3=0 items=0 ppid=2196 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c837 key=(null) Oct 2 20:39:20.969000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:39:22.241594 env[1332]: time="2023-10-02T20:39:22.241544644Z" level=info msg="StopPodSandbox for \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\"" Oct 2 20:39:22.242079 env[1332]: time="2023-10-02T20:39:22.241647745Z" level=info msg="TearDown network for sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" successfully" Oct 2 20:39:22.242079 env[1332]: time="2023-10-02T20:39:22.241694746Z" level=info msg="StopPodSandbox for \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" returns successfully" Oct 2 20:39:22.242249 env[1332]: time="2023-10-02T20:39:22.242211651Z" level=info msg="RemovePodSandbox for \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\"" Oct 2 20:39:22.242324 env[1332]: time="2023-10-02T20:39:22.242258451Z" level=info msg="Forcibly stopping sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\"" Oct 2 20:39:22.242372 env[1332]: time="2023-10-02T20:39:22.242341352Z" level=info msg="TearDown network for sandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" successfully" Oct 2 20:39:22.251026 env[1332]: time="2023-10-02T20:39:22.250909039Z" level=info msg="RemovePodSandbox \"2657f723954515ab22ea91166da7451b8962bc40baa44fbc12cb22bdbde23866\" returns successfully" Oct 2 20:39:22.251638 env[1332]: time="2023-10-02T20:39:22.251610846Z" level=info msg="StopPodSandbox for \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\"" Oct 2 20:39:22.251752 env[1332]: time="2023-10-02T20:39:22.251681147Z" level=info msg="TearDown network for sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" successfully" Oct 2 20:39:22.251752 env[1332]: time="2023-10-02T20:39:22.251716747Z" level=info msg="StopPodSandbox for \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" returns successfully" Oct 2 20:39:22.252086 env[1332]: time="2023-10-02T20:39:22.252053850Z" level=info msg="RemovePodSandbox for \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\"" Oct 2 20:39:22.252173 env[1332]: time="2023-10-02T20:39:22.252084051Z" level=info msg="Forcibly stopping sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\"" Oct 2 20:39:22.252173 env[1332]: time="2023-10-02T20:39:22.252158152Z" level=info msg="TearDown network for sandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" successfully" Oct 2 20:39:22.263690 env[1332]: time="2023-10-02T20:39:22.263662168Z" level=info msg="RemovePodSandbox \"69c99dbb74468fbc3063da0f62669e1774e81d255cbce5699270ecab856c3b07\" returns successfully" Oct 2 20:39:22.476313 kubelet[2498]: E1002 20:39:22.476275 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:26.348686 kubelet[2498]: E1002 20:39:26.348643 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:39:27.478170 kubelet[2498]: E1002 20:39:27.478132 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:29.525730 update_engine[1317]: I1002 20:39:29.525674 1317 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:39:29.525730 update_engine[1317]: I1002 20:39:29.525720 1317 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:39:29.526324 update_engine[1317]: I1002 20:39:29.525889 1317 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:39:29.526520 update_engine[1317]: I1002 20:39:29.526489 1317 omaha_request_params.cc:62] Current group set to lts Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526687 1317 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526700 1317 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526721 1317 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526757 1317 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526830 1317 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526839 1317 omaha_request_action.cc:269] Request: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: Oct 2 20:39:29.527114 update_engine[1317]: I1002 20:39:29.526846 1317 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:39:29.527879 locksmithd[1407]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:39:29.528669 update_engine[1317]: I1002 20:39:29.528640 1317 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:39:29.528904 update_engine[1317]: I1002 20:39:29.528885 1317 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:39:30.575750 update_engine[1317]: I1002 20:39:30.575699 1317 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:39:30.576206 update_engine[1317]: I1002 20:39:30.575932 1317 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:39:30.576206 update_engine[1317]: I1002 20:39:30.576120 1317 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:39:30.660937 update_engine[1317]: I1002 20:39:30.660823 1317 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:39:30.662673 update_engine[1317]: I1002 20:39:30.662638 1317 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:39:30.662673 update_engine[1317]: I1002 20:39:30.662660 1317 omaha_request_action.cc:619] Omaha request response: Oct 2 20:39:30.662673 update_engine[1317]: Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832500 1317 omaha_request_action.cc:409] No update. Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832545 1317 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832552 1317 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832559 1317 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832564 1317 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832569 1317 update_attempter.cc:302] Processing Done. Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832592 1317 update_attempter.cc:338] No update. Oct 2 20:39:30.832635 update_engine[1317]: I1002 20:39:30.832607 1317 update_check_scheduler.cc:74] Next update check in 46m5s Oct 2 20:39:30.833170 locksmithd[1407]: LastCheckedTime=1696279170 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:39:32.479122 kubelet[2498]: E1002 20:39:32.479087 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:37.348584 kubelet[2498]: E1002 20:39:37.348477 2498 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-wwhzj_kube-system(01066006-41e9-40db-a2b3-a82f47b3ace9)\"" pod="kube-system/cilium-wwhzj" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 Oct 2 20:39:37.480604 kubelet[2498]: E1002 20:39:37.480575 2498 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:39:38.189156 sshd[3568]: pam_unix(sshd:session): session closed for user core Oct 2 20:39:38.190000 audit[3568]: USER_END pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:38.194378 systemd[1]: sshd@29-10.200.8.15:22-10.200.12.6:48306.service: Deactivated successfully. Oct 2 20:39:38.195342 systemd[1]: session-32.scope: Deactivated successfully. Oct 2 20:39:38.197207 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 20:39:38.197300 kernel: audit: type=1106 audit(1696279178.190:1412): pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:38.198427 env[1332]: time="2023-10-02T20:39:38.198395265Z" level=info msg="StopPodSandbox for \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\"" Oct 2 20:39:38.198780 env[1332]: time="2023-10-02T20:39:38.198750869Z" level=info msg="Container to stop \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:39:38.200324 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6-shm.mount: Deactivated successfully. Oct 2 20:39:38.202875 systemd-logind[1315]: Session 32 logged out. Waiting for processes to exit. Oct 2 20:39:38.203889 systemd-logind[1315]: Removed session 32. Oct 2 20:39:38.190000 audit[3568]: CRED_DISP pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:38.232899 kernel: audit: type=1104 audit(1696279178.190:1413): pid=3568 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.200.12.6 addr=10.200.12.6 terminal=ssh res=success' Oct 2 20:39:38.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:48306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:39:38.249179 kernel: audit: type=1131 audit(1696279178.193:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-10.200.8.15:22-10.200.12.6:48306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:39:38.252563 systemd[1]: cri-containerd-f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6.scope: Deactivated successfully. Oct 2 20:39:38.251000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:39:38.260013 kernel: audit: type=1334 audit(1696279178.251:1415): prog-id=129 op=UNLOAD Oct 2 20:39:38.263000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:39:38.270019 kernel: audit: type=1334 audit(1696279178.263:1416): prog-id=132 op=UNLOAD Oct 2 20:39:38.275203 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6-rootfs.mount: Deactivated successfully. Oct 2 20:39:38.352241 env[1332]: time="2023-10-02T20:39:38.352190330Z" level=info msg="shim disconnected" id=f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6 Oct 2 20:39:38.352241 env[1332]: time="2023-10-02T20:39:38.352241131Z" level=warning msg="cleaning up after shim disconnected" id=f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6 namespace=k8s.io Oct 2 20:39:38.352592 env[1332]: time="2023-10-02T20:39:38.352252731Z" level=info msg="cleaning up dead shim" Oct 2 20:39:38.361125 env[1332]: time="2023-10-02T20:39:38.361084815Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:39:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3803 runtime=io.containerd.runc.v2\n" Oct 2 20:39:38.361449 env[1332]: time="2023-10-02T20:39:38.361421918Z" level=info msg="TearDown network for sandbox \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" successfully" Oct 2 20:39:38.361551 env[1332]: time="2023-10-02T20:39:38.361447118Z" level=info msg="StopPodSandbox for \"f12dfb7b7092baba604fca401629fd776e51ba591f9151f43fed3decdd8f17c6\" returns successfully" Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.487961 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-lib-modules\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.488032 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cni-path\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.488079 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-clustermesh-secrets\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.488112 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-config-path\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.488144 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-run\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489137 kubelet[2498]: I1002 20:39:38.488177 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-kernel\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488211 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-bpf-maps\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488242 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-hostproc\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488272 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-xtables-lock\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488307 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-net\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488338 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-etc-cni-netd\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.489955 kubelet[2498]: I1002 20:39:38.488372 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-hubble-tls\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.490326 kubelet[2498]: I1002 20:39:38.488405 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-cgroup\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.490326 kubelet[2498]: I1002 20:39:38.488441 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9qjqv\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-kube-api-access-9qjqv\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.490326 kubelet[2498]: I1002 20:39:38.488476 2498 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-ipsec-secrets\") pod \"01066006-41e9-40db-a2b3-a82f47b3ace9\" (UID: \"01066006-41e9-40db-a2b3-a82f47b3ace9\") " Oct 2 20:39:38.491256 kubelet[2498]: I1002 20:39:38.490541 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491256 kubelet[2498]: I1002 20:39:38.490651 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491256 kubelet[2498]: I1002 20:39:38.490630 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-hostproc" (OuterVolumeSpecName: "hostproc") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491256 kubelet[2498]: I1002 20:39:38.490690 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491256 kubelet[2498]: I1002 20:39:38.490693 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491621 kubelet[2498]: I1002 20:39:38.490714 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cni-path" (OuterVolumeSpecName: "cni-path") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491621 kubelet[2498]: I1002 20:39:38.490723 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.491909 kubelet[2498]: W1002 20:39:38.491230 2498 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/01066006-41e9-40db-a2b3-a82f47b3ace9/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:39:38.495754 kubelet[2498]: I1002 20:39:38.495730 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:39:38.495911 kubelet[2498]: I1002 20:39:38.495895 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.496086 kubelet[2498]: I1002 20:39:38.496064 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.496208 kubelet[2498]: I1002 20:39:38.496192 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:39:38.497367 systemd[1]: var-lib-kubelet-pods-01066006\x2d41e9\x2d40db\x2da2b3\x2da82f47b3ace9-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:39:38.498486 kubelet[2498]: I1002 20:39:38.498455 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:39:38.502282 kubelet[2498]: I1002 20:39:38.502257 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:39:38.502650 kubelet[2498]: I1002 20:39:38.502629 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:39:38.503141 systemd[1]: var-lib-kubelet-pods-01066006\x2d41e9\x2d40db\x2da2b3\x2da82f47b3ace9-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:39:38.503266 systemd[1]: var-lib-kubelet-pods-01066006\x2d41e9\x2d40db\x2da2b3\x2da82f47b3ace9-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:39:38.508155 kubelet[2498]: I1002 20:39:38.508095 2498 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-kube-api-access-9qjqv" (OuterVolumeSpecName: "kube-api-access-9qjqv") pod "01066006-41e9-40db-a2b3-a82f47b3ace9" (UID: "01066006-41e9-40db-a2b3-a82f47b3ace9"). InnerVolumeSpecName "kube-api-access-9qjqv". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:39:38.508455 systemd[1]: var-lib-kubelet-pods-01066006\x2d41e9\x2d40db\x2da2b3\x2da82f47b3ace9-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9qjqv.mount: Deactivated successfully. Oct 2 20:39:38.588861 kubelet[2498]: I1002 20:39:38.588776 2498 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-hostproc\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.588861 kubelet[2498]: I1002 20:39:38.588864 2498 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-xtables-lock\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.588922 2498 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-net\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.588962 2498 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-etc-cni-netd\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589034 2498 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-hubble-tls\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589080 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-ipsec-secrets\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589122 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-cgroup\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589169 2498 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-9qjqv\" (UniqueName: \"kubernetes.io/projected/01066006-41e9-40db-a2b3-a82f47b3ace9-kube-api-access-9qjqv\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589212 2498 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cni-path\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589417 kubelet[2498]: I1002 20:39:38.589252 2498 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-lib-modules\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589700 kubelet[2498]: I1002 20:39:38.589295 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-config-path\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589700 kubelet[2498]: I1002 20:39:38.589343 2498 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/01066006-41e9-40db-a2b3-a82f47b3ace9-clustermesh-secrets\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589700 kubelet[2498]: I1002 20:39:38.589399 2498 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-bpf-maps\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589700 kubelet[2498]: I1002 20:39:38.589417 2498 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-cilium-run\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:38.589700 kubelet[2498]: I1002 20:39:38.589436 2498 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/01066006-41e9-40db-a2b3-a82f47b3ace9-host-proc-sys-kernel\") on node \"ci-3510.3.0-a-976d86eccd\" DevicePath \"\"" Oct 2 20:39:39.200574 kubelet[2498]: I1002 20:39:39.200544 2498 scope.go:115] "RemoveContainer" containerID="9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195" Oct 2 20:39:39.203889 env[1332]: time="2023-10-02T20:39:39.203831736Z" level=info msg="RemoveContainer for \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\"" Oct 2 20:39:39.206330 systemd[1]: Removed slice kubepods-burstable-pod01066006_41e9_40db_a2b3_a82f47b3ace9.slice. Oct 2 20:39:39.212664 env[1332]: time="2023-10-02T20:39:39.212620919Z" level=info msg="RemoveContainer for \"9dadfddce6ecac017aa0ef0745b6cea84f0f2eb46392f9ec5351dbf89ec6d195\" returns successfully" Oct 2 20:39:40.350897 kubelet[2498]: I1002 20:39:40.350854 2498 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=01066006-41e9-40db-a2b3-a82f47b3ace9 path="/var/lib/kubelet/pods/01066006-41e9-40db-a2b3-a82f47b3ace9/volumes"